pycti 6.6.18__py3-none-any.whl → 6.7.1__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.

This version of pycti might be problematic. Click here for more details.

Files changed (30) hide show
  1. pycti/__init__.py +1 -1
  2. pycti/api/opencti_api_client.py +14 -0
  3. pycti/api/opencti_api_draft.py +19 -0
  4. pycti/api/opencti_api_internal_file.py +26 -0
  5. pycti/api/opencti_api_notification.py +39 -0
  6. pycti/api/opencti_api_pir.py +37 -0
  7. pycti/api/opencti_api_playbook.py +20 -0
  8. pycti/api/opencti_api_public_dashboard.py +25 -0
  9. pycti/api/opencti_api_trash.py +42 -0
  10. pycti/api/opencti_api_work.py +19 -0
  11. pycti/api/opencti_api_workspace.py +24 -0
  12. pycti/entities/opencti_group.py +7 -1
  13. pycti/entities/opencti_identity.py +59 -0
  14. pycti/entities/opencti_indicator.py +37 -0
  15. pycti/entities/opencti_stix.py +4 -3
  16. pycti/entities/opencti_stix_core_object.py +327 -0
  17. pycti/entities/opencti_stix_core_relationship.py +83 -0
  18. pycti/entities/opencti_stix_domain_object.py +80 -0
  19. pycti/entities/opencti_stix_object_or_stix_relationship.py +40 -0
  20. pycti/entities/opencti_stix_sighting_relationship.py +81 -0
  21. pycti/entities/opencti_vulnerability.py +627 -36
  22. pycti/utils/constants.py +2 -1
  23. pycti/utils/opencti_stix2.py +195 -11
  24. pycti/utils/opencti_stix2_splitter.py +6 -3
  25. pycti/utils/opencti_stix2_utils.py +31 -4
  26. {pycti-6.6.18.dist-info → pycti-6.7.1.dist-info}/METADATA +1 -1
  27. {pycti-6.6.18.dist-info → pycti-6.7.1.dist-info}/RECORD +30 -23
  28. {pycti-6.6.18.dist-info → pycti-6.7.1.dist-info}/WHEEL +0 -0
  29. {pycti-6.6.18.dist-info → pycti-6.7.1.dist-info}/licenses/LICENSE +0 -0
  30. {pycti-6.6.18.dist-info → pycti-6.7.1.dist-info}/top_level.txt +0 -0
pycti/entities/opencti_vulnerability.py CHANGED
@@ -107,15 +107,53 @@ class Vulnerability:
107
107
  name
108
108
  description
109
109
  x_opencti_aliases
110
+ x_opencti_cvss_vector_string
110
111
  x_opencti_cvss_base_score
111
112
  x_opencti_cvss_base_severity
112
113
  x_opencti_cvss_attack_vector
114
+ x_opencti_cvss_attack_complexity
115
+ x_opencti_cvss_privileges_required
116
+ x_opencti_cvss_user_interaction
117
+ x_opencti_cvss_scope
118
+ x_opencti_cvss_confidentiality_impact
113
119
  x_opencti_cvss_integrity_impact
114
120
  x_opencti_cvss_availability_impact
115
- x_opencti_cvss_confidentiality_impact
121
+ x_opencti_cvss_exploit_code_maturity
122
+ x_opencti_cvss_remediation_level
123
+ x_opencti_cvss_report_confidence
124
+ x_opencti_cvss_temporal_score
125
+ x_opencti_cvss_v2_vector_string
126
+ x_opencti_cvss_v2_base_score
127
+ x_opencti_cvss_v2_access_vector
128
+ x_opencti_cvss_v2_access_complexity
129
+ x_opencti_cvss_v2_authentication
130
+ x_opencti_cvss_v2_confidentiality_impact
131
+ x_opencti_cvss_v2_integrity_impact
132
+ x_opencti_cvss_v2_availability_impact
133
+ x_opencti_cvss_v2_exploitability
134
+ x_opencti_cvss_v2_remediation_level
135
+ x_opencti_cvss_v2_report_confidence
136
+ x_opencti_cvss_v2_temporal_score
137
+ x_opencti_cvss_v4_vector_string
138
+ x_opencti_cvss_v4_base_score
139
+ x_opencti_cvss_v4_base_severity
140
+ x_opencti_cvss_v4_attack_vector
141
+ x_opencti_cvss_v4_attack_complexity
142
+ x_opencti_cvss_v4_attack_requirements
143
+ x_opencti_cvss_v4_privileges_required
144
+ x_opencti_cvss_v4_user_interaction
145
+ x_opencti_cvss_v4_confidentiality_impact_v
146
+ x_opencti_cvss_v4_confidentiality_impact_s
147
+ x_opencti_cvss_v4_integrity_impact_v
148
+ x_opencti_cvss_v4_integrity_impact_s
149
+ x_opencti_cvss_v4_availability_impact_v
150
+ x_opencti_cvss_v4_availability_impact_s
151
+ x_opencti_cvss_v4_exploit_maturity
152
+ x_opencti_cwe
116
153
  x_opencti_cisa_kev
117
154
  x_opencti_epss_score
118
155
  x_opencti_epss_percentile
156
+ x_opencti_score
119
157
  importFiles {
120
158
  edges {
121
159
  node {
@@ -293,21 +331,127 @@ class Vulnerability:
293
331
  name = kwargs.get("name", None)
294
332
  description = kwargs.get("description", None)
295
333
  x_opencti_aliases = kwargs.get("x_opencti_aliases", None)
334
+ # CVSS3
335
+ x_opencti_cvss_vector_string = kwargs.get("x_opencti_cvss_vector_string", None)
296
336
  x_opencti_cvss_base_score = kwargs.get("x_opencti_cvss_base_score", None)
