# STIXy Situations: ECSaping your threat data

DevFeed: [STIXy Situations: ECSaping your threat data](<https://devfeed.tech/articles/stixy-situations-ecsaping-your-threat-data-48939.md>)

Original publisher: [Read original article](<https://www.elastic.co/security-labs/blog/stixy-situations-ecsaping-your-threat-data>)

Author: Cyril François,Andrew Pease

Published: 2024-02-09T00:00:00Z

Content type: release

Language: en

Sources: [Elastic Security Labs](<https://devfeed.tech/sources/elastic-security-labs.md>)

Topics: [elasticsearch](<https://devfeed.tech/topics/elasticsearch.md>), [Security](<https://devfeed.tech/topics/security.md>), [threat detection](<https://devfeed.tech/topics/threat-detection.md>), [Temporian](<https://devfeed.tech/topics/temporian.md>), [Development](<https://devfeed.tech/topics/development.md>), [JSON](<https://devfeed.tech/topics/json.md>), [Structured-data](<https://devfeed.tech/topics/structured-data.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>)

Tags: [data](<https://devfeed.tech/tags/data.md>), [elasticsearch](<https://devfeed.tech/tags/elasticsearch.md>), [integrations-tools](<https://devfeed.tech/tags/integrations-tools.md>), [json](<https://devfeed.tech/tags/json.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [python](<https://devfeed.tech/tags/python.md>), [script](<https://devfeed.tech/tags/script.md>), [security](<https://devfeed.tech/tags/security.md>), [threat-detection](<https://devfeed.tech/tags/threat-detection.md>)

## AI overview

Elastic describes a released Python tool that converts STIX 2.x threat-data documents into Elastic Common Schema format for analysis and threat detection in Elasticsearch. The tool can output JSON to standard output, create an NDJSON file, or send data directly to an Elasticsearch cluster.

## Source excerpt

Structured threat data is commonly formatted using STIX. To help get this data into Elasticsearch, we're releasing a Python script that converts STIX to an ECS format to be ingested into your stack.