; *From:* Simon Elliston Ball [si...@simonellistonball.com]
> *Sent:* Tuesday, March 28, 2017 9:04 AM
> *To:* user@metron.incubator.apache.org
> *Subject:* Re: Threat Feeds
>
> Hi Vladimir,
>
> Metron supports and Stix/Taxii feed using the threat intel loaders. We
> usually put soltr
Hi Vladimir,
Metron supports and Stix/Taxii feed using the threat intel loaders. We usually
put soltra, hailataxii or opentaxii in front of this loaded to act as an
aggregator for multiple stix feeds, so you can really use anything.
Soltra used to be our preferred choice, because it was
