pycti 6.5.9__tar.gz → 6.5.10__tar.gz
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of pycti might be problematic. Click here for more details.
- {pycti-6.5.9 → pycti-6.5.10}/PKG-INFO +1 -1
- {pycti-6.5.9 → pycti-6.5.10}/pycti/__init__.py +1 -1
- {pycti-6.5.9 → pycti-6.5.10}/pycti/api/opencti_api_client.py +1 -1
- {pycti-6.5.9 → pycti-6.5.10}/pycti/api/opencti_api_connector.py +3 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/opencti_indicator.py +12 -5
- {pycti-6.5.9 → pycti-6.5.10}/pycti/utils/constants.py +1 -3
- {pycti-6.5.9 → pycti-6.5.10}/pycti.egg-info/PKG-INFO +1 -1
- {pycti-6.5.9 → pycti-6.5.10}/LICENSE +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/README.md +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/api/__init__.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/api/opencti_api_playbook.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/api/opencti_api_work.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/connector/__init__.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/connector/opencti_connector.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/connector/opencti_connector_helper.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/connector/opencti_metric_handler.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/__init__.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/indicator/__init__.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/indicator/opencti_indicator_properties.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/opencti_attack_pattern.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/opencti_campaign.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/opencti_case_incident.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/opencti_case_rfi.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/opencti_case_rft.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/opencti_channel.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/opencti_course_of_action.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/opencti_data_component.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/opencti_data_source.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/opencti_event.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/opencti_external_reference.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/opencti_feedback.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/opencti_grouping.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/opencti_identity.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/opencti_incident.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/opencti_infrastructure.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/opencti_intrusion_set.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/opencti_kill_chain_phase.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/opencti_label.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/opencti_language.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/opencti_location.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/opencti_malware.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/opencti_malware_analysis.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/opencti_marking_definition.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/opencti_narrative.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/opencti_note.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/opencti_observed_data.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/opencti_opinion.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/opencti_report.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/opencti_stix.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/opencti_stix_core_object.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/opencti_stix_core_relationship.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/opencti_stix_cyber_observable.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/opencti_stix_domain_object.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/opencti_stix_nested_ref_relationship.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/opencti_stix_object_or_stix_relationship.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/opencti_stix_sighting_relationship.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/opencti_task.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/opencti_threat_actor.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/opencti_threat_actor_group.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/opencti_threat_actor_individual.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/opencti_tool.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/opencti_vocabulary.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/opencti_vulnerability.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/stix_cyber_observable/__init__.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/stix_cyber_observable/opencti_stix_cyber_observable_deprecated.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/entities/stix_cyber_observable/opencti_stix_cyber_observable_properties.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/utils/__init__.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/utils/opencti_logger.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/utils/opencti_stix2.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/utils/opencti_stix2_identifier.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/utils/opencti_stix2_splitter.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/utils/opencti_stix2_update.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti/utils/opencti_stix2_utils.py +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti.egg-info/SOURCES.txt +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti.egg-info/dependency_links.txt +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti.egg-info/requires.txt +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pycti.egg-info/top_level.txt +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/pyproject.toml +0 -0
- {pycti-6.5.9 → pycti-6.5.10}/setup.cfg +0 -0
|
@@ -280,7 +280,7 @@ class OpenCTIApiClient:
|
|
|
280
280
|
if is_multiple_files:
|
|
281
281
|
# [(var_name + "." + i)] if is_multiple_files else
|
|
282
282
|
for _ in file_var_item["file"]:
|
|
283
|
-
file_vars[str(map_index)] = [
|
|
283
|
+
file_vars[str(map_index)] = [var_name + "." + str(map_index)]
|
|
284
284
|
map_index += 1
|
|
285
285
|
else:
|
|
286
286
|
file_vars[str(map_index)] = [var_name]
|
|
@@ -48,6 +48,7 @@ class Indicator:
|
|
|
48
48
|
:param list customAttributes: (optional) list of attributes keys to return
|
|
49
49
|
:param bool getAll: (optional) switch to return all entries (be careful to use this without any other filters)
|
|
50
50
|
:param bool withPagination: (optional) switch to use pagination
|
|
51
|
+
:param bool toStix: (optional) get in STIX
|
|
51
52
|
|
|
52
53
|
:return: List of Indicators
|
|
53
54
|
:rtype: list
|
|
@@ -63,21 +64,26 @@ class Indicator:
|
|
|
63
64
|
get_all = kwargs.get("getAll", False)
|
|
64
65
|
with_pagination = kwargs.get("withPagination", False)
|
|
65
66
|
with_files = kwargs.get("withFiles", False)
|
|
67
|
+
to_stix = kwargs.get("toStix", False)
|
|
66
68
|
|
|
67
69
|
self.opencti.app_logger.info(
|
|
68
70
|
"Listing Indicators with filters", {"filters": json.dumps(filters)}
|
|
69
71
|
)
|
|
70
72
|
query = (
|
|
71
73
|
"""
|
|
72
|
-
query Indicators($filters: FilterGroup, $search: String, $first: Int, $after: ID, $orderBy: IndicatorsOrdering, $orderMode: OrderingMode) {
|
|
73
|
-
indicators(filters: $filters, search: $search, first: $first, after: $after, orderBy: $orderBy, orderMode: $orderMode) {
|
|
74
|
+
query Indicators($filters: FilterGroup, $search: String, $first: Int, $after: ID, $orderBy: IndicatorsOrdering, $orderMode: OrderingMode, $toStix: Boolean) {
|
|
75
|
+
indicators(filters: $filters, search: $search, first: $first, after: $after, orderBy: $orderBy, orderMode: $orderMode, toStix: $toStix) {
|
|
74
76
|
edges {
|
|
75
77
|
node {
|
|
76
78
|
"""
|
|
77
79
|
+ (
|
|
78
|
-
|
|
79
|
-
if
|
|
80
|
-
else (
|
|
80
|
+
"toStix"
|
|
81
|
+
if to_stix
|
|
82
|
+
else (
|
|
83
|
+
custom_attributes
|
|
84
|
+
if custom_attributes is not None
|
|
85
|
+
else (self.properties_with_files if with_files else self.properties)
|
|
86
|
+
)
|
|
81
87
|
)
|
|
82
88
|
+ """
|
|
83
89
|
}
|
|
@@ -102,6 +108,7 @@ class Indicator:
|
|
|
102
108
|
"after": after,
|
|
103
109
|
"orderBy": order_by,
|
|
104
110
|
"orderMode": order_mode,
|
|
111
|
+
"toStix": to_stix,
|
|
105
112
|
},
|
|
106
113
|
)
|
|
107
114
|
if get_all:
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|