Skip to content

STIX Platform Integration

TI Mindmap HUB generates STIX 2.1 bundles that can be imported into any compliant security platform.

Compatible Platforms

Category Platforms
SIEMs Splunk, Microsoft Sentinel, Elastic Security
SOARs Cortex XSOAR, Splunk SOAR, Tines
TIPs MISP, OpenCTI, ThreatConnect, Anomali

Import Guides

MISP

  1. Download the STIX bundle from TI Mindmap HUB (web interface or API)
  2. In MISP, go to Event Actions → Add STIX
  3. Upload the JSON file
  4. Review and confirm the import

OpenCTI

  1. Use the OpenCTI STIX 2.1 connector
  2. Configure the connector to read from a file or API endpoint
  3. The bundle will be parsed and objects created automatically

Microsoft Sentinel

  1. Navigate to the Threat Intelligence blade
  2. Select Import → STIX 2.1
  3. Upload the bundle or configure API-based ingestion

API Access

STIX bundles can be retrieved programmatically via the MCP server or the REST API:

MCP tool:

get_stix_bundle(article_id="<report-id>")

REST API:

GET https://ti-mindmap-hub.com/api/reports/{reportId}/stix
Authorization: Bearer <your-token>
Accept: application/json

Note

Replace <your-token> with your authentication token. API keys can be generated from your account settings at ti-mindmap-hub.com.

Validation

Before importing, you can validate bundles locally:

pip install stix2-validator
stix2_validator bundle.json

Or with Python:

from stix2 import parse

with open("bundle.json", "r") as f:
    bundle = parse(f.read())

for obj in bundle.objects:
    print(f"{obj.type}: {obj.get('name', obj.id)}")

References