pycti 6.5.1__py3-none-any.whl → 6.5.3__py3-none-any.whl

pycti/__init__.py

@@ -1,5 +1,5 @@
 # -*- coding: utf-8 -*-
-__version__ = "6.5.1"
+__version__ = "6.5.3"
 
 from .api.opencti_api_client import OpenCTIApiClient
 from .api.opencti_api_connector import OpenCTIApiConnector

pycti/api/opencti_api_client.py

@@ -3,7 +3,7 @@ import base64
 import datetime
 import io
 import json
-from typing import Union
+from typing import Dict, Tuple, Union
 
 import magic
 import requests
@@ -83,13 +83,13 @@ class OpenCTIApiClient:
     :param log_level: log level for the client
     :type log_level: str, optional
     :param ssl_verify: Requiring the requests to verify the TLS certificate at the server.
-    :type ssl_verify: bool, optional
+    :type ssl_verify: bool, str, optional
     :param proxies:
     :type proxies: dict, optional, The proxy configuration, would have `http` and `https` attributes. Defaults to {}
         ```
         proxies: {
-            "http: "http://my_proxy:8080"
-            "https: "http://my_proxy:8080"
+            "http": "http://my_proxy:8080"
+            "https": "http://my_proxy:8080"
         }
         ```
     :param json_logging: format the logs as json if set to True
@@ -102,14 +102,14 @@ class OpenCTIApiClient:
 
     def __init__(
         self,
-        url,
-        token,
+        url: str,
+        token: str,
         log_level="info",
-        ssl_verify=False,
-        proxies=None,
+        ssl_verify: Union[bool, str] = False,
+        proxies: Union[Dict[str, str], None] = None,
         json_logging=False,
         bundle_send_to_queue=True,
-        cert=None,
+        cert: Union[str, Tuple[str, str], None] = None,
         auth=None,
         perform_health_check=True,
     ):
@@ -712,12 +712,13 @@ class OpenCTIApiClient:
         data = kwargs.get("data", None)
         mime_type = kwargs.get("mime_type", "text/plain")
         entity_id = kwargs.get("entity_id", None)
+        file_markings = kwargs.get("file_markings", [])
 
         if file_name is not None:
             self.app_logger.info("Uploading a file.")
             query = """
-                    mutation UploadPending($file: Upload!, $entityId: String) {
-                        uploadPending(file: $file, entityId: $entityId) {
+                    mutation UploadPending($file: Upload!, $entityId: String, $file_markings: [String!]) {
+                        uploadPending(file: $file, entityId: $entityId, file_markings: $file_markings) {
                             id
                             name
                         }
@@ -731,7 +732,11 @@ class OpenCTIApiClient:
                     mime_type = magic.from_file(file_name, mime=True)
             return self.query(
                 query,
-                {"file": (File(file_name, data, mime_type)), "entityId": entity_id},
+                {
+                    "file": (File(file_name, data, mime_type)),
+                    "entityId": entity_id,
+                    "file_markings": file_markings,
+                },
             )
         else:
             self.app_logger.error("[upload] Missing parameter: file_name")

pycti/connector/opencti_connector_helper.py

@@ -769,6 +769,9 @@ class OpenCTIConnectorHelper:  # pylint: disable=too-many-public-methods
     def __init__(self, config: Dict, playbook_compatible=False) -> None:
         sys.excepthook = killProgramHook
 
+        # Cache
+        self.stream_collections = {}
+
         # Load API config
         self.config = config
         self.opencti_url = get_config_variable(
@@ -1063,6 +1066,9 @@ class OpenCTIConnectorHelper:  # pylint: disable=too-many-public-methods
                     "stream_live": True,
                     "stream_public": False,
                 }
+            # Get from cache
+            elif self.connect_live_stream_id in self.stream_collections:
+                return self.stream_collections[self.connect_live_stream_id]
             else:
                 query = """
                     query StreamCollection($id: String!) {
@@ -1076,6 +1082,10 @@ class OpenCTIConnectorHelper:  # pylint: disable=too-many-public-methods
                     }
                 """
                 result = self.api.query(query, {"id": self.connect_live_stream_id})
+                # Put in cache
+                self.stream_collections[self.connect_live_stream_id] = result["data"][
+                    "streamCollection"
+                ]
                 return result["data"]["streamCollection"]
         else:
             raise ValueError("This connector is not connected to any stream")
@@ -1581,6 +1591,7 @@ class OpenCTIConnectorHelper:  # pylint: disable=too-many-public-methods
         event_version = kwargs.get("event_version", None)
         bypass_validation = kwargs.get("bypass_validation", False)
         entity_id = kwargs.get("entity_id", None)
+        file_markings = kwargs.get("file_markings", None)
         file_name = kwargs.get("file_name", None)
         bundle_send_to_queue = kwargs.get("send_to_queue", self.bundle_send_to_queue)
         cleanup_inconsistent_bundle = kwargs.get("cleanup_inconsistent_bundle", False)
@@ -1648,6 +1659,7 @@ class OpenCTIConnectorHelper:  # pylint: disable=too-many-public-methods
                     data=bundle,
                     mime_type="application/json",
                     entity_id=entity_id,
+                    file_markings=file_markings,
                 )
                 return []
             elif validation_mode == "draft" and not draft_id:

pycti/entities/opencti_attack_pattern.py

@@ -256,8 +256,6 @@ class AttackPattern:
         get_all = kwargs.get("getAll", False)
         with_pagination = kwargs.get("withPagination", False)
         with_files = kwargs.get("withFiles", False)
-        if get_all:
-            first = 500
 
         self.opencti.app_logger.info(
             "Listing Attack-Patterns with filters", {"filters": json.dumps(filters)}

pycti/entities/opencti_campaign.py

@@ -241,8 +241,6 @@ class Campaign:
         get_all = kwargs.get("getAll", False)
         with_pagination = kwargs.get("withPagination", False)
         with_files = kwargs.get("withFiles", False)
-        if get_all:
-            first = 100
 
         self.opencti.app_logger.info(
             "Listing Campaigns with filters", {"filters": json.dumps(filters)}

pycti/entities/opencti_case_incident.py

@@ -467,7 +467,7 @@ class CaseIncident:
 
     """
         List Case Incident objects
-        
+
         :param filters: the filters to apply
         :param search: the search keyword
         :param first: return the first n rows from the after ID (or the beginning if not set)
@@ -486,8 +486,6 @@ class CaseIncident:
         get_all = kwargs.get("getAll", False)
         with_pagination = kwargs.get("withPagination", False)
         with_files = kwargs.get("withFiles", False)
-        if get_all:
-            first = 500
 
         self.opencti.app_logger.info(
             "Listing Case Incidents with filters", {"filters": json.dumps(filters)}

pycti/entities/opencti_case_rfi.py

@@ -206,7 +206,7 @@ class CaseRfi:
                         }
                         ... on StixCyberObservable {
                             observable_value
-                        }                        
+                        }
                         ... on StixCoreRelationship {
                             standard_id
                             spec_version
@@ -417,7 +417,7 @@ class CaseRfi:
                         }
                         ... on StixCyberObservable {
                             observable_value
-                        }                        
+                        }
                         ... on StixCoreRelationship {
                             standard_id
                             spec_version
@@ -465,7 +465,7 @@ class CaseRfi:
 
