Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Integrate QRadar with Alienvault OTX TAXII Feed #12

Open
Simmens opened this issue Jun 13, 2018 · 1 comment
Open

Integrate QRadar with Alienvault OTX TAXII Feed #12

Simmens opened this issue Jun 13, 2018 · 1 comment

Comments

@Simmens
Copy link

Simmens commented Jun 13, 2018

I am currently trying to integrate the TAXII Feed provided by Alienvault OTX into QRadar.
Now I have the problem that no IOCs are retrieved from the TAXII server.

The setup is "working", I followed the instructions described in this link: https://otx.alienvault.com/api.

The feed is shown in the list of taxii feeds in Qradar, bus just isn't polled in regular intervalls and nothing is being retrieved.

Has anyone had the same issue before? And how do you select which type of IOC you want to get (IPv4, domains, etc.), because how I see it, you can only select the default Alienvault Feed (still doesn't get me anything).

Thanks

@amiperl
Copy link

amiperl commented Oct 24, 2019

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants