thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Operations · Intermediate

Structured Threat Information Expression (STIX)

A standardized JSON language for representing cyber threat intelligence objects and relationships.

Definition

STIX 2.1, maintained by OASIS, defines STIX Domain Objects such as indicator, malware, threat-actor, attack-pattern, campaign and intrusion-set, plus relationship objects linking them. It enables consistent machine-readable sharing of intelligence.

Example

A STIX indicator object with pattern "[file:hashes.'SHA-256' = 'abc...']".

Exam tip

STIX = the format (what); TAXII = the transport (how).

Related terms