TAXII feeds

The TAXII feeds deliver threat intelligence in STIX format via the TAXII 2.1 protocol, enabling integration with third-party platforms like OpenCTI.

Common Use Cases

Get ransomware indicators

• Ransomware Indicators TAXII Feeds (TCTF-0001 + TCTF-0002) - Curated ransomware IOCs including files, C2 infrastructure, and payload delivery URLs. Available in Full and Lite versions.

Get organization-specific indicators

• Networking Indicators TAXII Feeds - Flexible Intel Feed API (TCTF-0003) - Personalized IOC feed based on your organization's submissions to Spectra Intelligence, enriched with ReversingLabs context.

All TAXII Feeds

📄️ Flexible Intel Feed API - Networking Indicators TAXII (TCTF-0003)

API documentation for querying the Flexible Intel Feed via TAXII 2.1

📄️ Ransomware Indicators TAXII Feeds (TCTF-0001 + TCTF-0002)

Spectra Intelligence TCTF-0001-0002 delivers curated ransomware IOCs including files, C2, and payload URLs