     """
         List Case Rfi objects
-        
+
         :param filters: the filters to apply
         :param search: the search keyword
         :param first: return the first n rows from the after ID (or the beginning if not set)
@@ -484,8 +484,6 @@ class CaseRfi:
         get_all = kwargs.get("getAll", False)
         with_pagination = kwargs.get("withPagination", False)
         with_files = kwargs.get("withFiles", False)
-        if get_all:
-            first = 500
 
         self.opencti.app_logger.info(
             "Listing Case Rfis with filters", {"filters": json.dumps(filters)}

pycti/entities/opencti_case_rft.py

@@ -206,7 +206,7 @@ class CaseRft:
                         }
                         ... on StixCyberObservable {
                             observable_value
-                        }                        
+                        }
                         ... on StixCoreRelationship {
                             standard_id
                             spec_version
@@ -417,7 +417,7 @@ class CaseRft:
                             }
                             ... on StixCyberObservable {
                                 observable_value
-                            }                        
+                            }
                             ... on StixCoreRelationship {
                                 standard_id
                                 spec_version
@@ -465,7 +465,7 @@ class CaseRft:
 
     """
         List Case Rft objects
-        
+
         :param filters: the filters to apply
         :param search: the search keyword
         :param first: return the first n rows from the after ID (or the beginning if not set)
@@ -484,8 +484,6 @@ class CaseRft:
         get_all = kwargs.get("getAll", False)
         with_pagination = kwargs.get("withPagination", False)
         with_files = kwargs.get("withFiles", False)
-        if get_all:
-            first = 500
         self.opencti.app_logger.info(
             "Listing Case Rfts with filters", {"filters": json.dumps(filters)}
         )

pycti/entities/opencti_channel.py

@@ -237,8 +237,6 @@ class Channel:
         get_all = kwargs.get("getAll", False)
         with_pagination = kwargs.get("withPagination", False)
         with_files = kwargs.get("withFiles", False)
-        if get_all:
-            first = 100
 
         self.opencti.app_logger.info(
             "Listing Channels with filters", {"filters": json.dumps(filters)}

pycti/entities/opencti_course_of_action.py

@@ -229,8 +229,6 @@ class CourseOfAction:
         get_all = kwargs.get("getAll", False)
         with_pagination = kwargs.get("withPagination", False)
         with_files = kwargs.get("withFiles", False)
-        if get_all:
-            first = 100
 
         self.opencti.app_logger.info(
             "Listing Courses-Of-Action with filters", {"filters": json.dumps(filters)}

pycti/entities/opencti_data_component.py

@@ -271,8 +271,6 @@ class DataComponent:
         get_all = kwargs.get("getAll", False)
         with_pagination = kwargs.get("withPagination", False)
         with_files = kwargs.get("withFiles", False)
-        if get_all:
-            first = 100
 
         self.opencti.app_logger.info(
             "Listing Data-Components with filters", {"filters": json.dumps(filters)}

pycti/entities/opencti_data_source.py

@@ -229,8 +229,6 @@ class DataSource:
         get_all = kwargs.get("getAll", False)
         with_pagination = kwargs.get("withPagination", False)
         with_files = kwargs.get("withFiles", False)
-        if get_all:
-            first = 100
 
         self.opencti.app_logger.info(
             "Listing Data-Sources with filters", {"filters": json.dumps(filters)}

pycti/entities/opencti_event.py

@@ -241,8 +241,6 @@ class Event:
         get_all = kwargs.get("getAll", False)
         with_pagination = kwargs.get("withPagination", False)
         with_files = kwargs.get("withFiles", False)
-        if get_all:
-            first = 100
 
         self.opencti.app_logger.info(
             "Listing Events with filters", {"filters": json.dumps(filters)}

pycti/entities/opencti_external_reference.py

@@ -93,8 +93,6 @@ class ExternalReference:
         get_all = kwargs.get("getAll", False)
         with_pagination = kwargs.get("withPagination", False)
         with_files = kwargs.get("withFiles", False)
-        if get_all:
-            first = 100
 
         self.opencti.app_logger.info(
             "Listing External-Reference with filters", {"filters": json.dumps(filters)}

pycti/entities/opencti_feedback.py

@@ -444,8 +444,6 @@ class Feedback:
         get_all = kwargs.get("getAll", False)
         with_pagination = kwargs.get("withPagination", False)
         with_files = kwargs.get("withFiles", False)
-        if get_all:
-            first = 500
 
         self.opencti.app_logger.info(
             "Listing Feedbacks with filters", {"filters": json.dumps(filters)}

pycti/entities/opencti_grouping.py

@@ -434,8 +434,6 @@ class Grouping:
         get_all = kwargs.get("getAll", False)
         with_pagination = kwargs.get("withPagination", False)
         with_files = kwargs.get("withFiles", False)
-        if get_all:
-            first = 100
 
         self.opencti.app_logger.info(
             "Listing Groupings with filters", {"filters": json.dumps(filters)}

pycti/entities/opencti_identity.py

@@ -258,8 +258,6 @@ class Identity:
         get_all = kwargs.get("getAll", False)
         with_pagination = kwargs.get("withPagination", False)
         with_files = kwargs.get("withFiles", False)
-        if get_all:
-            first = 500
 
         self.opencti.app_logger.info(
             "Listing Identities with filters", {"filters": json.dumps(filters)}

pycti/entities/opencti_incident.py

@@ -250,8 +250,6 @@ class Incident:
         get_all = kwargs.get("getAll", False)
         with_pagination = kwargs.get("withPagination", False)
         with_files = kwargs.get("withFiles", False)
-        if get_all:
-            first = 100
 
         self.opencti.app_logger.info(
             "Listing Incidents with filters", {"filters": json.dumps(filters)}

pycti/entities/opencti_infrastructure.py

@@ -270,8 +270,6 @@ class Infrastructure:
         get_all = kwargs.get("getAll", False)
         with_pagination = kwargs.get("withPagination", False)
         with_files = kwargs.get("withFiles", False)
-        if get_all:
-            first = 500
 
         self.opencti.app_logger.info(
             "Listing Infrastructures with filters", {"filters": json.dumps(filters)}

