pycti 6.3.2__py3-none-any.whl → 6.3.3__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of pycti might be problematic. Click here for more details.
- pycti/__init__.py +1 -1
- pycti/utils/opencti_stix2.py +6 -0
- pycti/utils/opencti_stix2_splitter.py +2 -2
- pycti/utils/opencti_stix2_utils.py +24 -17
- {pycti-6.3.2.dist-info → pycti-6.3.3.dist-info}/METADATA +1 -1
- {pycti-6.3.2.dist-info → pycti-6.3.3.dist-info}/RECORD +9 -9
- {pycti-6.3.2.dist-info → pycti-6.3.3.dist-info}/LICENSE +0 -0
- {pycti-6.3.2.dist-info → pycti-6.3.3.dist-info}/WHEEL +0 -0
- {pycti-6.3.2.dist-info → pycti-6.3.3.dist-info}/top_level.txt +0 -0
pycti/__init__.py
CHANGED
pycti/utils/opencti_stix2.py
CHANGED
|
@@ -2280,6 +2280,12 @@ class OpenCTIStix2:
|
|
|
2280
2280
|
do_list = lister.get(
|
|
2281
2281
|
entity_type, lambda **kwargs: self.unknown_type({"type": entity_type})
|
|
2282
2282
|
)
|
|
2283
|
+
|
|
2284
|
+
if getAll and (orderBy is None or orderBy == "_score"):
|
|
2285
|
+
orderBy = "created_at"
|
|
2286
|
+
if orderMode is None:
|
|
2287
|
+
orderMode = "desc"
|
|
2288
|
+
|
|
2283
2289
|
# noinspection PyTypeChecker
|
|
2284
2290
|
return do_list(
|
|
2285
2291
|
search=search,
|
|
@@ -10,11 +10,11 @@ from pycti.utils.opencti_stix2_identifier import (
|
|
|
10
10
|
)
|
|
11
11
|
from pycti.utils.opencti_stix2_utils import (
|
|
12
12
|
STIX_CYBER_OBSERVABLE_MAPPING,
|
|
13
|
-
|
|
13
|
+
SUPPORTED_STIX_ENTITY_OBJECTS,
|
|
14
14
|
)
|
|
15
15
|
|
|
16
16
|
supported_types = (
|
|
17
|
-
|
|
17
|
+
SUPPORTED_STIX_ENTITY_OBJECTS # entities
|
|
18
18
|
+ list(STIX_CYBER_OBSERVABLE_MAPPING.keys()) # observables
|
|
19
19
|
+ ["relationship", "sighting"] # relationships
|
|
20
20
|
)
|
|
@@ -2,44 +2,49 @@ from typing import Any, Dict
|
|
|
2
2
|
|
|
3
3
|
from stix2 import EqualityComparisonExpression, ObjectPath, ObservationExpression
|
|
4
4
|
|
|
5
|
-
|
|
6
|
-
"marking-definition",
|
|
5
|
+
SUPPORTED_STIX_ENTITY_OBJECTS = [
|
|
7
6
|
"attack-pattern",
|
|
8
7
|
"campaign",
|
|
9
|
-
"
|
|
10
|
-
"
|
|
11
|
-
"note",
|
|
12
|
-
"observed-data",
|
|
13
|
-
"opinion",
|
|
14
|
-
"report",
|
|
15
|
-
"grouping",
|
|
8
|
+
"case-incident",
|
|
9
|
+
"x-opencti-case-incident",
|
|
16
10
|
"case-rfi",
|
|
17
11
|
"x-opencti-case-rfi",
|
|
18
12
|
"case-rft",
|
|
19
13
|
"x-opencti-case-rft",
|
|
20
|
-
"
|
|
21
|
-
"x-opencti-task",
|
|
22
|
-
"case-incident",
|
|
23
|
-
"x-opencti-case-incident",
|
|
24
|
-
"feedback",
|
|
25
|
-
"x-opencti-feedback",
|
|
14
|
+
"channel",
|
|
26
15
|
"course-of-action",
|
|
27
16
|
"data-component",
|
|
28
17
|
"x-mitre-data-component",
|
|
29
18
|
"data-source",
|
|
30
19
|
"x-mitre-data-source",
|
|
20
|
+
"event",
|
|
21
|
+
"external-reference",
|
|
22
|
+
"feedback",
|
|
23
|
+
"x-opencti-feedback",
|
|
24
|
+
"grouping",
|
|
31
25
|
"identity",
|
|
26
|
+
"incident",
|
|
32
27
|
"indicator",
|
|
33
28
|
"infrastructure",
|
|
34
29
|
"intrusion-set",
|
|
30
|
+
"kill-chain-phase",
|
|
31
|
