Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Milica_Spasic
Explorer

IOC import

Hi,

I have tried to import IoC downloaded from IBM xforce exchange web site in order to prevent some malicious activities, but if had failed. I'm using stix format (example file is attached). I receive following error:

Our management is on 80.20 version.

Any idea what couses the problem?

Kind regards,

Milica

2 Replies
PhoneBoy
Admin
Admin

Is it the R80.20 EA or R80.20.M1?

Anyway, the errors seem to be somewhat obvious:

  • Several fields in the XML file aren't supported by us--those are ignored.
  • Since confidence, severity, and product aren't included in this XML (which we use), we specify defaults.
  • From this file, it seems we cannot determine the IOCs, or it's not in the format we expect.

Assuming it's R80.20.M1, I would open a TAC case.

0 Kudos
Milica_Spasic
Explorer

Thank you, Dameon. I saw that some filds were not supported. But was confused where is the exact problem, because they file should be standardized. 

We will open the case. 

Regards, 

Milica

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events