pycti/entities/opencti_intrusion_set.py

@@ -247,8 +247,6 @@ class IntrusionSet:
         get_all = kwargs.get("getAll", False)
         with_pagination = kwargs.get("withPagination", False)
         with_files = kwargs.get("withFiles", False)
-        if get_all:
-            first = 500
 
         self.opencti.app_logger.info(
             "Listing Intrusion-Sets with filters", {"filters": json.dumps(filters)}

pycti/entities/opencti_kill_chain_phase.py

@@ -48,10 +48,7 @@ class KillChainPhase:
         order_by = kwargs.get("orderBy", None)
         order_mode = kwargs.get("orderMode", None)
         custom_attributes = kwargs.get("customAttributes", None)
-        get_all = kwargs.get("getAll", False)
         with_pagination = kwargs.get("withPagination", False)
-        if get_all:
-            first = 500
 
         self.opencti.app_logger.info(
             "Listing Kill-Chain-Phase with filters", {"filters": json.dumps(filters)}

pycti/entities/opencti_label.py

@@ -44,8 +44,6 @@ class Label:
         custom_attributes = kwargs.get("customAttributes", None)
         get_all = kwargs.get("getAll", False)
         with_pagination = kwargs.get("withPagination", False)
-        if get_all:
-            first = 100
 
         self.opencti.app_logger.info(
             "Listing Labels with filters", {"filters": json.dumps(filters)}

pycti/entities/opencti_language.py

@@ -249,8 +249,6 @@ class Language:
         get_all = kwargs.get("getAll", False)
         with_pagination = kwargs.get("withPagination", False)
         with_files = kwargs.get("withFiles", False)
-        if get_all:
-            first = 100
 
         self.opencti.app_logger.info(
             "Listing Languages with filters", {"filters": json.dumps(filters)}

pycti/entities/opencti_location.py

@@ -257,11 +257,8 @@ class Location:
         order_by = kwargs.get("orderBy", None)
         order_mode = kwargs.get("orderMode", None)
         custom_attributes = kwargs.get("customAttributes", None)
-        get_all = kwargs.get("getAll", False)
         with_pagination = kwargs.get("withPagination", False)
         with_files = kwargs.get("withFiles", False)
-        if get_all:
-            first = 500
 
         self.opencti.app_logger.info(
             "Listing Locations with filters", {"filters": json.dumps(filters)}

pycti/entities/opencti_malware.py

@@ -275,8 +275,6 @@ class Malware:
         get_all = kwargs.get("getAll", False)
         with_pagination = kwargs.get("withPagination", False)
         with_files = kwargs.get("withFiles", False)
-        if get_all:
-            first = 500
 
         self.opencti.app_logger.info(
             "Listing Malwares with filters", {"filters": json.dumps(filters)}

pycti/entities/opencti_malware_analysis.py

@@ -255,8 +255,6 @@ class MalwareAnalysis:
         get_all = kwargs.get("getAll", False)
         with_pagination = kwargs.get("withPagination", False)
         with_files = kwargs.get("withFiles", False)
-        if get_all:
-            first = 500
 
         self.opencti.app_logger.info(
             "Listing Malware analyses with filters", {"filters": json.dumps(filters)}

pycti/entities/opencti_marking_definition.py

@@ -66,10 +66,7 @@ class MarkingDefinition:
         order_by = kwargs.get("orderBy", None)
         order_mode = kwargs.get("orderMode", None)
         custom_attributes = kwargs.get("customAttributes", None)
-        get_all = kwargs.get("getAll", False)
         with_pagination = kwargs.get("withPagination", False)
-        if get_all:
-            first = 500
 
         self.opencti.app_logger.info(
             "Listing Marking-Definitions with filters", {"filters": json.dumps(filters)}

pycti/entities/opencti_narrative.py

@@ -227,8 +227,6 @@ class Narrative:
         get_all = kwargs.get("getAll", False)
         with_pagination = kwargs.get("withPagination", False)
         with_files = kwargs.get("withFiles", False)
-        if get_all:
-            first = 100
 
         self.opencti.app_logger.info(
             "Listing Narratives with filters", {"filters": json.dumps(filters)}

pycti/entities/opencti_note.py

@@ -473,8 +473,6 @@ class Note:
         get_all = kwargs.get("getAll", False)
         with_pagination = kwargs.get("withPagination", False)
         with_files = kwargs.get("withFiles", False)
-        if get_all:
-            first = 100
 
         self.opencti.app_logger.info(
             "Listing Notes with filters", {"filters": json.dumps(filters)}

pycti/entities/opencti_observed_data.py

@@ -190,7 +190,7 @@ class ObservedData:
                         }
                         ... on StixCyberObservable {
                             observable_value
-                        }                               
+                        }
                         ... on StixCoreRelationship {
                             standard_id
                             spec_version
@@ -202,7 +202,7 @@ class ObservedData:
                             spec_version
                             created_at
                             updated_at
-                        }                        
+                        }
                     }
                 }
             }
@@ -401,7 +401,7 @@ class ObservedData:
                         }
                         ... on StixCyberObservable {
                             observable_value
-                        }                               
+                        }
                         ... on StixCoreRelationship {
                             standard_id
                             spec_version
@@ -413,7 +413,7 @@ class ObservedData:
                             spec_version
                             created_at
                             updated_at
-                        }                        
+                        }
                     }
                 }
             }
@@ -461,11 +461,8 @@ class ObservedData:
         order_by = kwargs.get("orderBy", None)
         order_mode = kwargs.get("orderMode", None)
         custom_attributes = kwargs.get("customAttributes", None)
-        get_all = kwargs.get("getAll", False)
         with_pagination = kwargs.get("withPagination", False)
         with_files = kwargs.get("withFiles", False)
-        if get_all:
-            first = 500
 
         self.opencti.app_logger.info(
             "Listing ObservedDatas with filters", {"filters": json.dumps(filters)}

pycti/entities/opencti_opinion.py

@@ -250,8 +250,6 @@ class Opinion:
         custom_attributes = kwargs.get("customAttributes", None)
         get_all = kwargs.get("getAll", False)
         with_pagination = kwargs.get("withPagination", False)
-        if get_all:
-            first = 100
 
         self.opencti.app_logger.info(
             "Listing Opinions with filters", {"filters": json.dumps(filters)}

pycti/entities/opencti_report.py

@@ -504,8 +504,6 @@ class Report:
         get_all = kwargs.get("getAll", False)
         with_pagination = kwargs.get("withPagination", False)
         with_files = kwargs.get("withFiles", False)
-        if get_all:
-            first = 100
 
         self.opencti.app_logger.info(
             "Listing Reports with filters",

pycti/entities/opencti_stix_core_object.py

@@ -1340,8 +1340,6 @@ class StixCoreObject:
         get_all = kwargs.get("getAll", False)
         with_pagination = kwargs.get("withPagination", False)
         with_files = kwargs.get("withFiles", False)
-        if get_all:
-            first = 100
 
         self.opencti.app_logger.info(
             "Listing Stix-Core-Objects with filters", {"filters": json.dumps(filters)}

pycti/entities/opencti_stix_core_relationship.py

@@ -408,8 +408,6 @@ class StixCoreRelationship:
         get_all = kwargs.get("getAll", False)
         with_pagination = kwargs.get("withPagination", False)
         search = kwargs.get("search", None)
-        if get_all:
-            first = 100
 
         self.opencti.app_logger.info(
             "Listing stix_core_relationships",

pycti/entities/opencti_stix_cyber_observable.py

@@ -48,9 +48,6 @@ class StixCyberObservable(StixCyberObservableDeprecatedMixin):
         with_pagination = kwargs.get("withPagination", False)
         with_files = kwargs.get("withFiles", False)
 
