Forum Discussion
JKatzmandu
Aug 05, 2020Brass Contributor
Another TAXII Query
Hello everyone! We've set up a TAXII data source and TI with some success. I'm curious; how often does the TAXII connector reach out to Anomali (or any other provider) and refresh the data? Shoul...
JBUB_Accelerynt
Aug 07, 2020Brass Contributor
JKatzmandu We have support tickets open with MS on the similar issue. I don't think it's a TAXII issue. It's a TI logging issue. We can generate new IOCs in the TiIndicators via the api, but they dont always show up in the logs. Something is not working for sure.
lwallimann
Oct 21, 2020Copper Contributor
JBUB_Accelerynt Do you have more information out of the support ticket? We are facing similar issues, I see the indicators on the Threat intelligence page but not in the Log. Also in the TAXII connector the Last Log Received is -- I think somithing is still not working as expected...
- JKatzmanduNov 06, 2020Brass Contributor
With a few of my customers things seem to be magically working on their own. At least some of the data has an "expiration date" as a field and it gets updates over time.