297
337
  x_opencti_cvss_base_severity = kwargs.get("x_opencti_cvss_base_severity", None)
298
338
  x_opencti_cvss_attack_vector = kwargs.get("x_opencti_cvss_attack_vector", None)
299
- x_opencti_cisa_kev = kwargs.get("x_opencti_cisa_kev", None)
300
- x_opencti_epss_score = kwargs.get("x_opencti_epss_score", None)
301
- x_opencti_epss_percentile = kwargs.get("x_opencti_epss_percentile", None)
339
+ x_opencti_cvss_attack_complexity = kwargs.get(
340
+ "x_opencti_cvss_attack_complexity", None
341
+ )
342
+ x_opencti_cvss_privileges_required = kwargs.get(
343
+ "x_opencti_cvss_privileges_required", None
344
+ )
345
+ x_opencti_cvss_user_interaction = kwargs.get(
346
+ "x_opencti_cvss_user_interaction", None
347
+ )
348
+ x_opencti_cvss_scope = kwargs.get("x_opencti_cvss_scope", None)
349
+ x_opencti_cvss_confidentiality_impact = kwargs.get(
350
+ "x_opencti_cvss_confidentiality_impact", None
351
+ )
302
352
  x_opencti_cvss_integrity_impact = kwargs.get(
303
353
  "x_opencti_cvss_integrity_impact", None
304
354
  )
305
355
  x_opencti_cvss_availability_impact = kwargs.get(
306
356
  "x_opencti_cvss_availability_impact", None
307
357
  )
308
- x_opencti_cvss_confidentiality_impact = kwargs.get(
309
- "x_opencti_cvss_confidentiality_impact", None
358
+ x_opencti_cvss_exploit_code_maturity = kwargs.get(
359
+ "x_opencti_cvss_exploit_code_maturity", None
360
+ )
361
+ x_opencti_cvss_remediation_level = kwargs.get(
362
+ "x_opencti_cvss_remediation_level", None
363
+ )
364
+ x_opencti_cvss_report_confidence = kwargs.get(
365
+ "x_opencti_cvss_report_confidence", None
366
+ )
367
+ x_opencti_cvss_temporal_score = kwargs.get(
368
+ "x_opencti_cvss_temporal_score", None
369
+ )
370
+ # CVSS2
371
+ x_opencti_cvss_v2_vector_string = kwargs.get(
372
+ "x_opencti_cvss_v2_vector_string", None
373
+ )
374
+ x_opencti_cvss_v2_base_score = kwargs.get("x_opencti_cvss_v2_base_score", None)
375
+ x_opencti_cvss_v2_access_vector = kwargs.get(
376
+ "x_opencti_cvss_v2_access_vector", None
377
+ )
378
+ x_opencti_cvss_v2_access_complexity = kwargs.get(
379
+ "x_opencti_cvss_v2_access_complexity", None
380
+ )
381
+ x_opencti_cvss_v2_authentication = kwargs.get(
382
+ "x_opencti_cvss_v2_authentication", None
383
+ )
384
+ x_opencti_cvss_v2_confidentiality_impact = kwargs.get(
385
+ "x_opencti_cvss_v2_confidentiality_impact", None
386
+ )
387
+ x_opencti_cvss_v2_integrity_impact = kwargs.get(
388
+ "x_opencti_cvss_v2_integrity_impact", None
389
+ )
390
+ x_opencti_cvss_v2_availability_impact = kwargs.get(
391
+ "x_opencti_cvss_v2_availability_impact", None
392
+ )
393
+ x_opencti_cvss_v2_exploitability = kwargs.get(
394
+ "x_opencti_cvss_v2_exploitability", None
395
+ )
396
+ x_opencti_cvss_v2_remediation_level = kwargs.get(
397
+ "x_opencti_cvss_v2_remediation_level", None
398
+ )
399
+ x_opencti_cvss_v2_report_confidence = kwargs.get(
400
+ "x_opencti_cvss_v2_report_confidence", None
401
+ )
402
+ x_opencti_cvss_v2_temporal_score = kwargs.get(
403
+ "x_opencti_cvss_v2_temporal_score", None
404
+ )
405
+ # CVSS4
406
+ x_opencti_cvss_v4_vector_string = kwargs.get(
407
+ "x_opencti_cvss_v4_vector_string", None
408
+ )
409
+ x_opencti_cvss_v4_base_score = kwargs.get("x_opencti_cvss_v4_base_score", None)
410
+ x_opencti_cvss_v4_base_severity = kwargs.get(
411
+ "x_opencti_cvss_v4_base_severity", None
412
+ )
413
+ x_opencti_cvss_v4_attack_vector = kwargs.get(
414
+ "x_opencti_cvss_v4_attack_vector", None
415
+ )
416
+ x_opencti_cvss_v4_attack_complexity = kwargs.get(
417
+ "x_opencti_cvss_v4_attack_complexity", None
418
+ )
419
+ x_opencti_cvss_v4_attack_requirements = kwargs.get(
420
+ "x_opencti_cvss_v4_attack_requirements", None
310
421
  )
422
+ x_opencti_cvss_v4_privileges_required = kwargs.get(
423
+ "x_opencti_cvss_v4_privileges_required", None
424
+ )
425
+ x_opencti_cvss_v4_user_interaction = kwargs.get(
426
+ "x_opencti_cvss_v4_user_interaction", None
427
+ )
428
+ x_opencti_cvss_v4_confidentiality_impact_v = kwargs.get(
429
+ "x_opencti_cvss_v4_confidentiality_impact_v", None
430
+ )
431
+ x_opencti_cvss_v4_confidentiality_impact_s = kwargs.get(
432
+ "x_opencti_cvss_v4_confidentiality_impact_s", None
433
+ )
434
+ x_opencti_cvss_v4_integrity_impact_v = kwargs.get(
435