+
"label",
|
|
32
|
+
"language",
|
|
35
33
|
"location",
|
|
36
34
|
"malware",
|
|
37
35
|
"malware-analysis",
|
|
36
|
+
"marking-definition",
|
|
37
|
+
"narrative",
|
|
38
|
+
"note",
|
|
39
|
+
"observed-data",
|
|
40
|
+
"opinion",
|
|
41
|
+
"report",
|
|
42
|
+
"task",
|
|
43
|
+
"x-opencti-task",
|
|
38
44
|
"threat-actor",
|
|
39
45
|
"tool",
|
|
40
|
-
"
|
|
46
|
+
"vocabulary",
|
|
41
47
|
"vulnerability",
|
|
42
|
-
"incident",
|
|
43
48
|
]
|
|
44
49
|
|
|
45
50
|
STIX_CYBER_OBSERVABLE_MAPPING = {
|
|
@@ -74,6 +79,8 @@ STIX_CYBER_OBSERVABLE_MAPPING = {
|
|
|
74
79
|
"tracking-number": "Tracking-Number",
|
|
75
80
|
"payment-card": "Payment-Card",
|
|
76
81
|
"media-content": "Media-Content",
|
|
82
|
+
"simple-observable": "Simple-Observable",
|
|
83
|
+
"persona": "Persona",
|
|
77
84
|
}
|
|
78
85
|
|
|
79
86
|
PATTERN_MAPPING = {
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
pycti/__init__.py,sha256=
|
|
1
|
+
pycti/__init__.py,sha256=oF8Lzowtc6oB4GPbfk9KEduD4WEb7xqpVz6ZqAmpCDo,5218
|
|
2
2
|
pycti/api/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
|
|
3
3
|
pycti/api/opencti_api_client.py,sha256=WpJs3GtEO0kV29KXmKY-2JmtiL6JSPD-746-FbnIcik,31027
|
|
4
4
|
pycti/api/opencti_api_connector.py,sha256=ubM_zPjTD8L33TEugCQgf_YF9zugDFg_7FgNubGlwJw,5447
|
|
@@ -62,13 +62,13 @@ pycti/entities/stix_cyber_observable/opencti_stix_cyber_observable_properties.py
|
|
|
62
62
|
pycti/utils/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
|
|
63
63
|
pycti/utils/constants.py,sha256=ZgOVxY5bnrHiNvPgOfZLWk16sSDnaE_tg8JVjZpw24Q,11831
|
|
64
64
|
pycti/utils/opencti_logger.py,sha256=0dvB75V0SuPFGxL539dAQrxTt1N5Acx0A3Ogwl5WMJ8,2199
|
|
65
|
-
pycti/utils/opencti_stix2.py,sha256=
|
|
65
|
+
pycti/utils/opencti_stix2.py,sha256=RhDTdDxSrhc6zMTH1QoLMSZSA20E0bWOAoOh0c4HhzM,116650
|
|
66
66
|
pycti/utils/opencti_stix2_identifier.py,sha256=k8L1z4q1xdCBfxqUba4YS_kT-MmbJFxYh0RvfGOmrOs,837
|
|
67
|
-
pycti/utils/opencti_stix2_splitter.py,sha256=
|
|
67
|
+
pycti/utils/opencti_stix2_splitter.py,sha256=6ciwgL6ZAyxYashEhLgvaKub61peWwq8J_f8f8aY1mA,10233
|
|
68
68
|
pycti/utils/opencti_stix2_update.py,sha256=CnMyqkeVA0jgyxEcgqna8sABU4YPMjkEJ228GVurIn4,14658
|
|
69
|
-
pycti/utils/opencti_stix2_utils.py,sha256=
|
|
70
|
-
pycti-6.3.
|
|
71
|
-
pycti-6.3.
|
|
72
|
-
pycti-6.3.
|
|
73
|
-
pycti-6.3.
|
|
74
|
-
pycti-6.3.
|
|
69
|
+
pycti/utils/opencti_stix2_utils.py,sha256=xgBZzm7HC76rLQYwTKkaUd_w9jJnVMoryHx7KDDIB_g,5065
|
|
70
|
+
pycti-6.3.3.dist-info/LICENSE,sha256=xx0jnfkXJvxRnG63LTGOxlggYnIysveWIZ6H3PNdCrQ,11357
|
|
71
|
+
pycti-6.3.3.dist-info/METADATA,sha256=HfvWNnNHs2cMPgrp5iMxaVyBysD9FuLlyreIvag0pRE,5418
|
|
72
|
+
pycti-6.3.3.dist-info/WHEEL,sha256=GV9aMThwP_4oNCtvEC2ec3qUYutgWeAzklro_0m4WJQ,91
|
|
73
|
+
pycti-6.3.3.dist-info/top_level.txt,sha256=cqEpxitAhHP4VgSA6xmrak6Yk9MeBkwoMTB6k7d2ZnE,6
|
|
74
|
+
pycti-6.3.3.dist-info/RECORD,,
|
|
File without changes
|
|
File without changes
|
|
File without changes
|