If you want to manually upload IP address or domain names, why not use watchlist?
I know I can upload IP Addresses and domain names using watchlist. I want to learn how can I use Cyber threat feed using manual upload feature which is available there. How can I convert feeds into IOCs (Indicators of compromise) in STIX (Structured threat information expression) format which is only acceptable format for manual upload.
1 of 1 people found this helpful
Here are some samples you can use as a template:
Taken from here... STIX -Samples