跳到主要内容
知仓学习社ZHICANG

STIX_TAXII Intelligence Skill

STIX/TAXII threat intelligence format and sharing

不碰外部(只输出文字)无严重或高危命中a5c-ai/babysitter

它会碰到什么

扫了多少2 个文本文件,2 KB
它会碰到什么不碰外部(只输出文字)
命中总数0 处
命中统计严重 0 · 高 0 · 中 0 · 低 0

这一栏是扫描器报的事实,不是结论。命中多不等于有毒(安全工具、规则库、示例脚本本来就会包含危险写法),命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系,需要你自己看。

技能内容

STIX/TAXII Intelligence Skill

Overview

This skill provides STIX/TAXII threat intelligence format creation, querying, and sharing capabilities.

Capabilities

  • Create STIX 2.1 bundles
  • Query TAXII servers
  • Generate threat reports
  • Create indicator relationships
  • Map to MITRE ATT&CK
  • Support OpenIOC format
  • Validate STIX syntax
  • Share intelligence feeds

Target Processes

  • threat-intelligence-research.js
  • malware-analysis.js
  • security-advisory-writing.js

Dependencies

  • stix2 library (Python)
  • taxii2-client
  • Python 3.x
  • TAXII server access (optional)

Usage Context

This skill is essential for:

  • Threat intelligence sharing
  • IOC standardization
  • Intelligence feed management
  • Threat report generation
  • Intelligence correlation

Integration Notes

  • Supports STIX 2.0 and 2.1
  • Can publish to TAXII servers
  • Integrates with MISP
  • Supports multiple IOC formats
  • Can generate human-readable reports

想直接用这个技能?

本站把开放许可(MIT / Apache 等)的技能按仓库打包整理到网盘,点一下转存到你自己的网盘,不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接,不打包。