All Apps and Add-ons

Test Server for Splice - STIX TAXII CybOX

j666gak
Communicator

Hi, I have installed the Splice app and have it working for local IOC files. However I want to get it work with TAXII, and remotely IOCs.

Is anybody aware of a of a test server which can be subscribed to for picking up IOCs?

Tags (1)
0 Karma

cleroux_splunk
Splunk Employee
Splunk Employee

since the first answer, SPLICE has been successfully tested with http://www.hailataxii.com feeds (-:

CSmoke
Path Finder
0 Karma

cleroux_splunk
Splunk Employee
Splunk Employee

I’m not aware of any public TAXII feed except the Yeti test server from MITRE (http://taxiitest.mitre.org/) which allows to test a basic TAXII communication (http only).

Other projects that may interest you :
- MISP - https://github.com/MISP/MISP
- CRITS - https://crits.github.io
- Solra - http://www.soltra.com (formerly known as Avalanche)
- and probably others I forgot

Get Updates on the Splunk Community!

Synthetic Monitoring: Not your Grandma’s Polyester! Tech Talk: DevOps Edition

Register today and join TekStream on Tuesday, February 28 at 11am PT/2pm ET for a demonstration of Splunk ...

Instrumenting Java Websocket Messaging

Instrumenting Java Websocket MessagingThis article is a code-based discussion of passing OpenTelemetry trace ...

Announcing General Availability of Splunk Incident Intelligence!

Digital transformation is real! Across industries, companies big and small are going through rapid digital ...