-        if get_all:
-            first = 100
-
         self.opencti.app_logger.info(
             "Listing StixCyberObservables with filters",
             {"filters": json.dumps(filters)},

pycti/entities/opencti_stix_domain_object.py

@@ -1030,8 +1030,6 @@ class StixDomainObject:
         get_all = kwargs.get("getAll", False)
         with_pagination = kwargs.get("withPagination", False)
         with_files = kwargs.get("withFiles", False)
-        if get_all:
-            first = 100
 
         self.opencti.app_logger.info(
             "Listing Stix-Domain-Objects with filters", {"filters": json.dumps(filters)}

pycti/entities/opencti_stix_nested_ref_relationship.py

@@ -24,13 +24,13 @@ class StixNestedRefRelationship:
                     standard_id
                     entity_type
                     parent_types
-                } 
+                }
                 ... on StixSightingRelationship {
                     id
                     standard_id
                     entity_type
                     parent_types
-                }                 
+                }
                 ... on StixCyberObservable {
                     observable_value
                 }
@@ -47,13 +47,13 @@ class StixNestedRefRelationship:
                     standard_id
                     entity_type
                     parent_types
-                } 
+                }
                 ... on StixSightingRelationship {
                     id
                     standard_id
                     entity_type
                     parent_types
-                }                 
+                }
                 ... on StixCyberObservable {
                     observable_value
                 }
@@ -92,10 +92,7 @@ class StixNestedRefRelationship:
         order_by = kwargs.get("orderBy", None)
         order_mode = kwargs.get("orderMode", None)
         custom_attributes = kwargs.get("customAttributes", None)
-        get_all = kwargs.get("getAll", False)
         with_pagination = kwargs.get("withPagination", False)
-        if get_all:
-            first = 500
 
         self.opencti.app_logger.info(
             "Listing stix_nested_ref_relationships",

pycti/entities/opencti_stix_sighting_relationship.py

@@ -340,8 +340,6 @@ class StixSightingRelationship:
         get_all = kwargs.get("getAll", False)
         with_pagination = kwargs.get("withPagination", False)
         search = kwargs.get("search", None)
-        if get_all:
-            first = 100
 
         self.opencti.app_logger.info(
             "Listing stix_sighting with {type: stix_sighting}",

pycti/entities/opencti_task.py

@@ -257,8 +257,6 @@ class Task:
         custom_attributes = kwargs.get("customAttributes", None)
         get_all = kwargs.get("getAll", False)
         with_pagination = kwargs.get("withPagination", False)
-        if get_all:
-            first = 500
 
         self.opencti.app_logger.info(
             "Listing Tasks with filters", {"filters": json.dumps(filters)}

pycti/entities/opencti_threat_actor.py

@@ -168,7 +168,6 @@ class ThreatActor:
         :param str after: (optional) OpenCTI object ID of the first row for pagination
         :param str orderBy: (optional) the field to order the response on
         :param bool orderMode: (optional) either "`asc`" or "`desc`"
-        :param bool getAll: (optional) switch to return all entries (be careful to use this without any other filters)
         :param bool withPagination: (optional) switch to use pagination
         """
 
@@ -179,10 +178,7 @@ class ThreatActor:
         order_by = kwargs.get("orderBy", None)
         order_mode = kwargs.get("orderMode", None)
         custom_attributes = kwargs.get("customAttributes", None)
-        get_all = kwargs.get("getAll", False)
         with_pagination = kwargs.get("withPagination", False)
-        if get_all:
-            first = 500
 
         self.opencti.app_logger.info(
             "Listing Threat-Actors with filters", {"filters": json.dumps(filters)}

pycti/entities/opencti_threat_actor_group.py

@@ -161,7 +161,6 @@ class ThreatActorGroup:
         :param str after: (optional) OpenCTI object ID of the first row for pagination
         :param str orderBy: (optional) the field to order the response on
         :param bool orderMode: (optional) either "`asc`" or "`desc`"
-        :param bool getAll: (optional) switch to return all entries (be careful to use this without any other filters)
         :param bool withPagination: (optional) switch to use pagination
         """
 
@@ -172,10 +171,7 @@ class ThreatActorGroup:
         order_by = kwargs.get("orderBy", None)
         order_mode = kwargs.get("orderMode", None)
         custom_attributes = kwargs.get("customAttributes", None)
-        get_all = kwargs.get("getAll", False)
         with_pagination = kwargs.get("withPagination", False)
-        if get_all:
-            first = 500
 
         self.opencti.app_logger.info(
             "Listing Threat-Actors-Group with filters", {"filters": json.dumps(filters)}

pycti/entities/opencti_threat_actor_individual.py

@@ -161,7 +161,6 @@ class ThreatActorIndividual:
         :param str after: (optional) OpenCTI object ID of the first row for pagination
         :param str orderBy: (optional) the field to order the response on
         :param bool orderMode: (optional) either "`asc`" or "`desc`"
-        :param bool getAll: (optional) switch to return all entries (be careful to use this without any other filters)
         :param bool withPagination: (optional) switch to use pagination
         """
 
