0 Replies Latest reply on Jun 1, 2017 3:58 AM by llaaperi

    Cyber threat indicator structured description




      I'm trying to integrate a data source to cyber threat feed as TAXII feed. I would like to display structured text in indicator description field. According to STIX and CybOX specification the Observable (IOC) description field should be structured text type with attribute structuring_format to define the format. However, this does not seem to have an effect how the ESM is is displaying the description. I have tried "json", "html", "html5" but in all cases the description field just displays the content as raw text.


      So, is there any way to display structured text in the description field? And how should this be defined in the STIX xml?


      Thank you.