taxii
List TAXII collections
The twelve collections, from a static table: malicious-domains, malicious-ips, malicious-urls, malicious-file-hashes, malicious-subdomains, malware-iocs, c2-indicators, ransomware-iocs, phishing-indicators, plus the three organization-scoped ones — org-reported-ips, org-reported-domains, org-reported-file-hashes — which serve the caller's own reported indicators. Every collection is can_read: true, can_write: false, media_types: ["application/stix+json;version=2.1"].
Plan gate, quota rule and routing aliases: see GET /taxii.
get/taxii/api-root/collections
Response
{"collections": [{"id", "title", "description", "can_read": true, "can_write": false, "media_types": ["application/stix+json;version=2.1"]}]} — twelve entries