+ "x_opencti_cvss_v4_integrity_impact_v", None
436
+ )
437
+ x_opencti_cvss_v4_integrity_impact_s = kwargs.get(
438
+ "x_opencti_cvss_v4_integrity_impact_s", None
439
+ )
440
+ x_opencti_cvss_v4_availability_impact_v = kwargs.get(
441
+ "x_opencti_cvss_v4_availability_impact_v", None
442
+ )
443
+ x_opencti_cvss_v4_availability_impact_s = kwargs.get(
444
+ "x_opencti_cvss_v4_availability_impact_s", None
445
+ )
446
+ x_opencti_cvss_v4_exploit_maturity = kwargs.get(
447
+ "x_opencti_cvss_v4_exploit_maturity", None
448
+ )
449
+ # Others
450
+ x_opencti_cwe = kwargs.get("x_opencti_cwe", None)
451
+ x_opencti_cisa_kev = kwargs.get("x_opencti_cisa_kev", None)
452
+ x_opencti_epss_score = kwargs.get("x_opencti_epss_score", None)
453
+ x_opencti_epss_percentile = kwargs.get("x_opencti_epss_percentile", None)
454
+ x_opencti_score = kwargs.get("x_opencti_score", None)
311
455
  x_opencti_stix_ids = kwargs.get("x_opencti_stix_ids", None)
312
456
  granted_refs = kwargs.get("objectOrganization", None)
313
457
  x_opencti_workflow_id = kwargs.get("x_opencti_workflow_id", None)
@@ -343,15 +487,57 @@ class Vulnerability:
343
487
  "name": name,
344
488
  "description": description,
345
489
  "x_opencti_aliases": x_opencti_aliases,
490
+ # CVSS3
491
+ "x_opencti_cvss_vector_string": x_opencti_cvss_vector_string,
346
492
  "x_opencti_cvss_base_score": x_opencti_cvss_base_score,
347
493
  "x_opencti_cvss_base_severity": x_opencti_cvss_base_severity,
348
494
  "x_opencti_cvss_attack_vector": x_opencti_cvss_attack_vector,
495
+ "x_opencti_cvss_attack_complexity": x_opencti_cvss_attack_complexity,
496
+ "x_opencti_cvss_privileges_required": x_opencti_cvss_privileges_required,
497
+ "x_opencti_cvss_user_interaction": x_opencti_cvss_user_interaction,
498
+ "x_opencti_cvss_scope": x_opencti_cvss_scope,
499
+ "x_opencti_cvss_confidentiality_impact": x_opencti_cvss_confidentiality_impact,
349
500
  "x_opencti_cvss_integrity_impact": x_opencti_cvss_integrity_impact,
350
501
  "x_opencti_cvss_availability_impact": x_opencti_cvss_availability_impact,
351
- "x_opencti_cvss_confidentiality_impact": x_opencti_cvss_confidentiality_impact,
502
+ "x_opencti_cvss_exploit_code_maturity": x_opencti_cvss_exploit_code_maturity,
503
+ "x_opencti_cvss_remediation_level": x_opencti_cvss_remediation_level,
504
+ "x_opencti_cvss_report_confidence": x_opencti_cvss_report_confidence,
505
+ "x_opencti_cvss_temporal_score": x_opencti_cvss_temporal_score,
506
+ # CVSS2
507
+ "x_opencti_cvss_v2_vector_string": x_opencti_cvss_v2_vector_string,
508
+ "x_opencti_cvss_v2_base_score": x_opencti_cvss_v2_base_score,
509
+ "x_opencti_cvss_v2_access_vector": x_opencti_cvss_v2_access_vector,
510
+ "x_opencti_cvss_v2_access_complexity": x_opencti_cvss_v2_access_complexity,
511
+ "x_opencti_cvss_v2_authentication": x_opencti_cvss_v2_authentication,
512
+ "x_opencti_cvss_v2_confidentiality_impact": x_opencti_cvss_v2_confidentiality_impact,
513
+ "x_opencti_cvss_v2_integrity_impact": x_opencti_cvss_v2_integrity_impact,
514
+ "x_opencti_cvss_v2_availability_impact": x_opencti_cvss_v2_availability_impact,
515
+ "x_opencti_cvss_v2_exploitability": x_opencti_cvss_v2_exploitability,
516
+ "x_opencti_cvss_v2_remediation_level": x_opencti_cvss_v2_remediation_level,
517
+ "x_opencti_cvss_v2_report_confidence": x_opencti_cvss_v2_report_confidence,
518
+ "x_opencti_cvss_v2_temporal_score": x_opencti_cvss_v2_temporal_score,
519
+ # CVSS 4
520
+ "x_opencti_cvss_v4_vector_string": x_opencti_cvss_v4_vector_string,
521
+ "x_opencti_cvss_v4_base_score": x_opencti_cvss_v4_base_score,
522
+ "x_opencti_cvss_v4_base_severity": x_opencti_cvss_v4_base_severity,
523
+ "x_opencti_cvss_v4_attack_vector": x_opencti_cvss_v4_attack_vector,
524
+ "x_opencti_cvss_v4_attack_complexity": x_opencti_cvss_v4_attack_complexity,
525
+ "x_opencti_cvss_v4_attack_requirements": x_opencti_cvss_v4_attack_requirements,
526
+ "x_opencti_cvss_v4_privileges_required": x_opencti_cvss_v4_privileges_required,
527
+ "x_opencti_cvss_v4_user_interaction": x_opencti_cvss_v4_user_interaction,
528
+ "x_opencti_cvss_v4_confidentiality_impact_v": x_opencti_cvss_v4_confidentiality_impact_v,
529
+ "x_opencti_cvss_v4_confidentiality_impact_s": x_opencti_cvss_v4_confidentiality_impact_s,
530
