Skip to main content
Offline·Progress is saved on this device and syncs the next time you open the app online.
Security Operations & Monitoring

STIX

Structured Threat Information eXpression

A standardized language for describing cyber threat intelligence.

Structured Threat Information eXpression is a standardized, machine readable language for describing cyber threat intelligence such as indicators, threat actors, campaigns, and tactics. Standardization lets organizations and tools share and ingest intelligence consistently rather than parsing free form reports. It enables automated correlation against telemetry in detection platforms. STIX defines the content, while TAXII defines the transport used to exchange it, and the two are routinely tested together as the language and delivery method for shared intelligence.

Memory hook

Structured Threat Information eXpression: the language that describes threat intel (the "what").

Related terms

Looking STIX up is step one. Getting tested on it is step two.

A free account opens all 4 Domain 1 objectives, 271 exam-style questions with a lesson and a lab on each, a placement check that skips what you already know, and a dated plan. No card.

Not affiliated with or endorsed by CompTIA.