pycti 6.7.17__py3-none-any.whl → 6.7.19__py3-none-any.whl

pycti/__init__.py

@@ -1,5 +1,5 @@
 # -*- coding: utf-8 -*-
-__version__ = "6.7.17"
+__version__ = "6.7.19"
 
 from .api.opencti_api_client import OpenCTIApiClient
 from .api.opencti_api_connector import OpenCTIApiConnector

pycti/entities/opencti_case_rfi.py

@@ -701,6 +701,7 @@ class CaseRfi:
         created = kwargs.get("created", None)
         modified = kwargs.get("modified", None)
         name = kwargs.get("name", None)
+        content = kwargs.get("content", None)
         description = kwargs.get("description", None)
         x_opencti_stix_ids = kwargs.get("x_opencti_stix_ids", None)
         granted_refs = kwargs.get("objectOrganization", None)
@@ -742,6 +743,7 @@ class CaseRfi:
                         "modified": modified,
                         "name": name,
                         "description": description,
+                        "content": content,
                         "x_opencti_stix_ids": x_opencti_stix_ids,
                         "x_opencti_workflow_id": x_opencti_workflow_id,
                         "update": update,
@@ -874,6 +876,13 @@ class CaseRfi:
                 stix_object["x_opencti_assignee_ids"] = (
                     self.opencti.get_attribute_in_extension("assignee_ids", stix_object)
                 )
+            if "x_opencti_content" not in stix_object or "content" not in stix_object:
+                stix_object["content"] = self.opencti.get_attribute_in_extension(
+                    "content", stix_object
+                )
+            if "x_opencti_content" in stix_object:
+                stix_object["content"] = stix_object["x_opencti_content"]
+
             if "x_opencti_participant_ids" not in stix_object:
                 stix_object["x_opencti_participant_ids"] = (
                     self.opencti.get_attribute_in_extension(
@@ -900,6 +909,11 @@ class CaseRfi:
                     if "external_references_ids" in extras
                     else None
                 ),
+                content=(
+                    self.opencti.stix2.convert_markdown(stix_object["content"])
+                    if "content" in stix_object
+                    else None
+                ),
                 revoked=stix_object["revoked"] if "revoked" in stix_object else None,
                 severity=stix_object["severity"] if "severity" in stix_object else None,
                 priority=stix_object["priority"] if "priority" in stix_object else None,

pycti/entities/opencti_case_rft.py

@@ -697,6 +697,7 @@ class CaseRft:
         priority = kwargs.get("priority", None)
         confidence = kwargs.get("confidence", None)
         lang = kwargs.get("lang", None)
+        content = kwargs.get("content", None)
         created = kwargs.get("created", None)
         modified = kwargs.get("modified", None)
         name = kwargs.get("name", None)
@@ -735,6 +736,7 @@ class CaseRft:
                         "revoked": revoked,
                         "severity": severity,
                         "priority": priority,
+                        "content": content,
                         "confidence": confidence,
                         "lang": lang,
                         "created": created,
@@ -865,6 +867,13 @@ class CaseRft:
                 stix_object["x_opencti_granted_refs"] = (
                     self.opencti.get_attribute_in_extension("granted_refs", stix_object)
                 )
+            if "x_opencti_content" not in stix_object or "content" not in stix_object:
+                stix_object["content"] = self.opencti.get_attribute_in_extension(
+                    "content", stix_object
+                )
+            if "x_opencti_content" in stix_object:
+                stix_object["content"] = stix_object["x_opencti_content"]
+
             if "x_opencti_workflow_id" not in stix_object:
                 stix_object["x_opencti_workflow_id"] = (
                     self.opencti.get_attribute_in_extension("workflow_id", stix_object)
@@ -904,6 +913,11 @@ class CaseRft:
                 confidence=(
                     stix_object["confidence"] if "confidence" in stix_object else None
                 ),
+                content=(
+                    self.opencti.stix2.convert_markdown(stix_object["content"])
+                    if "content" in stix_object
+                    else None
+                ),
                 lang=stix_object["lang"] if "lang" in stix_object else None,
                 created=stix_object["created"] if "created" in stix_object else None,
                 modified=stix_object["modified"] if "modified" in stix_object else None,