+ "x_opencti_cvss_v4_integrity_impact_v": x_opencti_cvss_v4_integrity_impact_v,
531
+ "x_opencti_cvss_v4_integrity_impact_s": x_opencti_cvss_v4_integrity_impact_s,
532
+ "x_opencti_cvss_v4_availability_impact_v": x_opencti_cvss_v4_availability_impact_v,
533
+ "x_opencti_cvss_v4_availability_impact_s": x_opencti_cvss_v4_availability_impact_s,
534
+ "x_opencti_cvss_v4_exploit_maturity": x_opencti_cvss_v4_exploit_maturity,
535
+ # Others
536
+ "x_opencti_cwe": x_opencti_cwe,
352
537
  "x_opencti_cisa_kev": x_opencti_cisa_kev,
353
538
  "x_opencti_epss_score": x_opencti_epss_score,
354
539
  "x_opencti_epss_percentile": x_opencti_epss_percentile,
540
+ "x_opencti_score": x_opencti_score,
355
541
  "x_opencti_stix_ids": x_opencti_stix_ids,
356
542
  "x_opencti_workflow_id": x_opencti_workflow_id,
357
543
  "update": update,
@@ -410,51 +596,258 @@ class Vulnerability:
410
596
  stix_object["x_opencti_aliases"] = (
411
597
  self.opencti.get_attribute_in_extension("aliases", stix_object)
412
598
  )
599
+ # CVSS3
600
+ if "x_opencti_cvss_vector_string" not in stix_object:
601
+ stix_object["x_opencti_cvss_vector_string"] = (
602
+ self.opencti.get_attribute_in_extension("cvss_vector", stix_object)
603
+ )
413
604
  if "x_opencti_cvss_base_score" not in stix_object:
414
605
  stix_object["x_opencti_cvss_base_score"] = (
415
- self.opencti.get_attribute_in_extension("base_score", stix_object)
606
+ self.opencti.get_attribute_in_extension(
607
+ "cvss_base_score", stix_object
608
+ )
416
609
  )
417
610
  if "x_opencti_cvss_base_severity" not in stix_object:
418
611
  stix_object["x_opencti_cvss_base_severity"] = (
419
612
  self.opencti.get_attribute_in_extension(
420
- "base_severity", stix_object
613
+ "cvss_base_severity", stix_object
421
614
  )
422
615
  )
423
616
  if "x_opencti_cvss_attack_vector" not in stix_object:
424
617
  stix_object["x_opencti_cvss_attack_vector"] = (
425
618
  self.opencti.get_attribute_in_extension(
426
- "attack_vector", stix_object
619
+ "cvss_attack_vector", stix_object
620
+ )
621
+ )
622
+ if "x_opencti_cvss_attack_complexity" not in stix_object:
623
+ stix_object["x_opencti_cvss_attack_complexity"] = (
624
+ self.opencti.get_attribute_in_extension(
625
+ "cvss_attack_complexity", stix_object
626
+ )
627
+ )
628
+ if "x_opencti_cvss_privileges_required" not in stix_object:
629
+ stix_object["x_opencti_cvss_privileges_required"] = (
630
+ self.opencti.get_attribute_in_extension(
631
+ "cvss_privileges_required", stix_object
632
+ )
633
+ )
634
+ if "x_opencti_cvss_user_interaction" not in stix_object:
635
+ stix_object["x_opencti_cvss_user_interaction"] = (
636
+ self.opencti.get_attribute_in_extension(
637
+ "cvss_user_interaction", stix_object
638
+ )
639
+ )
640
+ if "x_opencti_cvss_scope" not in stix_object:
641
+ stix_object["x_opencti_cvss_scope"] = (
642
+ self.opencti.get_attribute_in_extension("cvss_scope", stix_object)
643
+ )
644
+ if "x_opencti_cvss_confidentiality_impact" not in stix_object:
645
+ stix_object["x_opencti_cvss_confidentiality_impact"] = (
646
+ self.opencti.get_attribute_in_extension(
647
+ "cvss_confidentiality_impact", stix_object
427
648
  )
428
649
  )
429
650
  if "x_opencti_cvss_integrity_impact" not in stix_object:
430
651
  stix_object["x_opencti_cvss_integrity_impact"] = (
431
652
  self.opencti.get_attribute_in_extension(
432
- "integrity_impact", stix_object
653
+ "cvss_integrity_impact", stix_object
433
654
  )
434
655
  )
435
656
  if "x_opencti_cvss_availability_impact" not in stix_object:
436
657
  stix_object["x_opencti_cvss_availability_impact"] = (
437
658
  self.opencti.get_attribute_in_extension(
438
- "availability_impact", stix_object
659
+ "cvss_availability_impact", stix_object
439
660
  )
440
661
  )
441
- if "x_opencti_cvss_confidentiality_impact" not in stix_object:
442
- stix_object["x_opencti_cvss_confidentiality_impact"] = (
662
+ if "x_opencti_cvss_exploit_code_maturity" not in stix_object:
663
+ stix_object["x_opencti_cvss_exploit_code_maturity"] = (
664
+ self.opencti.get_attribute_in_extension(
665
+ "cvss_exploit_code_maturity", stix_object
666
+ )
667
+ )
668
+ if "x_opencti_cvss_remediation_level" not in stix_object:
669
+ stix_object["x_opencti_cvss_remediation_level"] = (
670
+ self.opencti.get_attribute_in_extension(
671
