AlienVault OTX TAXII Feed

Question

Hi everyone.I am trying to integrate AlienVault's OTX TAXII feed as a data connector, and I keep getting "unexpected" errors. Has anyone had success with this or other TAXII feeds?Thanks!&nbsp;

pawel_giza · Answer

MikeShorts&nbsp;I successfully connected it using playbook, you can find it on github repo

mikeshorts · Answer

Pawel_Giza&nbsp;I'll check it out. Thank you!

kevin lovegrove · Answer

Pawel_Giza&nbsp;Good morning. Do you have a direct link for that please?Thank you kindly.

printscreen · Answer

Kevin Lovegrove&nbsp;below are resources which i belive in Github repo for alientVault,&nbsp;https://github.com/Azure/Azure-Sentinel/tree/master/Playbooks/Get-AlienVault_OTX&nbsp;and a very good article about the same&nbsp;Ingesting Alien Vault OTX Threat Indicators into Azure Sentinel - Microsoft Tech Community&nbsp;Hope it helps

printscreen · Answer

Kevin Lovegrove&nbsp;Below is the Github direct link for AlientVault i believe,&nbsp;Ingesting Alien Vault OTX Threat Indicators into Azure Sentinel - Microsoft Tech Community&nbsp;and a very good article about the same&nbsp;Ingesting Alien Vault OTX Threat Indicators into Azure Sentinel - Microsoft Tech Community&nbsp;hope it helps

Forum Discussion

AlienVault OTX TAXII Feed

7 Replies

Resources