Files
Anthropic-Cybersecurity-Skills/skills/implementing-stix-taxii-feed-integration/assets/template.md
T

1.2 KiB

STIX/TAXII Feed Integration Report Template

Feed Configuration

Field Value
TAXII Server
API Root
Collection ID
Collection Name
Last Poll Timestamp
Authentication API Key / Basic / Certificate

Discovery Summary

Metric Count
API Roots
Collections (Read)
Collections (Write)

Poll Results

Metric Count
Total Objects Fetched
New Since Last Poll
Indicators
Malware
Threat Actors
Attack Patterns
Relationships
Observables

Extracted IOCs

Network Indicators

Type Value Confidence Valid From Valid Until
IP
Domain
URL

File Indicators

Hash Type Value Confidence Associated Malware
SHA-256
MD5

Integration Status

Downstream System Status Records Pushed
SIEM (Splunk/Elastic) Success/Failed
MISP Success/Failed
OpenCTI Success/Failed
Firewall Blocklist Success/Failed