+ "cvss_remediation_level", stix_object
672
+ )
673
+ )
674
+ if "x_opencti_cvss_report_confidence" not in stix_object:
675
+ stix_object["x_opencti_cvss_report_confidence"] = (
676
+ self.opencti.get_attribute_in_extension(
677
+ "cvss_report_confidence", stix_object
678
+ )
679
+ )
680
+ if "x_opencti_cvss_temporal_score" not in stix_object:
681
+ stix_object["x_opencti_cvss_temporal_score"] = (
682
+ self.opencti.get_attribute_in_extension(
683
+ "cvss_temporal_score", stix_object
684
+ )
685
+ )
686
+
687
+ # CVSS2
688
+ if "x_opencti_cvss_v2_vector_string" not in stix_object:
689
+ stix_object["x_opencti_cvss_v2_vector_string"] = (
690
+ self.opencti.get_attribute_in_extension(
691
+ "cvss_v2_vector", stix_object
692
+ )
693
+ )
694
+ if "x_opencti_cvss_v2_base_score" not in stix_object:
695
+ stix_object["x_opencti_cvss_v2_base_score"] = (
696
+ self.opencti.get_attribute_in_extension(
697
+ "cvss_v2_base_score", stix_object
698
+ )
699
+ )
700
+ if "x_opencti_cvss_v2_access_vector" not in stix_object:
701
+ stix_object["x_opencti_cvss_v2_access_vector"] = (
702
+ self.opencti.get_attribute_in_extension(
703
+ "cvss_v2_access_vector", stix_object
704
+ )
705
+ )
706
+ if "x_opencti_cvss_v2_access_complexity" not in stix_object:
707
+ stix_object["x_opencti_cvss_v2_access_complexity"] = (
708
+ self.opencti.get_attribute_in_extension(
709
+ "cvss_v2_access_complexity", stix_object
710
+ )
711
+ )
712
+ if "x_opencti_cvss_v2_authentication" not in stix_object:
713
+ stix_object["x_opencti_cvss_v2_authentication"] = (
714
+ self.opencti.get_attribute_in_extension(
715
+ "cvss_v2_authentication", stix_object
716
+ )
717
+ )
718
+ if "x_opencti_cvss_v2_confidentiality_impact" not in stix_object:
719
+ stix_object["x_opencti_cvss_v2_confidentiality_impact"] = (
720
+ self.opencti.get_attribute_in_extension(
721
+ "cvss_v2_confidentiality_impact", stix_object
722
+ )
723
+ )
724
+ if "x_opencti_cvss_v2_integrity_impact" not in stix_object:
725
+ stix_object["x_opencti_cvss_v2_integrity_impact"] = (
726
+ self.opencti.get_attribute_in_extension(
727
+ "cvss_v2_integrity_impact", stix_object
728
+ )
729
+ )
730
+ if "x_opencti_cvss_v2_availability_impact" not in stix_object:
731
+ stix_object["x_opencti_cvss_v2_availability_impact"] = (
732
+ self.opencti.get_attribute_in_extension(
733
+ "cvss_v2_availability_impact", stix_object
734
+ )
735
+ )
736
+ if "x_opencti_cvss_v2_exploitability" not in stix_object:
737
+ stix_object["x_opencti_cvss_v2_exploitability"] = (
738
+ self.opencti.get_attribute_in_extension(
739
+ "cvss_v2_exploitability", stix_object
740
+ )
741
+ )
742
+ if "x_opencti_cvss_v2_remediation_level" not in stix_object:
743
+ stix_object["x_opencti_cvss_v2_remediation_level"] = (
744
+ self.opencti.get_attribute_in_extension(
745
+ "cvss_v2_remediation_level", stix_object
746
+ )
747
+ )
748
+ if "x_opencti_cvss_v2_report_confidence" not in stix_object:
749
+ stix_object["x_opencti_cvss_v2_report_confidence"] = (
750
+ self.opencti.get_attribute_in_extension(
751
+ "cvss_v2_report_confidence", stix_object
752
+ )
753
+ )
754
+ if "x_opencti_cvss_v2_temporal_score" not in stix_object:
755
+ stix_object["x_opencti_cvss_v2_temporal_score"] = (
443
756
  self.opencti.get_attribute_in_extension(
444
- "confidentiality_impact", stix_object
757
+ "cvss_v2_temporal_score", stix_object
445
758
  )
446
759
  )
447
- if "x_opencti_stix_ids" not in stix_object:
448
- stix_object["x_opencti_stix_ids"] = (
449
- self.opencti.get_attribute_in_extension("stix_ids", stix_object)
760
+
761
+ # CVSS4
762
+ if "x_opencti_cvss_v4_vector_string" not in stix_object:
763
+ stix_object["x_opencti_cvss_v4_vector_string"] = (
764
+ self.opencti.get_attribute_in_extension(
765
+ "cvss_v4_vector", stix_object
766
+ )
767
+ )
768
+ if "x_opencti_cvss_v4_base_score" not in stix_object:
769
+ stix_object["x_opencti_cvss_v4_base_score"] = (
770
+ self.opencti.get_attribute_in_extension(
771
+ "cvss_v4_base_score", stix_object
772
+ )
773
+ )
774
+ if "x_opencti_cvss_v4_base_severity" not in stix_object:
775
+ stix_object["x_opencti_cvss_v4_base_severity"] = (
776
+ self.opencti.get_attribute_in_extension(
777
+ "cvss_v4_base_severity", stix_object
778
+ )
779
+ )
780
+ if "x_opencti_cvss_v4_attack_vector" not in stix_object:
