Do you have tutorials on how to better understand Shadowserver reports?

Yes! We are rolling out tutorials and videos over time to our report suite. You can find the links to these on the relevant Shadowserver report description page. For a general introduction to our reporting and possible Use Cases, please review https://www.shadowserver.org/wp-content/uploads/2022/06/Overview_of_Shadowserver_Reports_March_2022.pdf.

Other Questions

Can I select/change which reports I subscribe to?

Absolutely! Please send a request to report_admin@shadowserver.org with changes you want to make in your report setup.

Do you support STIX/TAXII?

Currently no. You can use our RESTful API to easily automate the processing of our API report data. You can receive test API data access to our sample reports to build your parsers. Contact us for API key access.

Are there tools that can automatically parse your feeds?

Yes! We have published a report-manager tool on our GitHub page. There are open source and commercial tools that have parsers of our reports, allowing for automation.

A good example of a free open source tool is IntelMQ. We maintain the Shadowserver feed parsers there, so it is most up to date!