AlienVault OTX TAXII Feed

%3CLINGO-SUB%20id%3D%22lingo-sub-1877695%22%20slang%3D%22en-US%22%3EAlienVault%20OTX%20TAXII%20Feed%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1877695%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20everyone.%3C%2FP%3E%3CP%3EI%20am%20trying%20to%20integrate%20AlienVault's%20OTX%20TAXII%20feed%20as%20a%20data%20connector%2C%20and%20I%20keep%20getting%20%22unexpected%22%20errors.%20Has%20anyone%20had%20success%20with%20this%20or%20other%20TAXII%20feeds%3F%3C%2FP%3E%3CP%3EThanks!%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1880003%22%20slang%3D%22en-US%22%3ERe%3A%20AlienVault%20OTX%20TAXII%20Feed%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1880003%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F865745%22%20target%3D%22_blank%22%3E%40MikeShorts%3C%2FA%3E%26nbsp%3BI%20successfully%20connected%20it%20using%20playbook%2C%20you%20can%20find%20it%20on%20github%20repo%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2113617%22%20slang%3D%22en-US%22%3ERe%3A%20AlienVault%20OTX%20TAXII%20Feed%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2113617%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F738814%22%20target%3D%22_blank%22%3E%40Pawel_Giza%3C%2FA%3E%26nbsp%3BGood%20morning.%20Do%20you%20have%20a%20direct%20link%20for%20that%20please%3F%3CBR%20%2F%3EThank%20you%20kindly.%3C%2FP%3E%3C%2FLINGO-BODY%3E
New Contributor

Hi everyone.

I am trying to integrate AlienVault's OTX TAXII feed as a data connector, and I keep getting "unexpected" errors. Has anyone had success with this or other TAXII feeds?

Thanks! 

6 Replies

@MikeShorts I successfully connected it using playbook, you can find it on github repo

@Pawel_Giza I'll check it out. Thank you!

@Pawel_Giza Good morning. Do you have a direct link for that please?
Thank you kindly.

@Kevin Lovegrove below are resources which i belive in Github repo for alientVault,

 

Azure-Sentinel/Playbooks/Get-AlienVault_OTX at master · Azure/Azure-Sentinel · GitHub

 

and a very good article about the same Ingesting Alien Vault OTX Threat Indicators into Azure Sentinel - Microsoft Tech Community

 

Hope it helps

@printscreen 

Thank you kindly.