TAXII feeds
The TAXII feeds deliver threat intelligence in STIX format via the TAXII 2.1 protocol, enabling integration with third-party platforms like OpenCTI.
Common Use Cases
Get ransomware indicators
- Ransomware Indicators TAXII Feeds (TCTF-0001 + TCTF-0002) - Curated ransomware IOCs including files, C2 infrastructure, and payload delivery URLs. Available in Full and Lite versions.
Get organization-specific indicators
- Networking Indicators TAXII Feeds - Flexible Intel Feed API (TCTF-0003) - Personalized IOC feed based on your organization's submissions to Spectra Intelligence, enriched with ReversingLabs context.
All TAXII Feeds
📄️ Networking Indicators TAXII Feeds - Flexible Intel Feed API (TCTF-0003)
API documentation for querying the Flexible Intel Feed via TAXII 2.1
📄️ Ransomware Indicators TAXII Feeds (TCTF-0001 + TCTF-0002)
This page provides an overview of the ReversingLabs Ransomware Indicators Feed (TCTF-0001) and the Ransomware Indicators Lite Feed (TFTF-0002), collectively referred to as the “ransomware feed” throughout this page.