781
+ stix_object["x_opencti_cvss_v4_attack_vector"] = (
782
+ self.opencti.get_attribute_in_extension(
783
+ "cvss_v4_attack_vector", stix_object
784
+ )
450
785
  )
451
- if "x_opencti_granted_refs" not in stix_object:
452
- stix_object["x_opencti_granted_refs"] = (
453
- self.opencti.get_attribute_in_extension("granted_refs", stix_object)
786
+ if "x_opencti_cvss_v4_attack_complexity" not in stix_object:
787
+ stix_object["x_opencti_cvss_v4_attack_complexity"] = (
788
+ self.opencti.get_attribute_in_extension(
789
+ "cvss_v4_attack_complexity", stix_object
790
+ )
454
791
  )
455
- if "x_opencti_workflow_id" not in stix_object:
456
- stix_object["x_opencti_workflow_id"] = (
457
- self.opencti.get_attribute_in_extension("workflow_id", stix_object)
792
+ if "x_opencti_cvss_v4_attack_requirements" not in stix_object:
793
+ stix_object["x_opencti_cvss_v4_attack_requirements"] = (
794
+ self.opencti.get_attribute_in_extension(
795
+ "cvss_v4_attack_requirements", stix_object
796
+ )
797
+ )
798
+ if "x_opencti_cvss_v4_privileges_required" not in stix_object:
799
+ stix_object["x_opencti_cvss_v4_privileges_required"] = (
800
+ self.opencti.get_attribute_in_extension(
801
+ "cvss_v4_privileges_required", stix_object
802
+ )
803
+ )
804
+ if "x_opencti_cvss_v4_user_interaction" not in stix_object:
805
+ stix_object["x_opencti_cvss_v4_user_interaction"] = (
806
+ self.opencti.get_attribute_in_extension(
807
+ "cvss_v4_user_interaction", stix_object
808
+ )
809
+ )
810
+ if "x_opencti_cvss_v4_confidentiality_impact_v" not in stix_object:
811
+ stix_object["x_opencti_cvss_v4_confidentiality_impact_v"] = (
812
+ self.opencti.get_attribute_in_extension(
813
+ "cvss_v4_confidentiality_impact_v", stix_object
814
+ )
815
+ )
816
+ if "x_opencti_cvss_v4_confidentiality_impact_s" not in stix_object:
817
+ stix_object["x_opencti_cvss_v4_confidentiality_impact_s"] = (
818
+ self.opencti.get_attribute_in_extension(
819
+ "cvss_v4_confidentiality_impact_s", stix_object
820
+ )
821
+ )
822
+ if "x_opencti_cvss_v4_integrity_impact_v" not in stix_object:
823
+ stix_object["x_opencti_cvss_v4_integrity_impact_v"] = (
824
+ self.opencti.get_attribute_in_extension(
825
+ "cvss_v4_integrity_impact_v", stix_object
826
+ )
827
+ )
828
+ if "x_opencti_cvss_v4_integrity_impact_s" not in stix_object:
829
+ stix_object["x_opencti_cvss_v4_integrity_impact_s"] = (
830
+ self.opencti.get_attribute_in_extension(
831
+ "cvss_v4_integrity_impact_s", stix_object
832
+ )
833
+ )
834
+ if "x_opencti_cvss_v4_availability_impact_v" not in stix_object:
835
+ stix_object["x_opencti_cvss_v4_availability_impact_v"] = (
836
+ self.opencti.get_attribute_in_extension(
837
+ "cvss_v4_availability_impact_v", stix_object
838
+ )
839
+ )
840
+ if "x_opencti_cvss_v4_exploit_maturity" not in stix_object:
841
+ stix_object["x_opencti_cvss_v4_exploit_maturity"] = (
842
+ self.opencti.get_attribute_in_extension(
843
+ "cvss_v4_exploit_maturity", stix_object
844
+ )
845
+ )
846
+
847
+ # Others
848
+ if "x_opencti_cwe" not in stix_object:
849
+ stix_object["x_opencti_cwe"] = self.opencti.get_attribute_in_extension(
850
+ "cwe", stix_object
458
851
  )
459
852
  if "x_opencti_cisa_kev" not in stix_object:
460
853
  stix_object["x_opencti_cisa_kev"] = (
@@ -470,6 +863,10 @@ class Vulnerability:
470
863
  "epss_percentile", stix_object
471
864
  )
472
865
  )
866
+ if "x_opencti_score" not in stix_object:
867
+ stix_object["x_opencti_score"] = (
868
+ self.opencti.get_attribute_in_extension("score", stix_object)
869
+ )
473
870
 
474
871
  return self.create(
475
872
  stix_id=stix_object["id"],
@@ -507,6 +904,27 @@ class Vulnerability:
507
904
  if "x_opencti_aliases" in stix_object
508
905
  else None
509
906
  ),
907
+ x_opencti_stix_ids=(
908
+ stix_object["x_opencti_stix_ids"]
909
+ if "x_opencti_stix_ids" in stix_object
910
+ else None
911
+ ),
912
+ objectOrganization=(
913
+ stix_object["x_opencti_granted_refs"]
914
+ if "x_opencti_granted_refs" in stix_object
915
+ else None
916
+ ),
917
+ x_opencti_workflow_id=(
918
+ stix_object["x_opencti_workflow_id"]
919
+ if "x_opencti_workflow_id" in stix_object
920
+ else None
921
+ ),
922
+ # CVSS3
923
+ x_opencti_cvss_vector_string=(
924
+ stix_object["x_opencti_cvss_vector_string"]
