We use cookies to improve your experience. Do you accept?

Smooth, Improved Cyber Threat Intel Exchange with STIX 2.0 Support

Smooth, Improved Cyber Threat Intel Exchange with STIX 2.0 Support - Featured Image

STIX 2.0 • Jun 8, 2018

Cyware Threat Intelligence eXchange (CTIX) is a centralized and unparalleled intelligence sharing platform platform that aggregates data from STIX/TAXII based feeds and non-standard data sources such as email. Constantly challenging the security status quo and staying ahead of the curve, CTIX leverages an AI analyzer to reduce noise, and uses machine learning to draw key correlations between attackers and their campaigns. To ensure no valuable threat intel is overlooked and unheeded, CTIX has now been made compliant with the latest version of Structured Threat Information eXpression or commonly known as STIX 2.0 - the latest version of the structured language used to share cyber threat intelligence in a consistent and machine readable manner.

Using this enhanced industry standard, CTIX users can clearly define, describe and share threats with their fellow security colleagues across any industry, sector and country in an automated manner. Security analysts can leverage this standard to communicate indicators of compromise (IOCs), tactics, techniques and procedures (TTPs), malware attributes, victim characteristics and other key aspects of the cyberattack chain with clarity whilst avoiding any miscommunication, error or loss of information.

CTIX supports STIX 2.0 as well as previous STIX versions (1.x) to ensure users can easily share, receive and analyze threat data regardless of the version they use and prefer.

For instance, a security analyst who uses the newly redesigned STIX 2.0 can swiftly share research on the notorious VPNFilter malware with his trusted network of colleagues who use the same version as well. However, if one of his peers still uses STIX 1.2.1, they will be able to receive and analyze the IoCs using their CTIX platform. To read and analyze the received threat intel, they can simply translate it to their version or free text using CTIX’s STIX converter tool.

Alternatively, if the security analyst receives new information about North Korean hacking group Covellite’s recent tactical shift away from US targets in an email, he can use the STIX converter tool to readily translate the email containing IOCs to STIX 2.0, or earlier versions of STIX, to be shared with his counterparts.

There are very few threat intelligence tools or services that support STIX 2.0 this early in the game that offer a simple and flexible converting solution as CTIX does. However, we have added this capability because we believe staying ahead of the curve is crucial to expeditiously tackle threats as the cyber landscape continues to rapidly evolve.

Deploying CTIX, now-equipped with the significantly improved and efficient STIX 2.0, can improve an organization’s interoperability and capability to share valuable threat intel efficiently in real-time. It also spurs advanced threat analysis and enriches the data being shared across versions, systems and platforms. Staying up-to-date with the latest versions of STIX also reduces the chance of any new threats going unnoticed or unexplored simply because there is a gap in communication or no tool available to do it for you.

Related Blogs

Maximize Threat Intelligence Value with Custom Scores in Intel Exchange - Featured Image

Maximize Threat Intelligence Value with Custom Scores in Intel Exchange

The ability to prioritize and efficiently handle threats is paramount. Cyware’s [Intel Exchange](https://cyware.com/products/threat-intelligence-exchange) enhan

Threat intelligenceCTIXIntel ExchangeIntel Exchange (CTIX)
Threat Intelligence Must be for Everyone - Featured Image

Threat Intelligence Must be for Everyone

At a recent Google Cloud security event, Jayce Nichols, Google’s director of adversary operations discussed threat intelligence and was quoted as saying, “If yo

Threat intelligenceCyber Threat Intelligence
IOC Ingestion Made Easy with CTIX-Slack Integration - Featured Image

IOC Ingestion Made Easy with CTIX-Slack Integration

Cyware has integrated its threat intelligence exchange platform, [Intel Exchange (CTIX)](https://cyware.com/products/threat-intelligence-platform) with the popu

CTIXCTIX/Slack IntegrationCTIX/Slack
Analyze Malicious Files in a Sandboxing Environment with Cyware’s Intel Exchange (CTIX) - Featured Image

Analyze Malicious Files in a Sandboxing Environment with Cyware’s Intel Exchange (CTIX)

Sandboxing provides a safe environment where security teams can detonate malicious programs, files, or URLs to analyze and observe their behavior. With the rele

SandboxingCTIXThreat Analysis
Threat Intelligence As A Service - Featured Image

Threat Intelligence As A Service

## **An Attractive MSSP Revenue Opportunity** Your organization has many options for assessing potential threat data, and there are so many threat intelligenc

Threat Intelligence-as-a-ServiceCTIXThreat Intelligence PlatformManaged Security Service Providers (MSSPs)
Gain 360-Degree Insights into Threat Data with Cyware’s Revamped Threat Data Capabilities - Featured Image

Gain 360-Degree Insights into Threat Data with Cyware’s Revamped Threat Data Capabilities

If security teams fail to gain the required context from the ingested threat data for predicting and preempting threats, then such threat data is meaningless. W

Use CaseThreat DataCyware Threat Intelligence Exchange (CTIX)
#BeCyberSmart: How Threat Intel Sharing is Making Organizations Safer? - Featured Image

#BeCyberSmart: How Threat Intel Sharing is Making Organizations Safer?

October is the month where most of us are excited to plan our fun Halloween celebrations. However, we also celebrate it as Cybersecurity Awareness Month, which

Threat Intel SharingCybersecurity Awareness Month.Collective DefenseCyber Threat Intelligence
Are you a small team facing increased cyber risk? Boost your security posture with greater access to threat intelligence. Here's how. - Featured Image

Are you a small team facing increased cyber risk? Boost your security posture with greater access to threat intelligence. Here's how.

A modern cybersecurity stack consists of many different tools. These tools range from conventional preventive defenses like antivirus and firewalls to response-

Threat Intelligence PlatformCyber Threat Intelligence
The Role of Threat Intelligence Sharing in Collective Defense - Featured Image

The Role of Threat Intelligence Sharing in Collective Defense

492 BC - The Battle of Marathon was to begin. After 9 days of waiting for the other side to attack, the Athenians directly charged the Persians in a Phalanx for

Threat intelligenceCTIXCyware Threat Intelligence Exchange (CTIX)Collective Defense
Cyware Adds STIX 2.1 Support for Custom Threat Intelligence Feeds - Featured Image

Cyware Adds STIX 2.1 Support for Custom Threat Intelligence Feeds

**What is STIX 2.1?** [STIX](https://oasis-open.github.io/cti-documentation/stix/intro.html) is a language and serialization format that enables organizati

STIX 2.0STIX 1.xCyware Threat Intelligence Exchange (CTIX)STIX 2.1
How to Leverage Threat Intelligence for Effective Vulnerability Management - Featured Image

How to Leverage Threat Intelligence for Effective Vulnerability Management

Security teams deal with many operational activities on a daily basis that are time-sensitive in nature. One such key activity is vulnerability management. Ever

Cyber Fusion and Threat ResponseCyware Threat Intelligence Exchange (CTIX)Cyber Threat Intelligencevulnerability management
Stop Threat Actors at an Early Stage of the Attack Lifecycle with Threat Intelligence and Hunting - Featured Image

Stop Threat Actors at an Early Stage of the Attack Lifecycle with Threat Intelligence and Hunting

Cyberattacks, unlike physical crime, can span over a long period of time without the knowledge of the targeted victims. Threat actors diligently aim to hide the

Threat HuntingCyber Threat IntelligenceCyber Attack Lifecycle