pycti 6.4.8__tar.gz → 6.4.9__tar.gz
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of pycti might be problematic. Click here for more details.
- {pycti-6.4.8 → pycti-6.4.9}/PKG-INFO +1 -1
- {pycti-6.4.8 → pycti-6.4.9}/pycti/__init__.py +1 -1
- {pycti-6.4.8 → pycti-6.4.9}/pycti/api/opencti_api_client.py +5 -2
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/opencti_marking_definition.py +13 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/utils/opencti_stix2.py +1 -1
- {pycti-6.4.8 → pycti-6.4.9}/pycti.egg-info/PKG-INFO +1 -1
- {pycti-6.4.8 → pycti-6.4.9}/LICENSE +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/README.md +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/api/__init__.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/api/opencti_api_connector.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/api/opencti_api_playbook.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/api/opencti_api_work.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/connector/__init__.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/connector/opencti_connector.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/connector/opencti_connector_helper.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/connector/opencti_metric_handler.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/__init__.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/indicator/__init__.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/indicator/opencti_indicator_properties.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/opencti_attack_pattern.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/opencti_campaign.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/opencti_case_incident.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/opencti_case_rfi.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/opencti_case_rft.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/opencti_channel.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/opencti_course_of_action.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/opencti_data_component.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/opencti_data_source.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/opencti_event.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/opencti_external_reference.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/opencti_feedback.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/opencti_grouping.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/opencti_identity.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/opencti_incident.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/opencti_indicator.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/opencti_infrastructure.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/opencti_intrusion_set.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/opencti_kill_chain_phase.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/opencti_label.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/opencti_language.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/opencti_location.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/opencti_malware.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/opencti_malware_analysis.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/opencti_narrative.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/opencti_note.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/opencti_observed_data.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/opencti_opinion.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/opencti_report.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/opencti_stix.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/opencti_stix_core_object.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/opencti_stix_core_relationship.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/opencti_stix_cyber_observable.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/opencti_stix_domain_object.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/opencti_stix_nested_ref_relationship.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/opencti_stix_object_or_stix_relationship.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/opencti_stix_sighting_relationship.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/opencti_task.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/opencti_threat_actor.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/opencti_threat_actor_group.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/opencti_threat_actor_individual.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/opencti_tool.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/opencti_vocabulary.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/opencti_vulnerability.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/stix_cyber_observable/__init__.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/stix_cyber_observable/opencti_stix_cyber_observable_deprecated.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/entities/stix_cyber_observable/opencti_stix_cyber_observable_properties.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/utils/__init__.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/utils/constants.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/utils/opencti_logger.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/utils/opencti_stix2_identifier.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/utils/opencti_stix2_splitter.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/utils/opencti_stix2_update.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti/utils/opencti_stix2_utils.py +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti.egg-info/SOURCES.txt +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti.egg-info/dependency_links.txt +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti.egg-info/requires.txt +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pycti.egg-info/top_level.txt +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/pyproject.toml +0 -0
- {pycti-6.4.8 → pycti-6.4.9}/setup.cfg +0 -0
|
@@ -224,8 +224,11 @@ class OpenCTIApiClient:
|
|
|
224
224
|
def set_previous_standard_header(self, previous_standard):
|
|
225
225
|
self.request_headers["previous-standard"] = previous_standard
|
|
226
226
|
|
|
227
|
-
def get_request_headers(self):
|
|
228
|
-
|
|
227
|
+
def get_request_headers(self, hide_token=True):
|
|
228
|
+
request_headers_copy = self.request_headers.copy()
|
|
229
|
+
if hide_token and "Authorization" in request_headers_copy:
|
|
230
|
+
request_headers_copy["Authorization"] = "*****"
|
|
231
|
+
return request_headers_copy
|
|
229
232
|
|
|
230
233
|
def set_retry_number(self, retry_number):
|
|
231
234
|
self.request_headers["opencti-retry-number"] = (
|
|
@@ -26,6 +26,19 @@ class MarkingDefinition:
|
|
|
26
26
|
|
|
27
27
|
@staticmethod
|
|
28
28
|
def generate_id(definition_type, definition):
|
|
29
|
+
# Handle static IDs from OpenCTI
|
|
30
|
+
if definition_type == "TLP":
|
|
31
|
+
if definition == "TLP:CLEAR" or definition == "TLP:WHITE":
|
|
32
|
+
return "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
|
|
33
|
+
if definition == "TLP:GREEN":
|
|
34
|
+
return "marking-definition--34098fce-860f-48ae-8e50-ebd3cc5e41da"
|
|
35
|
+
if definition == "TLP:AMBER":
|
|
36
|
+
return "marking-definition--f88d31f6-486f-44da-b317-01333bde0b82"
|
|
37
|
+
if definition == "TLP:AMBER+STRICT":
|
|
38
|
+
return "marking-definition--826578e1-40ad-459f-bc73-ede076f81f37"
|
|
39
|
+
if definition == "TLP:RED":
|
|
40
|
+
return "marking-definition--5e57c739-391a-4eb3-b6be-7d15ca92d5ed"
|
|
41
|
+
# Generate IDs
|
|
29
42
|
data = {"definition_type": definition_type, "definition": definition}
|
|
30
43
|
data = canonicalize(data, utf8=False)
|
|
31
44
|
id = str(uuid.uuid5(uuid.UUID("00abedb4-aa42-466c-9c01-fed23315a9b7"), data))
|
|
@@ -1378,7 +1378,7 @@ class OpenCTIStix2:
|
|
|
1378
1378
|
created=stix_sighting["created"] if "created" in stix_sighting else None,
|
|
1379
1379
|
modified=stix_sighting["modified"] if "modified" in stix_sighting else None,
|
|
1380
1380
|
confidence=(
|
|
1381
|
-
stix_sighting["confidence"] if "confidence" in stix_sighting else
|
|
1381
|
+
stix_sighting["confidence"] if "confidence" in stix_sighting else None
|
|
1382
1382
|
),
|
|
1383
1383
|
createdBy=extras["created_by_id"] if "created_by_id" in extras else None,
|
|
1384
1384
|
objectMarking=(
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|