--- title: "Anomali ThreatStream" slug: "anomali-threatstream" updated: 2025-06-23T15:24:44Z published: 2025-06-23T15:24:44Z canonical: "docs.databee.buzz/anomali-threatstream" --- > ## Documentation Index > Fetch the complete documentation index at: https://docs.databee.buzz/llms.txt > Use this file to discover all available pages before exploring further. # Anomali ThreatStream Anomali ThreatStream Threat Intelligence Platform (TIP) centralizes and refines threat data from hundreds of sources. It automates the process of identifying and prioritizing relevant threats, filtering out noise to deliver actionable intelligence. For detailed information, please refer to the [Anomali ThreatStream’s official documentation](https://www.anomali.com/products/threatstream). **Integration Method:** API **Tables:** Incident Finding (2005), Detection Finding (2004), Vulnerability Finding (2002) This integration supports the following events. | **Event** | **Description** | | --- | --- | | Incidents | Returns a list of incidents generated in the system. | | Intelligence | Returns a list of threat intelligence. | | Vulnerabilities | Returns a list of vulnerabilities. | This integration supports the following versions. | Anomali ThreatStream API Version | V1 (Incidents, Vulnerabilities), v2 (Intelligence) | | --- | --- | > [!NOTE] > **Note:** > > Anomali ThreatStream doesn’t follow a traditional versioning system. Instead, it is a continuously updated cloud service. As of the preparation of this document, the latest update was in 2025. ## Prerequisites - The user should have access to the [Anomali ThreatStream](https://ui.threatstream.com/login) platform. - The user should have access to DataBee console. ## Configuration Overview 1. Generate an Email Address and API Token from Anomali ThreatStream platform to access the APIs. 2. Add the [Anomali ThreatStream data feed](/user-manual/docs/anomali-threatstream-june2025#databee-configuration) in the DataBee console with the parameters below. | **DataBee Parameter** | **Anomali ThreatStream Parameter** | | --- | --- | | Access Key | Email Address | | Secret Key | API Key | | API Base URL () | Base URL | ## Anomali ThreatStream Configuration 1. Sign in to the [Anomali ThreatStream](https://ui.threatstream.com/login) platform and copy and save the **Email Address** for later use. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/anomali-threatstream-june-2025-image-g3d9pog8.png?sv=2026-02-06&spr=https&st=2026-11-15T00%3A04%3A52Z&se=2026-11-15T01%3A04%3A52Z&sr=c&sp=r&sig=A6S%2FnLk0OZ3r5Ze%2BPOdXrSdy61gL7KUdH0o3eaHrAIU%3D) 2. Navigate to **settings** on top right corner. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/anomali-threatstream-june-2025-image-x2jqla6d.png?sv=2026-02-06&spr=https&st=2026-11-15T00%3A04%3A52Z&se=2026-11-15T01%3A04%3A52Z&sr=c&sp=r&sig=A6S%2FnLk0OZ3r5Ze%2BPOdXrSdy61gL7KUdH0o3eaHrAIU%3D) 3. Click on **Reveal** to unhide the API Key. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/anomali-threatstream-june-2025-image-joo0z8fo.png?sv=2026-02-06&spr=https&st=2026-11-15T00%3A04%3A52Z&se=2026-11-15T01%3A04%3A52Z&sr=c&sp=r&sig=A6S%2FnLk0OZ3r5Ze%2BPOdXrSdy61gL7KUdH0o3eaHrAIU%3D) 4. Copy the **API Key** and save it for later use. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/anomali-threatstream-june-2025-image-hqctgwo8.png?sv=2026-02-06&spr=https&st=2026-11-15T00%3A04%3A52Z&se=2026-11-15T01%3A04%3A52Z&sr=c&sp=r&sig=A6S%2FnLk0OZ3r5Ze%2BPOdXrSdy61gL7KUdH0o3eaHrAIU%3D) 5. Navigate to **TAXII** and copy and save the **TAXII 1.x** URL for later use. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/anomali-threatstream-june-2025-image-ui1ig9dg.png?sv=2026-02-06&spr=https&st=2026-11-15T00%3A04%3A52Z&se=2026-11-15T01%3A04%3A52Z&sr=c&sp=r&sig=A6S%2FnLk0OZ3r5Ze%2BPOdXrSdy61gL7KUdH0o3eaHrAIU%3D) ## DataBee Configuration To configure the data source, 1. Login to the DataBee UI, navigate to **Data** > **Data Feeds** and click the **Add New Data Feed** button. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/anomali-threatstream-june-2025-image-7vax0d4o.png?sv=2026-02-06&spr=https&st=2026-11-15T00%3A04%3A52Z&se=2026-11-15T01%3A04%3A52Z&sr=c&sp=r&sig=A6S%2FnLk0OZ3r5Ze%2BPOdXrSdy61gL7KUdH0o3eaHrAIU%3D) 2. Search for the **Anomali ThreatStream** and click on it as shown below. ![Image download failed.](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/anomali-threatstream-june-2025-image-2j58cwap.png?sv=2026-02-06&spr=https&st=2026-11-15T00%3A04%3A52Z&se=2026-11-15T01%3A04%3A52Z&sr=c&sp=r&sig=A6S%2FnLk0OZ3r5Ze%2BPOdXrSdy61gL7KUdH0o3eaHrAIU%3D) 3. Click on the **API Ingest** option for collection method. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/anomali-threatstream-june-2025-image-2nlp5o6k.png?sv=2026-02-06&spr=https&st=2026-11-15T00%3A04%3A52Z&se=2026-11-15T01%3A04%3A52Z&sr=c&sp=r&sig=A6S%2FnLk0OZ3r5Ze%2BPOdXrSdy61gL7KUdH0o3eaHrAIU%3D) 4. Enter feed contact information and click **Next**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/anomali-threatstream-june-2025-image-cu8aj8pr.png?sv=2026-02-06&spr=https&st=2026-11-15T00%3A04%3A52Z&se=2026-11-15T01%3A04%3A52Z&sr=c&sp=r&sig=A6S%2FnLk0OZ3r5Ze%2BPOdXrSdy61gL7KUdH0o3eaHrAIU%3D) 5. In the configuration page, confirm the following: - **Authorization Method**: Custom API Key - **API Base URL:** Replace with the Base URL that DataBee will interact with. - **Access Key**: Enter the saved Email Address. - **Secret Key**: Enter the saved API Key. - **Event Types**: Preselected for all the event types that integration pulls. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/anomali-threatstream-june-2025-image-ap1nabgt.png?sv=2026-02-06&spr=https&st=2026-11-15T00%3A04%3A52Z&se=2026-11-15T01%3A04%3A52Z&sr=c&sp=r&sig=A6S%2FnLk0OZ3r5Ze%2BPOdXrSdy61gL7KUdH0o3eaHrAIU%3D) 6. Click **Submit**. ## Troubleshooting Tips - Ensure Email Address and API Keys are pasted correctly. Ensure no spaces or unexpected characters are included and reconfigure the DataBee feed.