Skip to content

Instantly share code, notes, and snippets.

@ag-michael
Last active July 29, 2020 04:00
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save ag-michael/54736e6d972f17e7e4b7ab7e70f4c3f2 to your computer and use it in GitHub Desktop.
Save ag-michael/54736e6d972f17e7e4b7ab7e70f4c3f2 to your computer and use it in GitHub Desktop.
AlienVault config for MISP TAXII feed
# Name for the feed
- name: 'AlienVault'
# Hostname/Domain - cannot be a URL
host: 'otx.alienvault.com'
port: 443
# Discovery/Inbox path, usually documented on the TAXII service's site.
discovery_path: /taxii-discovery-service/
inbox_path: /taxii-data
rate_limit: 2
rate_limit_threshold: 2
use_https: True
taxii_version: '1.1'
headers:
# Username/Password - For alienvault, this should include any dummy password
auth:
username: "<api key>"
password: "foo"
# The taxii collections you wish to subscribe to
# Use the following to discover collections:
# taxii-collections --username yourusername --password 'yourpassword' --path https://<some-domain>/api/taxii/collections
collections:
- user_AlienVault
- user_343GuiltySpark
- user_AAli1
- user_AlienVault
- user_AmiraMohammad
- user_Coretelligent-OTX
- user_Cyber_Hat
- user_Julznova
- user_M00se+Squ1rrel
- user_QuadeKaygusuz
- user_Sand-Storm
- user_dekaRituraj
- user_drexx001
- user_mag
- user_nsmteam
- user_otxrobottwo_testing
- user_pswapneel
- group_34
- group_77
- group_76
- group_64
- group_66
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment