This use case profile describes how one organization can share an IP watchlist (list of IPs that may be malicious) with another organization via a list of STIX indicators. It does not describe how to return sightings or provide feedback on the indicators.
Version: 0.1draft
ID: ipwatchlist
STIX Version: 2.0
TAXII Version: 2.0