Threat Intel3 d ago
TAXII Pagination: Sync Without Losing Feed Additions
Separate added_after, date_added, and modified, then test cursors, object versions, and crash recovery in a TAXII 2.1 client.
5 min read
API2026-09-02
isMalicious API: Make Your First Reliable IOC Lookup
Call the current isMalicious IOC endpoint safely, handle failures, log useful evidence, and move from a terminal test to production.
7 min read
Threat Intel2026-09-02
TAXII Threat Feeds: Build a Continuous SIEM Integration
Connect an isMalicious TAXII collection to your SIEM with safe pagination, durable checkpoints, validation, monitoring, and recovery.
6 min read
Threat Intel2026-04-26
IOC Enrichment APIs: A Security Operations Guide to Faster Triage, Fewer False Positives, and Measurable ROI
An indicator without context is a ticket without an owner. Learn how IOC enrichment APIs work, which fields SOC teams need at each tier, and how to wire them into case management without building a data swamp.
6 min read