Is it possible to have TAXII or STIX generic miners for internal custom feeds? We are exploring the data sharing between different vendors for our internal environment and instead of waiting for the vendor to come up with the integration, rely on external standard feed. If yes then how?
Thanks in advance!
it is definitely possible to use MineMeld as a TAXII hub to plug all your internal vendors. You should create a TAXII miner for each vendor, attach them to a generic processor and, finally, connect the processor to a TAXII outputter.
Something like the schema bellow.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The Live Community thanks you for your participation!