An independent tool index
for incident response teams
Documented STIX data handling. Import, export and supported versions vary by tool.
Filter these toolsEach entry describes the documented operation and links to its source. A format reference, an optional connector and built-in execution are different capabilities. Check the note before shortlisting.
Confirm your product version, edition, connector and access requirements in the upstream instructions. These listings record documentation, not a tested configuration. Read the evidence standard.
6 tools with documented STIX support.
Threat intelligence · Luxembourg
Read the tool profileImports and exports STIX 1.1.1, 1.2, 2.0 and 2.1 through the MISP-STIX converter used by MISP core. Conversion uses mapped object types; it is not a guarantee of lossless exchange.
Threat intelligence · France
Read the tool profileExposes STIX 2.1 data through filtered live streams using HTTP server-sent events. Stream connectors can consume create, update and delete events.
Threat intelligence · Netherlands
Read the tool profileImports and exports STIX 2.1 through configured TAXII feeds. Modified entities may receive new STIX IDs on export; the documented extension does not fully preserve STIX object versioning.
Detection and monitoring · France
Read the tool profileThe optional OpenCTI HarfangLab Intel connector converts selected STIX indicator patterns into IOC rules for IP addresses, domains, URLs and file hashes. It is not a general STIX object import.
Threat intelligence · France
Read the tool profileUses STIX 2.1 for intelligence objects and exports contextualized indicators through its CTI feed. The documented CTI feed exports indicators rather than raw observables.
Malware analysis · Germany
Read the tool profileReads IOCs from STIX v2 JSON files and applies the observable types and operators listed in the manual. This is a supported subset, not full STIX model ingestion.
A missing tool may support this feature without having been checked in this research pass.
Send a source or correction