TAXII Feeds — Spectra Intelligence

The TAXII feeds deliver threat intelligence in STIX format via the TAXII 2.1 protocol, enabling integration with third-party platforms like OpenCTI.

Common Use Cases

Get ransomware indicators

• Ransomware Indicators TAXII Feeds (TCTF-0001) - Curated ransomware IOCs including files, C2 infrastructure, and payload delivery URLs.

Get organization-specific indicators

• Networking Indicators TAXII Feeds - Flexible Intel Feed API (TCTF-0003) - Personalized IOC feed based on your organization's submissions to Spectra Intelligence, enriched with ReversingLabs context.

All TAXII Feeds

📄️TCTF-0003 — Flexible Intel Feed (TAXII)

Query the Spectra Intelligence Flexible Intel Feed (TCTF-0003) over TAXII 2.1 for private STIX 2.1 IOCs derived only from your own submissions.

📄️TCTF-0001 — Ransomware Indicators TAXII Feed

Consume TCTF-0001 for curated ransomware IOCs via TAXII 2.1 in STIX format, including ransomware files, C2 infrastructure, and payload download URLs.