Glossary: Security Fundamentals
STIX (Structured Threat Information Expression)
Also written: STIX, bundle
A JSON format for describing threats. A file is a bundle of objects, and an IOC is an indicator object with a pattern, confidence and valid_from; feed.json and the ATT&CK data both use it.
Where the book teaches it
Related terms
TAXII (Trusted Automated Exchange of Intelligence Information)Threat feedIndicator of compromise (IOC)JSON (JavaScript Object Notation)