@@ -172,10 +171,7 @@ class ThreatActorIndividual:
         order_by = kwargs.get("orderBy", None)
         order_mode = kwargs.get("orderMode", None)
         custom_attributes = kwargs.get("customAttributes", None)
-        get_all = kwargs.get("getAll", False)
         with_pagination = kwargs.get("withPagination", False)
-        if get_all:
-            first = 500
 
         self.opencti.app_logger.info(
             "Listing Threat-Actors-Individual with filters",

pycti/entities/opencti_tool.py

@@ -158,8 +158,6 @@ class Tool:
         custom_attributes = kwargs.get("customAttributes", None)
         get_all = kwargs.get("getAll", False)
         with_pagination = kwargs.get("withPagination", False)
-        if get_all:
-            first = 100
 
         self.opencti.app_logger.info(
             "Listing Tools with filters", {"filters": json.dumps(filters)}

pycti/entities/opencti_vulnerability.py

@@ -155,8 +155,6 @@ class Vulnerability:
         custom_attributes = kwargs.get("customAttributes", None)
         get_all = kwargs.get("getAll", False)
         with_pagination = kwargs.get("withPagination", False)
-        if get_all:
-            first = 100
 
         self.opencti.app_logger.info(
             "Listing Vulnerabilities with filters", {"filters": json.dumps(filters)}

pycti/utils/opencti_logger.py

@@ -1,5 +1,5 @@
-import datetime
 import logging
+from datetime import datetime, timezone
 
 from pythonjsonlogger import jsonlogger
 
@@ -9,8 +9,8 @@ class CustomJsonFormatter(jsonlogger.JsonFormatter):
         super(CustomJsonFormatter, self).add_fields(log_record, record, message_dict)
         if not log_record.get("timestamp"):
             # This doesn't use record.created, so it is slightly off
-            now = datetime.datetime.utcnow().strftime("%Y-%m-%dT%H:%M:%S.%fZ")
-            log_record["timestamp"] = now
+            now = datetime.now(tz=timezone.utc)
+            log_record["timestamp"] = now.strftime("%Y-%m-%dT%H:%M:%S.%fZ")
         if log_record.get("level"):
             log_record["level"] = log_record["level"].upper()
         else:

{pycti-6.5.1.dist-info → pycti-6.5.3.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.2
 Name: pycti
-Version: 6.5.1
+Version: 6.5.3
 Summary: Python API client for OpenCTI.
 Home-page: https://github.com/OpenCTI-Platform/client-python
 Author: Filigran
@@ -23,7 +23,7 @@ Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: datefinder~=0.7.3
 Requires-Dist: pika~=1.3.0
-Requires-Dist: pydantic~=2.10.4
+Requires-Dist: pydantic<2.11.0,>=2.8.2
 Requires-Dist: python-magic~=0.4.27; sys_platform == "linux" or sys_platform == "darwin"
 Requires-Dist: python-magic-bin~=0.4.14; sys_platform == "win32"
 Requires-Dist: python_json_logger~=2.0.4
@@ -32,16 +32,16 @@ Requires-Dist: requests~=2.32.2
 Requires-Dist: setuptools~=71.1.0
 Requires-Dist: cachetools~=5.5.0
 Requires-Dist: prometheus-client~=0.21.1
-Requires-Dist: opentelemetry-api~=1.22.0
-Requires-Dist: opentelemetry-sdk~=1.22.0
+Requires-Dist: opentelemetry-api<=1.30.0,>=1.22.0
+Requires-Dist: opentelemetry-sdk<=1.30.0,>=1.22.0
 Requires-Dist: deprecation~=2.1.0
 Requires-Dist: filigran-sseclient>=1.0.2
 Requires-Dist: stix2~=3.0.1
 Provides-Extra: dev
 Requires-Dist: black~=24.4.0; extra == "dev"
 Requires-Dist: build~=1.2.1; extra == "dev"
-Requires-Dist: isort~=5.13.0; extra == "dev"
-Requires-Dist: types-pytz~=2024.2.0.20241221; extra == "dev"
+Requires-Dist: isort~=6.0.0; extra == "dev"
+Requires-Dist: types-pytz~=2025.1.0.20250204; extra == "dev"
 Requires-Dist: pre-commit~=3.8.0; extra == "dev"
 Requires-Dist: pytest-cases~=3.8.0; extra == "dev"
 Requires-Dist: pytest-cov~=5.0.0; extra == "dev"