925
+ if "x_opencti_cvss_vector_string" in stix_object
926
+ else None
927
+ ),
510
928
  x_opencti_cvss_base_score=(
511
929
  stix_object["x_opencti_cvss_base_score"]
512
930
  if "x_opencti_cvss_base_score" in stix_object
@@ -522,6 +940,31 @@ class Vulnerability:
522
940
  if "x_opencti_cvss_attack_vector" in stix_object
523
941
  else None
524
942
  ),
943
+ x_opencti_cvss_attack_complexity=(
944
+ stix_object["x_opencti_cvss_attack_complexity"]
945
+ if "x_opencti_cvss_attack_complexity" in stix_object
946
+ else None
947
+ ),
948
+ x_opencti_cvss_privileges_required=(
949
+ stix_object["x_opencti_cvss_privileges_required"]
950
+ if "x_opencti_cvss_privileges_required" in stix_object
951
+ else None
952
+ ),
953
+ x_opencti_cvss_user_interaction=(
954
+ stix_object["x_opencti_cvss_user_interaction"]
955
+ if "x_opencti_cvss_user_interaction" in stix_object
956
+ else None
957
+ ),
958
+ x_opencti_cvss_scope=(
959
+ stix_object["x_opencti_cvss_scope"]
960
+ if "x_opencti_cvss_scope" in stix_object
961
+ else None
962
+ ),
963
+ x_opencti_cvss_confidentiality_impact=(
964
+ stix_object["x_opencti_cvss_confidentiality_impact"]
965
+ if "x_opencti_cvss_confidentiality_impact" in stix_object
966
+ else None
967
+ ),
525
968
  x_opencti_cvss_integrity_impact=(
526
969
  stix_object["x_opencti_cvss_integrity_impact"]
527
970
  if "x_opencti_cvss_integrity_impact" in stix_object
@@ -532,24 +975,167 @@ class Vulnerability:
532
975
  if "x_opencti_cvss_availability_impact" in stix_object
533
976
  else None
534
977
  ),
535
- x_opencti_cvss_confidentiality_impact=(
536
- stix_object["x_opencti_cvss_confidentiality_impact"]
537
- if "x_opencti_cvss_confidentiality_impact" in stix_object
978
+ x_opencti_cvss_exploit_code_maturity=(
979
+ stix_object["x_opencti_cvss_exploit_code_maturity"]
980
+ if "x_opencti_cvss_exploit_code_maturity" in stix_object
538
981
  else None
539
982
  ),
540
- x_opencti_stix_ids=(
541
- stix_object["x_opencti_stix_ids"]
542
- if "x_opencti_stix_ids" in stix_object
983
+ x_opencti_cvss_remediation_level=(
984
+ stix_object["x_opencti_cvss_remediation_level"]
985
+ if "x_opencti_cvss_remediation_level" in stix_object
543
986
  else None
544
987
  ),
545
- objectOrganization=(
546
- stix_object["x_opencti_granted_refs"]
547
- if "x_opencti_granted_refs" in stix_object
988
+ x_opencti_cvss_report_confidence=(
989
+ stix_object["x_opencti_cvss_report_confidence"]
990
+ if "x_opencti_cvss_report_confidence" in stix_object
548
991
  else None
549
992
  ),
550
- x_opencti_workflow_id=(
551
- stix_object["x_opencti_workflow_id"]
552
- if "x_opencti_workflow_id" in stix_object
993
+ x_opencti_cvss_temporal_score=(
994
+ stix_object["x_opencti_cvss_temporal_score"]
995
+ if "x_opencti_cvss_temporal_score" in stix_object
996
+ else None
997
+ ),
998
+ # CVSS2
999
+ x_opencti_cvss_v2_vector_string=(
1000
+ stix_object["x_opencti_cvss_v2_vector_string"]
1001
+ if "x_opencti_cvss_v2_vector_string" in stix_object
1002
+ else None
1003
+ ),
1004
+ x_opencti_cvss_v2_base_score=(
1005
+ stix_object["x_opencti_cvss_v2_base_score"]
1006
+ if "x_opencti_cvss_v2_base_score" in stix_object
1007
+ else None
1008
+ ),
1009
+ x_opencti_cvss_v2_access_vector=(
1010
+ stix_object["x_opencti_cvss_v2_access_vector"]
1011
+ if "x_opencti_cvss_v2_access_vector" in stix_object
1012
+ else None
1013
+ ),
1014
+ x_opencti_cvss_v2_access_complexity=(
1015
+ stix_object["x_opencti_cvss_v2_access_complexity"]
1016
+ if "x_opencti_cvss_v2_access_complexity" in stix_object
1017
+ else None
1018
+ ),
1019
+ x_opencti_cvss_v2_authentication=(
1020
+ stix_object["x_opencti_cvss_v2_authentication"]
1021
+ if "x_opencti_cvss_v2_authentication" in stix_object
1022
+ else None
1023
+ ),
1024
+ x_opencti_cvss_v2_confidentiality_impact=(
1025
+ stix_object["x_opencti_cvss_v2_confidentiality_impact"]
1026
+ if "x_opencti_cvss_v2_confidentiality_impact" in stix_object
1027
+ else None
1028
+ ),
1029
+ x_opencti_cvss_v2_integrity_impact=(
1030
+ stix_object["x_opencti_cvss_v2_integrity_impact"]
1031
+ if "x_opencti_cvss_v2_integrity_impact" in stix_object
1032
+ else None
1033
+ ),
1034
+ x_opencti_cvss_v2_availability_impact=(
1035
+ stix_object["x_opencti_cvss_v2_availability_impact"]
1036
