NEW350+ rooms now have a live terminal, so you can learn by typing the commands, right in your browser.Learn in a live terminal. 350+ rooms.Try a lab♥ Codelivly is 100% free, no paywall. If it helped you, chip in to keep it running.100% free. Help keep it so.Support us
[>_] ROOM · Malware Analysis
Threat Intelligence Sharing
Master the art of sharing actionable threat intelligence. Learn STIX/TAXII, MISP, and best practices for anonymizing and distributing IOCs and TTPs.
Room tasks
1What Is Threat Intel Sharing and Why Does It Matter
2STIX/TAXII and MISP Basics
3Guided Lab: Submitting IOCs to a Threat Intel Platform
Frequently Asked Questions
What are STIX and TAXII?
STIX is a standard language for describing cyber threat information, and TAXII is the protocol used to exchange it. Together they let organisations share structured intelligence automatically between tools and partners.
What is MISP used for?
MISP is an open-source threat intelligence platform for storing, correlating and sharing indicators and event data. Teams use it to collaborate with trusted communities and feed detections into security tools.
How do you share threat intelligence safely?
Remove or anonymise sensitive details, agree on handling markings such as TLP, and share only what is actionable. This free Codelivly room covers those practices alongside the tooling.