In this post I will describe how observables are extracted from documents and converted to STIX objects by file2stix.

In this post I will describe some of the problems I wanted to solve building file2stix, the research that went into it, and jump into the basics of how intelligence reports are ingested.

In this post I will show you some of my research trying to build existing Signals Corps products using ChatGPT.

In this post I will show you some of my experiments using GPT to generation detection rules.

In this post I will show you how we designed the cve2stix web app.

In this post I will show you the design decisions that went into building the cve2stix API (and why I didn’t choose TAXII).

In this post I will show you how cve2stix enriches CVEs to provide additional context to each vulnerability.

In this post I will show you how to use STIX 2.1 SDOs, SCOs, and SROs to standardised the way vulnerabilities are represented.

In this post I will show you how to analyse CPE combinations reported in CVEs to identify vulnerable products.

In this post I will introduce the important concepts of CVEs and CPEs and explain how to work with them using the NVD API.