pycti-6.5.3.dist-info/RECORD

@@ -0,0 +1,74 @@
+pycti/__init__.py,sha256=gFIAyITucXs9B2UYyjuwCbbSPJtseEVYqbXLKUcYnUs,5218
+pycti/api/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+pycti/api/opencti_api_client.py,sha256=6TKvtgAk0iYQL2RaLTUV6cxCBefEgwmlL_iVHgzf_ow,32745
+pycti/api/opencti_api_connector.py,sha256=ubM_zPjTD8L33TEugCQgf_YF9zugDFg_7FgNubGlwJw,5447
+pycti/api/opencti_api_playbook.py,sha256=456We78vESukfSOi_CctfZ9dbBJEi76EHClRc2f21Js,1628
+pycti/api/opencti_api_work.py,sha256=qIRJMCfyC9odXf7LMRg9ImYizqF2WHUOU7Ty5IUFGg8,8351
+pycti/connector/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+pycti/connector/opencti_connector.py,sha256=5oVvS27KWhzRiofJAeQPDtba-EP83FziSistyEd5l-U,2561
+pycti/connector/opencti_connector_helper.py,sha256=ee8Ej43Ox9W7G44PEfHNGZuU_NmBVNl7dE3V3BzE4sE,81286
+pycti/connector/opencti_metric_handler.py,sha256=4jXHeJflomtHjuQ_YU0b36TG7o26vOWbY_jvU8Ezobs,3725
+pycti/entities/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+pycti/entities/opencti_attack_pattern.py,sha256=QXJaMMZlnVCxxHGZNGSKPLmHL3TgM08aUIS8SypmIek,22193
+pycti/entities/opencti_campaign.py,sha256=y2kk95eQxRyE3iu1FJ-RV_hEWCg_XDUgYuWbAyakRx0,17745
+pycti/entities/opencti_case_incident.py,sha256=6duPTxOPkwRlygH_lF7f34cNe7oOn929w0f48lBu1ag,34397
+pycti/entities/opencti_case_rfi.py,sha256=v8n2iHFeTZE87tTWtrVyamlUGzZZxWym5upFyaxaFUM,34055
+pycti/entities/opencti_case_rft.py,sha256=yV9fqNa9juLocJtOtylLM_Nuj4dPSWkTjEmT_89szbY,34946
+pycti/entities/opencti_channel.py,sha256=JPVy-DYcQnyxpySaX9xP8LkXmD6WZxEEnbJDfYVTlWY,16669
+pycti/entities/opencti_course_of_action.py,sha256=BFxnt55QWjq88fKxAuH0nv0TFIAS4uPtotmSPMH2PfY,18653
+pycti/entities/opencti_data_component.py,sha256=cdFxleWYBRxiLBTqklNHJIBIid8YPGJ0FDHBr-7LgEI,19225
+pycti/entities/opencti_data_source.py,sha256=abXeSHtBeaViuCqh5sZRZ6PZ_QchPBfUev0tvRKRpkw,18110
+pycti/entities/opencti_event.py,sha256=owGBWodcYFfurAq1LxaTSj3JIMXbdvFG4cr-joy-nak,16765
+pycti/entities/opencti_external_reference.py,sha256=zSsGOUajrTgSG9T0MHUzq-16XalJ0BHHC54RvBaTD48,13524
+pycti/entities/opencti_feedback.py,sha256=Duu3oXiQcTbJ6Tyk7k8wWt0wTK0U1Dtow1Hhht7tZeo,32376
+pycti/entities/opencti_grouping.py,sha256=WPLIt3dB4jMFkai4sDxaUq27VxjouOP1FT6LJQ8td2E,30235
+pycti/entities/opencti_identity.py,sha256=trQsvyzc2kIoZcZQn5GMQmutCNt7qRt39twg1EmWD2o,23759
+pycti/entities/opencti_incident.py,sha256=OFWUX1mtQ2lM2f15DU6FlriTZ9bXkb3Ql7oLCVLEmFk,18632
+pycti/entities/opencti_indicator.py,sha256=YL--rUsSy-7YGyE9eeT8jexg_pouBH-6SgNob901M8Y,20908
+pycti/entities/opencti_infrastructure.py,sha256=TXnofpQskioYSKAhVzH5bj17aWk2y7rsmlG57uhoxK4,19997
+pycti/entities/opencti_intrusion_set.py,sha256=2vIk2jfvrTL8H83UkpdpHwax_DYhO4lUAAlz_Ec1N3k,19023
+pycti/entities/opencti_kill_chain_phase.py,sha256=acNzuFdxhwI_8fvZOTEHhP8fC6EGY_r6jcKpA-nKa8Q,7991
+pycti/entities/opencti_label.py,sha256=vB6Qf6isxWBgFS8-lsPE_Zb56qsrt9JyPlB2TUcHuKA,8756
+pycti/entities/opencti_language.py,sha256=yViPa5qJ9lC_Cd8_iYVdmiNsK42DCeStnCgJ1NclaqQ,16238
+pycti/entities/opencti_location.py,sha256=NmUQR1C-w--nBMON0FMpLkC_TDGYKdrmulQJffQ-W0Q,18305
+pycti/entities/opencti_malware.py,sha256=hK7gjUDwb3c0XyBisQTP3bZXTXRp24AXM-HgvrjZgn4,20416
+pycti/entities/opencti_malware_analysis.py,sha256=sHGDTiY2xSNtSyI1Wej3QlwU_fmx9-nTXUMpx-5K7sk,21754
+pycti/entities/opencti_marking_definition.py,sha256=JYNodKOe94a22NbNf8YNI3xhh2q-D-5JuohLMM1njlE,13695
+pycti/entities/opencti_narrative.py,sha256=udkZK0ezfBoX0T0zmTsRgA3-3oYGvZZURAPUuKInU6E,17107
