NEW350+ rooms now have a live terminal, so you can learn by typing the commands, right in your browser.Learn in a live terminal. 350+ rooms.Try a lab♥ Codelivly is 100% free, no paywall. If it helped you, chip in to keep it running.100% free. Help keep it so.Support us
[>_] ROOM · Cybersecurity
STIX 2.1 and Structured Intelligence Objects
Read, write and validate STIX 2.1 objects, relationships, sightings, patterns and TLP markings.
Room tasks
1How STIX 2.1 Models Threat Intelligence
2Common Properties, Identifiers and Versioning
3Domain Objects, Observables, Relationships and Sightings
4STIX Patterning for Indicators
5Data Markings and TLP 2.0 in STIX
6Lab: Interrogate a STIX 2.1 Bundle
Frequently Asked Questions
What is STIX?
STIX, Structured Threat Information Expression, is a standard JSON-based language for describing cyber threat intelligence, including indicators, malware, threat actors, campaigns and the relationships between them.
What is a STIX indicator pattern?
A STIX pattern is an expression that describes observable conditions, such as a file hash or domain, that signal malicious activity. Indicators use this syntax so tools can match them automatically.
How do I validate STIX data?
Use a validator such as the stix2-validator to check structure and best practices before sharing. The STIX 2.1 room on Codelivly is free and hands-on, covering objects, relationships and validation.