StixTaxii enriches incoming logs with cyber threat intelligence (CTI) that is written in STIX format and is shared via a TAXII server. It support STIX/TAXII versions 1.0, 2.0 and 2.1. StixTaxii is also a threat intelligence source . You can use the Threat Intelligence process command to further enrich its logs.