TAXII Feeds — Spectra Intelligence

The TAXII feeds deliver threat intelligence in STIX format via the TAXII 2.1 protocol, enabling integration with third-party platforms like OpenCTI.

Common Use Cases

Get ransomware indicators

• Ransomware Indicators TAXII Feeds (TCTF-0001 + TCTF-0002) - Curated ransomware IOCs including files, C2 infrastructure, and payload delivery URLs. Available in Full and Lite versions.

Get organization-specific indicators

• Networking Indicators TAXII Feeds - Flexible Intel Feed API (TCTF-0003) - Personalized IOC feed based on your organization's submissions to Spectra Intelligence, enriched with ReversingLabs context.

All TAXII Feeds

📄️ TCTF-0003 — Flexible Intel Feed (TAXII)

Query the Spectra Intelligence Flexible Intel Feed (TCTF-0003) via TAXII 2.1 to receive private STIX 2.1 IOCs scoped to your account's submissions, with OpenCTI integration support.

📄️ TCTF-0001-0002 — Ransomware Indicators TAXII Feeds

Consume TCTF-0001/0002 for curated ransomware IOCs via TAXII 2.1 in STIX format, including ransomware files, C2 infrastructure, and payload download URLs.