TAXII 2.1

Threat Intelligence

Live Fast-Flux Cyber Threat Intelligence

Real-time TAXII 2.1 feeds compatible with all major SIEM platforms. Track Fast Flux actors, Nation-State actors, and more. Seamlessly integrate with Microsoft Sentinel or any other SIEM.

Live Cyber Threat Map

0
Threats Detected (this session)
Top 5 Threat Actor Countries (this session)

    Microsoft Sentinel Integration

    Connect Microsoft Sentinel to our TAXII feeds with the built-in connector

    Microsoft Sentinel Integration

    Screenshot available on main site

    MITRE TAXII Feed Configuration

    Easy setup with any TAXII 2.1 compatible SIEM platform

    TAXII Feed Configuration

    Screenshot available on main site

    Available Feeds

    TAXII 2.1 Configuration

    Simply enter our API Root URL and specify the Collection ID to pull in real-time indicators.

    API Root: https://cti.cyberautomation.com.au/taxii/

    Collections:

    Free vs Premium Feeds

    We offer both free threat feeds and premium, high-quality feeds for advanced data.

    Free Feeds

    • Basic Fast Flux detection
    • MITRE ATT&CK frameworks
    • Standard IoC updates
    • Community threat data

    Premium Feeds

    • Enriched IoCs with context
    • Enhanced correlation data
    • Threat actor attributions
    • Priority SOC-grade intel

    Subscribe to Premium Feeds

    Get access to enriched indicators, enhanced correlation, and threat actor attributions for enterprise SOCs.

    Subscribe to Premium Feeds

    Explore All Products

    See how all Cyber Automation products work together to secure your entire infrastructure.

    Back to Product Overview