IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Expand all | Collapse all

Xforce TAXII/STIX feed TOR nodes

  • 1.  Xforce TAXII/STIX feed TOR nodes

    Posted Fri August 07, 2020 03:51 PM

    Hi All,

    Hoping this is the right place to ask this sort of question. We were trying to figure out a way to get current known TOR exit nodes into the QRadar on Cloud intelligence feeds. Seems there isn't an easy way to scrape the text file from sites that host them so, two questions:

    1. Does anyone know if the Xforce TAXII feed contains this information already?
    2. A way to scrape/import this information automatically on a 30 minute schedule to keep the QROC console up to date?

    Cheers,

    John



    #QRadar
    #Support
    #SupportMigration


  • 2.  RE: Xforce TAXII/STIX feed TOR nodes

    Posted Wed April 28, 2021 12:41 PM