Structured Threat Information eXpression, commonly referred to as STIX is one of the popular formats followed to normalize and organize the threat data. STIX format was developed by MITRE for describing cyber threat information. With STIX structured, security teams can describe a threat in various aspects such as:
Motivations
Abilities
Capabilities
Response
Within the STIX framework, each piece of threat information is categorized under specific attributes. Thus, security teams can get better insight into ingested threat data that are linked to indicators, incidents, TTPs, specific threat actors, adversary campaigns, specific targets, data markings, courses of action, and other key aspects of an attack chain. In other words, it conveys data about cybersecurity threats in a common language that can be easily understood by humans and security technologies.