+pycti/entities/opencti_note.py,sha256=QHmA-067V1kXdgWpQD3m_GtSyv7Y5d-MqpQ-PIur7Og,30732
+pycti/entities/opencti_observed_data.py,sha256=va8frxFZfHVGR6vgmcZpB8blATmQ-zXhy4bQEsfwAp8,31043
+pycti/entities/opencti_opinion.py,sha256=SHD6oepJYF7dS5yorbaEilRdnasWmjDGcnAxHZnGdfk,22459
+pycti/entities/opencti_report.py,sha256=LY2wB6zcdchBD8URYoNqGWENMqnalOrmxoNKz306EDM,35303
+pycti/entities/opencti_stix.py,sha256=uMheSg8i1f2Ozx2Mk0iShWzHHjj6MMWDtV5nDjVxKEE,2275
+pycti/entities/opencti_stix_core_object.py,sha256=eyhsNAWaQO5X55Wn91b21j_d6bydBxfN29s2eQHrXkI,51639
+pycti/entities/opencti_stix_core_relationship.py,sha256=Ab3jJhhpmGFSTA4GaC11XoAsuUnujDCc8zSvwRUEwiQ,44742
+pycti/entities/opencti_stix_cyber_observable.py,sha256=W_vs-VmO7HMVu7kGcL9NPuHXhioCeEwDJRBB8Q3XsBI,92049
+pycti/entities/opencti_stix_domain_object.py,sha256=-7Dec8kTqeJA_sr1KrRohgQzitOC51dOd4035EXRALw,78850
+pycti/entities/opencti_stix_nested_ref_relationship.py,sha256=7USJlfTanPFY16aFIH2YONdRakrfoBuIbB0d0I52PSM,12479
+pycti/entities/opencti_stix_object_or_stix_relationship.py,sha256=5qutzML6SyYzDhZ-QpI9Vh23hzLEs-xeFAAZOpGHZ2g,18049
+pycti/entities/opencti_stix_sighting_relationship.py,sha256=PO4RK3UBkA2b_xcqjiqWnLSKgvaQy291al_yunQ96h4,28736
+pycti/entities/opencti_task.py,sha256=rYfiUKtsSEq8A-Qa2wi7QBias1oiiHsaq3g_aLcWgl0,25290
+pycti/entities/opencti_threat_actor.py,sha256=Fk33LU8lsCP0SMMaA0SkT7fLZLmjddMi_-9PUJToDuM,10156
+pycti/entities/opencti_threat_actor_group.py,sha256=DuLT4DlAEtS7yQVbkFcAbPcyWsrdwYX5XBevsVuprxY,19515
+pycti/entities/opencti_threat_actor_individual.py,sha256=IhfsRBXvR73fwUQ5JYZ2GsRHuzVb92l6JaKvaqTdKp0,19767
+pycti/entities/opencti_tool.py,sha256=YbOp0Ur5Do7ToLzfIKGX-MtlBQf-Dt9Qtgk1lI9Q7aU,15295
+pycti/entities/opencti_vocabulary.py,sha256=xupdHJ6TznCmvI3sVYU261SnfblSNc1nwg19MG9yrao,6499
+pycti/entities/opencti_vulnerability.py,sha256=ssMH7EB7WC--Nv2bq-D-_wLBGXMgP3ZLK-X8SslpVJQ,22614
+pycti/entities/indicator/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+pycti/entities/indicator/opencti_indicator_properties.py,sha256=8X8YkCshM0gkHc9sQZ_WSNvVxOA4aTJmLta8ZG93HOU,5087
+pycti/entities/stix_cyber_observable/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+pycti/entities/stix_cyber_observable/opencti_stix_cyber_observable_deprecated.py,sha256=q-2G6OOqvUC1U2hSKxD8uT5T18M_IDkl72Tn1KoumQI,1847
+pycti/entities/stix_cyber_observable/opencti_stix_cyber_observable_properties.py,sha256=MN56CW8RWZwB0Pr8UiHZy_4nSzbgFbwdhSFKpsZ_d1Y,11293
+pycti/utils/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+pycti/utils/constants.py,sha256=ZgOVxY5bnrHiNvPgOfZLWk16sSDnaE_tg8JVjZpw24Q,11831
+pycti/utils/opencti_logger.py,sha256=BHNy9fJuTUTn_JEYSCmyvVwd6y-9ZJKxO40mY4iZ0bc,2226
+pycti/utils/opencti_stix2.py,sha256=pUx1Oglb1EnREheMzmJBrmRS17vGnZzF8PCmB-pjNM0,117680
+pycti/utils/opencti_stix2_identifier.py,sha256=k8L1z4q1xdCBfxqUba4YS_kT-MmbJFxYh0RvfGOmrOs,837
+pycti/utils/opencti_stix2_splitter.py,sha256=etnAWMDzNi2JCovSUJ5Td-XLVdzgKRdsV1XfpXOGols,11070
+pycti/utils/opencti_stix2_update.py,sha256=CnMyqkeVA0jgyxEcgqna8sABU4YPMjkEJ228GVurIn4,14658
+pycti/utils/opencti_stix2_utils.py,sha256=xgBZzm7HC76rLQYwTKkaUd_w9jJnVMoryHx7KDDIB_g,5065
+pycti-6.5.3.dist-info/LICENSE,sha256=xx0jnfkXJvxRnG63LTGOxlggYnIysveWIZ6H3PNdCrQ,11357
+pycti-6.5.3.dist-info/METADATA,sha256=_wJQlaIzlrzMj0sFHIqd3yOVbzutOVMIhFWaonbqpXY,5443
+pycti-6.5.3.dist-info/WHEEL,sha256=In9FTNxeP60KnTkGw7wk6mJPYd_dQSjEZmXdBdMCI-8,91
+pycti-6.5.3.dist-info/top_level.txt,sha256=cqEpxitAhHP4VgSA6xmrak6Yk9MeBkwoMTB6k7d2ZnE,6
+pycti-6.5.3.dist-info/RECORD,,

