STIX compatibility#
Entity properties have varying compatibility with different STIX versions.
In the documentation, sections or properties are
marked with badges (e.g. 
)
to describe what versions of STIX that section or property is compatible with.
Note
By default, you can export all entities as EclecticIQ JSON. EclecticIQ JSON exported from 3.0 is compatible with 2.14.
The following table describes what these markings mean:
Badge |
Description |
|---|---|
|
Only compatible with STIX 2.1 exports. |
|
Only compatible with STIX 1.2 exports. |
|
Compatible with both STIX 2.1 and STIX 1.2 exports. |
STIX 2.1 compatibility#
The pages here describes EclecticIQ Intelligence Center compatibility with STIX 2.1.
Known issues
See STIX 2.1 Known issues for known issues with how EclecticIQ Intelligence Center processes STIX 2.1 objects.
Ingestion, export
The following pages describe how certain STIX 2.1 objects and properties are ingested or exported:
-
STIX 2.1 Observed Data SDO are ingested as Indicator entities.
STIX 2.1 STIX Patterns embedded in Indicator SDOs have specific behaviors covered by this page.