[backend/frontend] Introduce TAXII push endpoints #9471
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Concept here is to offer a way for OpenCTI to receive POST request compliant with TAXII https://docs.oasis-open.org/cti/taxii/v2.1/os/taxii-v2.1-os.html
You can create in the UI some TAXII push definition that will open a dedicated queue for TAXII push.
Example of push
POST http://localhost:3000/taxii2/root/collections/5900ea97-db72-4ecb-8f1e-c8583deb746a/objects
JSON Body
JSON response
Stix 2 or 2.1 is supported
Id can then be used to get the integration job statistic as defined in the TAXII specification.
GET http://localhost:3000/taxii2/root/status/work_0724b040-e9a6-59dd-877d-e8edb098b4cc_2024-12-27T14:53:17.605Z
Taxii Push listing
Taxii push virtual connector