Incoming feed - EclecticIQ Commercial Sources Feed#

Note

This article describes how to configure incoming feeds for a particular feed source. To see how to configure incoming feeds in general, see Create and configure incoming feeds.

Caution

From EclecticIQ Platform 2.9, the EclecticIQ Fusion Center Intelligence Essentials and Premium feeds are now the EclecticIQ Open Sources Feed and EclecticIQ Commercial Sources Feed.

For information on the older EclecticIQ Fusion Center Intelligence Essentials and Premium feeds, see the EclecticIQ Platform 2.8 documentation.

Specifications

Feed name

EclecticIQ Commercial Sources Feed

Transport type

TAXII Poll

Content type

EclecticIQ JSON

Description

EclecticIQ Commercial Sources Feed is the commercial intelligence feed curated by the EclecticIQ Fusion Center team.

Requirements#

  • EclecticIQ Fusion Center user name

  • EclecticIQ Fusion Center password

Execution schedule#

By default, the Execution schedule for the EclecticIQ Commercial Sources Feed is set to: None

This means that the feed has to be run manually.

We recommend that you set the Execution schedule to Every 1 hours:

  1. Go to the Schedule section.

  2. Set Execution schedule to Every [n] hours.

  3. In the line Every … hours that appears below, select 1 from the drop-down menu, so that the line reads Every 1 hours.

Configure the incoming feed#

The EclecticIQ Commercial Sources Feed is a pre-configured incoming feed on EclecticIQ Platform 2.9.0 and newer.

To start using the feed, finish configuring it by adding your EclecticIQ Fusion Center user name and password:

  1. Edit the EclecticIQ Commercial Sources Feed.

  2. Under Transport and content, fill out these fields:

    Note

    Required fields are marked with an asterisk (*).

    Field

    Description

    Username

    Set this to your EclecticIQ Fusion Center user name.

    Password

    Set this to your EclecticIQ Fusion Center password.

  3. Click Save to store your changes.

Default configuration#

For reference, the table below describes the default configuration for the EclecticIQ Commercial Sources Feed:

Note

Required fields are marked with an asterisk (*).

Field

Description

Feed name*

EclecticIQ Commercial Sources Feed

Organization

EclecticIQ B.V.

Source reliability

B - Usually reliable

Require valid signature

Not selected.

Skip extraction of observables from unstructured text

Not selected.

Transport type*

TAXII Poll

Content type*

EclecticIQ JSON

Accept password protected archives

Not selected.

Auto Discovery

Polling service URL*

https://cti.eclecticiq.com/feeds/taxii/poll

Collection name*

eclecticiq_commercial_sources_feed.hourly.json

TAXII version*

TAXII 1.1

Extra headers

Subscription ID

Start ingesting from*

10/01/2020 00:00

Days per poll

SSL verification

Not selected.

SSL CA bundle file path

Basic authentication

Selected.

Username

Password

EclecticIQ authentication URL

SSL certificate authentication

Not selected.

Execution Schedule*

Every [n] hours

Every [n] hours

1