pycti-6.5.1.dist-info/RECORD

@@ -1,74 +0,0 @@
-pycti/__init__.py,sha256=EDjdNBXpv2xU_AQbYOiHSi_MofEgIVd8wu2Da6VISF8,5218
-pycti/api/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-pycti/api/opencti_api_client.py,sha256=OBXRNBbkYsbgqjxeY5iltHXIDeWqpFN3-SKsinkr66U,32402
-pycti/api/opencti_api_connector.py,sha256=ubM_zPjTD8L33TEugCQgf_YF9zugDFg_7FgNubGlwJw,5447
-pycti/api/opencti_api_playbook.py,sha256=456We78vESukfSOi_CctfZ9dbBJEi76EHClRc2f21Js,1628
-pycti/api/opencti_api_work.py,sha256=qIRJMCfyC9odXf7LMRg9ImYizqF2WHUOU7Ty5IUFGg8,8351
-pycti/connector/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-pycti/connector/opencti_connector.py,sha256=5oVvS27KWhzRiofJAeQPDtba-EP83FziSistyEd5l-U,2561
-pycti/connector/opencti_connector_helper.py,sha256=Az_scgGMBsZ5_m6_DNsKL84pWgJbD_Lksa2CkWkWipg,80772
-pycti/connector/opencti_metric_handler.py,sha256=4jXHeJflomtHjuQ_YU0b36TG7o26vOWbY_jvU8Ezobs,3725
-pycti/entities/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-pycti/entities/opencti_attack_pattern.py,sha256=rj3o2bFCoXniLmD9Ithi09S9Us8ab1G-GFLgqS8jll0,22237
-pycti/entities/opencti_campaign.py,sha256=QPvAPeydaIKFIl7ig3XUpfZCoRuiLABqoHSZG0uKbCE,17789
-pycti/entities/opencti_case_incident.py,sha256=1nEOSO9KkahekMDlPsqo4Tsh9xpNQmNx3zw8sOAH-4Y,34449
-pycti/entities/opencti_case_rfi.py,sha256=eXxq26qRQvE4KAMaXllRmVrST88eOpLIhQ2WLeeaXCY,34155
-pycti/entities/opencti_case_rft.py,sha256=wMwIFeOaU0XJ07P5Lv4qjbHcyHv532Si36XQZ1n9obc,35046
-pycti/entities/opencti_channel.py,sha256=6_R3e6WRnNe-qbZ4XHgXo7IalIRBd8l2YmKyNHpFtYM,16713
-pycti/entities/opencti_course_of_action.py,sha256=uOTik5-nykN83q7fqG-ClgJt3axwHy6DkAWA2ToTaT4,18697
-pycti/entities/opencti_data_component.py,sha256=8VpFJMr1fNmZg51kaHbzvmc_7KOZu_lMcwQsZylVQM4,19269
-pycti/entities/opencti_data_source.py,sha256=ATOz3B-pv8m6CkUq93MY6sg5zA8H-Q5SJRKwmna85Wk,18154
-pycti/entities/opencti_event.py,sha256=WUptWDmxMbuL-Mp0wX-BLTi15KJua1AO8L4n6tcSbTM,16809
-pycti/entities/opencti_external_reference.py,sha256=iffppZFJPRy0pZjdbfYYNlKp5PXS2VIWiyxeBMdGuuI,13568
-pycti/entities/opencti_feedback.py,sha256=t_4KnCi53lADEV-O_isD74v7GOMpoFz9Kf-eWJIBFoA,32420
-pycti/entities/opencti_grouping.py,sha256=q6zRDF_Oc2sIt6iKecxbqa8bh50UzJ8HixYouhem7Cc,30279
-pycti/entities/opencti_identity.py,sha256=QVXNBedhZ5jnQxx3w9IsrghvtRGpRhttpLdZ474TVZA,23803
-pycti/entities/opencti_incident.py,sha256=R0LYEBll5gv83pJloUcWRqTR5tmr2gF0kRGUAtg8w40,18676
-pycti/entities/opencti_indicator.py,sha256=YL--rUsSy-7YGyE9eeT8jexg_pouBH-6SgNob901M8Y,20908
-pycti/entities/opencti_infrastructure.py,sha256=9rL9Rk7470gvjG6wuTbqUqtjsGxmvDId1NksudArb94,20041
-pycti/entities/opencti_intrusion_set.py,sha256=z5ziqushqrWFBL4ub8HrOxIYXIonZCsQH12F-R35in0,19067
-pycti/entities/opencti_kill_chain_phase.py,sha256=Uk4phq-l8TJTpPKmHJa6_1zTJb59-lah2HDaYWqMOTk,8081
-pycti/entities/opencti_label.py,sha256=6RZJPIa_dXf_YNNU4xXKghfBnpNjhU5YXOaSIcB4YrM,8800
-pycti/entities/opencti_language.py,sha256=KugOaUMnygo8wDnv4RPJTv_EleNGWyEfsAOxI7NitLk,16282
-pycti/entities/opencti_location.py,sha256=dbsqkgZbcnrh2mrG5u59kZmCv6HrclwUIgSb9BPm4DI,18395
-pycti/entities/opencti_malware.py,sha256=JkwOhee1uqs9_OptLG9qiwPlwWo4WuI1v2VGomNPfDg,20460
-pycti/entities/opencti_malware_analysis.py,sha256=Oz1rPrF6rUczmaKNB8j8k6JDsp-1UOcJN-2fIfckXNI,21798
-pycti/entities/opencti_marking_definition.py,sha256=zYrlmf83xQgh7dkH2y0v0XdFDw9HY9O7l6zGip2O4Jg,13785
-pycti/entities/opencti_narrative.py,sha256=jJz9v3DtApHS6gmpg6K8-jOG6E3s--K5ipzwc3WXF8A,17151
-pycti/entities/opencti_note.py,sha256=vYgooFvqWI9d9586HEQjp0xEzsrdLYQ_I9kKetw41Pg,30776
-pycti/entities/opencti_observed_data.py,sha256=9cTUTDB7DG7dKdyQsm30ucOUs8xxu6-r-VqVAYKzl68,31243
-pycti/entities/opencti_opinion.py,sha256=Znwkqx1gUYYu-Rx7jIidDC3yj0PQfLA-G3gz_IVXZbs,22503
-pycti/entities/opencti_report.py,sha256=W6lRCnW7J7vE5U_07X81wR6ff2Tk_GzeOV1B--NBiPA,35347
-pycti/entities/opencti_stix.py,sha256=uMheSg8i1f2Ozx2Mk0iShWzHHjj6MMWDtV5nDjVxKEE,2275
-pycti/entities/opencti_stix_core_object.py,sha256=Lc0-lytsEjQRWD9VkVTHPrWPgqOzqT99qwndOQIRYCw,51683
-pycti/entities/opencti_stix_core_relationship.py,sha256=Jebd-pp5aMu-HE58jisBBsQm0D3U03HBmi3ZePcRmtc,44786
-pycti/entities/opencti_stix_cyber_observable.py,sha256=ywZHND5Kfykurn-EUO2k0-hdpsrCHHFjpb4xONVGEt8,92094
-pycti/entities/opencti_stix_domain_object.py,sha256=LyKy5DbhtffO_sHJO3Xo1_PcuPi27pTKp_ETYhdU_zs,78894
-pycti/entities/opencti_stix_nested_ref_relationship.py,sha256=eGCF7yaEDqMsJbgvTDle0tVzRCF78CmEhE02jioUTCc,12605
-pycti/entities/opencti_stix_object_or_stix_relationship.py,sha256=5qutzML6SyYzDhZ-QpI9Vh23hzLEs-xeFAAZOpGHZ2g,18049
-pycti/entities/opencti_stix_sighting_relationship.py,sha256=FyvEcOwcSyVY_oYVqAVfi_VeeNLl7QJlTigM09tpXu0,28780
-pycti/entities/opencti_task.py,sha256=s1vmv1HBuyC9i8ujruMZ5kBDKXuCtf19_0IVTKoBS9Q,25334
-pycti/entities/opencti_threat_actor.py,sha256=oo-WovanGdO_Ic9X1_uHBQB-4R25shLD1-6Sa7HJZKo,10365
-pycti/entities/opencti_threat_actor_group.py,sha256=lo60v-3qFRxtTmQ5Bq_csQchzE8spsdHmhMgXRDBM-4,19724
-pycti/entities/opencti_threat_actor_individual.py,sha256=hPcOrHKERTpcnVmFF8h8Dwe4gebWBK7h35BAMFf8P7g,19976
-pycti/entities/opencti_tool.py,sha256=PVI7fOz1t8cNfF6wvlO1LLWZqS26m8Ayn3-s-XQpaWg,15339
-pycti/entities/opencti_vocabulary.py,sha256=xupdHJ6TznCmvI3sVYU261SnfblSNc1nwg19MG9yrao,6499
-pycti/entities/opencti_vulnerability.py,sha256=PxlfRKrwmkqU5E8o8WF04YRXJtCxBu5QBKbxvd96loY,22658
-pycti/entities/indicator/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-pycti/entities/indicator/opencti_indicator_properties.py,sha256=8X8YkCshM0gkHc9sQZ_WSNvVxOA4aTJmLta8ZG93HOU,5087
-pycti/entities/stix_cyber_observable/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-pycti/entities/stix_cyber_observable/opencti_stix_cyber_observable_deprecated.py,sha256=q-2G6OOqvUC1U2hSKxD8uT5T18M_IDkl72Tn1KoumQI,1847
-pycti/entities/stix_cyber_observable/opencti_stix_cyber_observable_properties.py,sha256=MN56CW8RWZwB0Pr8UiHZy_4nSzbgFbwdhSFKpsZ_d1Y,11293
-pycti/utils/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-pycti/utils/constants.py,sha256=ZgOVxY5bnrHiNvPgOfZLWk16sSDnaE_tg8JVjZpw24Q,11831
-pycti/utils/opencti_logger.py,sha256=0dvB75V0SuPFGxL539dAQrxTt1N5Acx0A3Ogwl5WMJ8,2199
-pycti/utils/opencti_stix2.py,sha256=pUx1Oglb1EnREheMzmJBrmRS17vGnZzF8PCmB-pjNM0,117680
-pycti/utils/opencti_stix2_identifier.py,sha256=k8L1z4q1xdCBfxqUba4YS_kT-MmbJFxYh0RvfGOmrOs,837
-pycti/utils/opencti_stix2_splitter.py,sha256=etnAWMDzNi2JCovSUJ5Td-XLVdzgKRdsV1XfpXOGols,11070
-pycti/utils/opencti_stix2_update.py,sha256=CnMyqkeVA0jgyxEcgqna8sABU4YPMjkEJ228GVurIn4,14658
-pycti/utils/opencti_stix2_utils.py,sha256=xgBZzm7HC76rLQYwTKkaUd_w9jJnVMoryHx7KDDIB_g,5065
-pycti-6.5.1.dist-info/LICENSE,sha256=xx0jnfkXJvxRnG63LTGOxlggYnIysveWIZ6H3PNdCrQ,11357
-pycti-6.5.1.dist-info/METADATA,sha256=MAlkjZwkBgaOT5zmyFolpyg3y_eYxFlIx-7ngO-l9Dk,5419
-pycti-6.5.1.dist-info/WHEEL,sha256=In9FTNxeP60KnTkGw7wk6mJPYd_dQSjEZmXdBdMCI-8,91
-pycti-6.5.1.dist-info/top_level.txt,sha256=cqEpxitAhHP4VgSA6xmrak6Yk9MeBkwoMTB6k7d2ZnE,6
-pycti-6.5.1.dist-info/RECORD,,