Structured Threat Information Expression

STIX is an open OASIS standard for describing threat information in machine-readable form: indicators, threat actors, malware, campaigns and their relationships. STIX data is usually transported via the TAXII protocol. The current version 2.1 is JSON-based and supported by common threat intelligence platforms.