All Apps and Add-ons

Test Server for Splice - STIX TAXII CybOX

j666gak
Communicator

Hi, I have installed the Splice app and have it working for local IOC files. However I want to get it work with TAXII, and remotely IOCs.

Is anybody aware of a of a test server which can be subscribed to for picking up IOCs?

Tags (1)
0 Karma

cleroux_splunk
Splunk Employee
Splunk Employee

since the first answer, SPLICE has been successfully tested with http://www.hailataxii.com feeds (-:

CSmoke
Path Finder
0 Karma

cleroux_splunk
Splunk Employee
Splunk Employee

I’m not aware of any public TAXII feed except the Yeti test server from MITRE (http://taxiitest.mitre.org/) which allows to test a basic TAXII communication (http only).

Other projects that may interest you :
- MISP - https://github.com/MISP/MISP
- CRITS - https://crits.github.io
- Solra - http://www.soltra.com (formerly known as Avalanche)
- and probably others I forgot

Get Updates on the Splunk Community!

Exporting Splunk Apps

Join us on Monday, October 21 at 11 am PT | 2 pm ET!With the app export functionality, app developers and ...

Cisco Use Cases, ITSI Best Practices, and More New Articles from Splunk Lantern

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Build Your First SPL2 App!

Watch the recording now!.Do you want to SPL™, too? SPL2, Splunk's next-generation data search and preparation ...