Question

A security operations team at a financial institution wants to automatically ingest indicators of compromise (IOCs) from an industry ISAC (Information Sharing and Analysis Center) into their threat intelligence platform. They need a standardized way to both structure the threat data and transport it between organizations over HTTPS. Which combination of standards should they implement?

Accepted Answer

STIX for structuring the threat information and TAXII for transporting it between the ISAC and the platform

Answer

SNMP for structuring the threat information and NetFlow for transporting it between the ISAC and the platform

Answer

TAXII for structuring the threat information and STIX for transporting it between the ISAC and the platform

Answer

SYSLOG for structuring the threat information and SCP for transporting it between the ISAC and the platform