+ if "x_opencti_cvss_v2_availability_impact" in stix_object
1037
+ else None
1038
+ ),
1039
+ x_opencti_cvss_v2_exploitability=(
1040
+ stix_object["x_opencti_cvss_v2_exploitability"]
1041
+ if "x_opencti_cvss_v2_exploitability" in stix_object
1042
+ else None
1043
+ ),
1044
+ x_opencti_cvss_v2_remediation_level=(
1045
+ stix_object["x_opencti_cvss_v2_remediation_level"]
1046
+ if "x_opencti_cvss_v2_remediation_level" in stix_object
1047
+ else None
1048
+ ),
1049
+ x_opencti_cvss_v2_report_confidence=(
1050
+ stix_object["x_opencti_cvss_v2_report_confidence"]
1051
+ if "x_opencti_cvss_v2_report_confidence" in stix_object
1052
+ else None
1053
+ ),
1054
+ x_opencti_cvss_v2_temporal_score=(
1055
+ stix_object["x_opencti_cvss_v2_temporal_score"]
1056
+ if "x_opencti_cvss_v2_temporal_score" in stix_object
1057
+ else None
1058
+ ),
1059
+ # CVSS4
1060
+ x_opencti_cvss_v4_vector_string=(
1061
+ stix_object["x_opencti_cvss_v4_vector_string"]
1062
+ if "x_opencti_cvss_v4_vector_string" in stix_object
1063
+ else None
1064
+ ),
1065
+ x_opencti_cvss_v4_base_score=(
1066
+ stix_object["x_opencti_cvss_v4_base_score"]
1067
+ if "x_opencti_cvss_v4_base_score" in stix_object
1068
+ else None
1069
+ ),
1070
+ x_opencti_cvss_v4_base_severity=(
1071
+ stix_object["x_opencti_cvss_v4_base_severity"]
1072
+ if "x_opencti_cvss_v4_base_severity" in stix_object
1073
+ else None
1074
+ ),
1075
+ x_opencti_cvss_v4_attack_vector=(
1076
+ stix_object["x_opencti_cvss_v4_attack_vector"]
1077
+ if "x_opencti_cvss_v4_attack_vector" in stix_object
1078
+ else None
1079
+ ),
1080
+ x_opencti_cvss_v4_attack_complexity=(
1081
+ stix_object["x_opencti_cvss_v4_attack_complexity"]
1082
+ if "x_opencti_cvss_v4_attack_complexity" in stix_object
1083
+ else None
1084
+ ),
1085
+ x_opencti_cvss_v4_attack_requirements=(
1086
+ stix_object["x_opencti_cvss_v4_attack_requirements"]
1087
+ if "x_opencti_cvss_v4_attack_requirements" in stix_object
1088
+ else None
1089
+ ),
1090
+ x_opencti_cvss_v4_privileges_required=(
1091
+ stix_object["x_opencti_cvss_v4_privileges_required"]
1092
+ if "x_opencti_cvss_v4_privileges_required" in stix_object
1093
+ else None
1094
+ ),
1095
+ x_opencti_cvss_v4_user_interaction=(
1096
+ stix_object["x_opencti_cvss_v4_user_interaction"]
1097
+ if "x_opencti_cvss_v4_user_interaction" in stix_object
1098
+ else None
1099
+ ),
1100
+ x_opencti_cvss_v4_confidentiality_impact_v=(
1101
+ stix_object["x_opencti_cvss_v4_confidentiality_impact_v"]
1102
+ if "x_opencti_cvss_v4_confidentiality_impact_v" in stix_object
1103
+ else None
1104
+ ),
1105
+ x_opencti_cvss_v4_confidentiality_impact_s=(
1106
+ stix_object["x_opencti_cvss_v4_confidentiality_impact_s"]
1107
+ if "x_opencti_cvss_v4_confidentiality_impact_s" in stix_object
1108
+ else None
1109
+ ),
1110
+ x_opencti_cvss_v4_integrity_impact_v=(
1111
+ stix_object["x_opencti_cvss_v4_integrity_impact_v"]
1112
+ if "x_opencti_cvss_v4_integrity_impact_v" in stix_object
1113
+ else None
1114
+ ),
1115
+ x_opencti_cvss_v4_integrity_impact_s=(
1116
+ stix_object["x_opencti_cvss_v4_integrity_impact_s"]
1117
+ if "x_opencti_cvss_v4_integrity_impact_s" in stix_object
1118
+ else None
1119
+ ),
1120
+ x_opencti_cvss_v4_availability_impact_v=(
1121
+ stix_object["x_opencti_cvss_v4_availability_impact_v"]
1122
+ if "x_opencti_cvss_v4_availability_impact_v" in stix_object
1123
+ else None
1124
+ ),
1125
+ x_opencti_cvss_v4_availability_impact_s=(
1126
+ stix_object["x_opencti_cvss_v4_availability_impact_s"]
1127
+ if "x_opencti_cvss_v4_availability_impact_s" in stix_object
1128
+ else None
1129
+ ),
1130
+ x_opencti_cvss_v4_exploit_maturity=(
1131
+ stix_object["x_opencti_cvss_v4_exploit_maturity"]
1132
+ if "x_opencti_cvss_v4_exploit_maturity" in stix_object
1133
+ else None
1134
+ ),
1135
+ # Others
1136
+ x_opencti_cwe=(
1137
+ stix_object["x_opencti_cwe"]
1138
+ if "x_opencti_cwe" in stix_object
553
1139
  else None
554
1140
  ),
555
1141
  x_opencti_cisa_kev=(
@@ -567,6 +1153,11 @@ class Vulnerability:
567
1153
  if "x_opencti_epss_percentile" in stix_object
568
1154
  else None
569
1155
  ),
1156
+ x_opencti_score=(
1157
+ stix_object["x_opencti_score"]
1158
+ if "x_opencti_score" in stix_object
1159
+ else None
1160
+ ),
570
1161
  update=update,
571
1162
  )
572
1163
  else: