Skill UI

Learn how to build and share structured threat intelligence objects, including indicators, malware, and campaigns, using the stix2 Python library. This guide details publishing data via the TAXII 2.1 protocol, making it essential for developing threat intelligence platforms, automating IOC exchange, and creating machine-readable reports for ISAC/ISAO communities.

Learn how to deploy and configure a TAXII 2.1 server using OpenTAXII and Medallion. This guide covers publishing STIX 2.1 bundles, managing collections for various threat feeds, and integrating the resulting data stream with SIEM/SOAR platforms to automate the exchange of cyber indicators between organizations.