Importing Threat Intelligence Feeds

In addition to the growing list of the pre-integrated Threat Intelligence Feeds that IDSTower support, it also support adding custom Threat Intelligence Feeds that uses both industry standard formats and generic formats.

Currently, the following feeds formats are supported:

• TAXII/STIX Feeds

• MISP Feeds (MISP events Exported as json files)

• MISP API

• Generic Text feeds

• Generic CSV feeds

• Generic json feeds

For what the authentication types and import settings mean, how often feeds are updated and what happens when an update fails, see Feed Settings, Schedule and Failures.