Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Not Answered
  • Replies 13 replies
  • Subscribers 45 subscribers
  • Views 1775 views
  • Users 0 members are here
Options
Suggested

v21 Third Party Feeds

m8ey-au

Hey all

With v21 accepting third party feeds I was hoping toi ingest the CTIS data from the ACSC but its in STIX format and the v21 only supports IoC one per line format.

I have found a couple of IP Lists to pull threat data from to add.

TorNodes for all Tor related IPs and also TALOS have a feed (both have about 1200-1500 IPS) - I can share the URL if needed but the forum blocks me if I post thgem :-0

What other feeds do you have or are looking to add?



Edited TAGs
[edited by: Erick Jan at 12:24 AM (GMT -7) on 23 Oct 2024]
Parents
  • 0

    Looking at the Talos URL, there is a generic URL that then redirects to the another URL, within XG v21 talosintelligence.com/documents/ip-blacklist isn't pulling a list.  I've left off the https on purpose.

    Some of the other items I'm looking at were previously on pfblockerng within pfsense.  Need to look at Crowdsec and GreyNoise more

Reply
  • 0

    Looking at the Talos URL, there is a generic URL that then redirects to the another URL, within XG v21 talosintelligence.com/documents/ip-blacklist isn't pulling a list.  I've left off the https on purpose.

    Some of the other items I'm looking at were previously on pfblockerng within pfsense.  Need to look at Crowdsec and GreyNoise more

Children
No Data
Unfiltered HTML