TAXII

This article provides data mappings for data created in ThreatConnect from a Structured Threat Information eXpression (STIX) file parsed using the STIX 2.1 Parser Job App.

The Structured Threat Information eXpression (STIX) and CybOX parser data mappings provided in this article apply to the STIX 1.1.1 parser when configuring an inbound TAXII feed, as well as to the STIX Parser Playbook app in ThreatConnect.