pycti/entities/opencti_external_reference.py

@@ -276,12 +276,13 @@ class ExternalReference:
         file_markings = kwargs.get("fileMarkings", None)
         mime_type = kwargs.get("mime_type", "text/plain")
         no_trigger_import = kwargs.get("no_trigger_import", False)
+        embedded = kwargs.get("embedded", False)
         if id is not None and file_name is not None:
             final_file_name = os.path.basename(file_name)
             query = """
-                mutation ExternalReferenceEdit($id: ID!, $file: Upload!, $fileMarkings: [String], $version: DateTime, $noTriggerImport: Boolean) {
+                mutation ExternalReferenceEdit($id: ID!, $file: Upload!, $fileMarkings: [String], $version: DateTime, $noTriggerImport: Boolean, $embedded: Boolean) {
                     externalReferenceEdit(id: $id) {
-                        importPush(file: $file, fileMarkings: $fileMarkings, version: $version, noTriggerImport: $noTriggerImport) {
+                        importPush(file: $file, fileMarkings: $fileMarkings, version: $version, noTriggerImport: $noTriggerImport, embedded: $embedded) {
                             id
                             name
                         }
@@ -310,6 +311,7 @@ class ExternalReference:
                         if isinstance(no_trigger_import, bool)
                         else no_trigger_import == "True"
                     ),
+                    "embedded": embedded,
                 },
             )
         else:

pycti/entities/opencti_grouping.py

@@ -644,6 +644,7 @@ class Grouping:
         modified = kwargs.get("modified", None)
         name = kwargs.get("name", None)
         context = kwargs.get("context", None)
+        content = kwargs.get("content", None)
         description = kwargs.get("description", None)
         x_opencti_aliases = kwargs.get("x_opencti_aliases", None)
         x_opencti_stix_ids = kwargs.get("x_opencti_stix_ids", None)
@@ -681,6 +682,7 @@ class Grouping:
                         "modified": modified,
                         "name": name,
                         "context": context,
+                        "content": content,
                         "description": description,
                         "x_opencti_aliases": x_opencti_aliases,
                         "x_opencti_stix_ids": x_opencti_stix_ids,
@@ -802,6 +804,13 @@ class Grouping:
                 stix_object["x_opencti_granted_refs"] = (
                     self.opencti.get_attribute_in_extension("granted_refs", stix_object)
                 )
+            if "x_opencti_content" not in stix_object or "content" not in stix_object:
+                stix_object["content"] = self.opencti.get_attribute_in_extension(
+                    "content", stix_object
+                )
+            if "x_opencti_content" in stix_object:
+                stix_object["content"] = stix_object["x_opencti_content"]
+
             if "x_opencti_workflow_id" not in stix_object:
                 stix_object["x_opencti_workflow_id"] = (
                     self.opencti.get_attribute_in_extension("workflow_id", stix_object)
@@ -826,6 +835,11 @@ class Grouping:
                     if "external_references_ids" in extras
                     else None
                 ),
+                content=(
+                    self.opencti.stix2.convert_markdown(stix_object["content"])
+                    if "content" in stix_object
+                    else None
+                ),
                 revoked=stix_object["revoked"] if "revoked" in stix_object else None,
                 confidence=(
                     stix_object["confidence"] if "confidence" in stix_object else None

pycti/entities/opencti_stix_cyber_observable.py

@@ -185,12 +185,13 @@ class StixCyberObservable(StixCyberObservableDeprecatedMixin):
         version = kwargs.get("version", None)
         mime_type = kwargs.get("mime_type", "text/plain")
         no_trigger_import = kwargs.get("no_trigger_import", False)
+        embedded = kwargs.get("embedded", False)
         if id is not None and file_name is not None:
             final_file_name = os.path.basename(file_name)
             query = """
-                    mutation StixCyberObservableEdit($id: ID!, $file: Upload!, $fileMarkings: [String], $version: DateTime, $noTriggerImport: Boolean) {
+                    mutation StixCyberObservableEdit($id: ID!, $file: Upload!, $fileMarkings: [String], $version: DateTime, $noTriggerImport: Boolean, $embedded: Boolean) {
                         stixCyberObservableEdit(id: $id) {
-                            importPush(file: $file, version: $version, fileMarkings: $fileMarkings, noTriggerImport: $noTriggerImport) {
+                            importPush(file: $file, version: $version, fileMarkings: $fileMarkings, noTriggerImport: $noTriggerImport, embedded: $embedded) {
                                 id
                                 name
                             }
@@ -219,6 +220,7 @@ class StixCyberObservable(StixCyberObservableDeprecatedMixin):
                         if isinstance(no_trigger_import, bool)
                         else no_trigger_import == "True"
                     ),
+                    "embedded": embedded,
                 },
             )
         else:

pycti/entities/opencti_stix_domain_object.py

@@ -1368,12 +1368,13 @@ class StixDomainObject:
         version = kwargs.get("version", None)
         mime_type = kwargs.get("mime_type", "text/plain")
         no_trigger_import = kwargs.get("no_trigger_import", False)
+        embedded = kwargs.get("embedded", False)
         if id is not None and file_name is not None:
             final_file_name = os.path.basename(file_name)
             query = """
-                mutation StixDomainObjectEdit($id: ID!, $file: Upload!, $fileMarkings: [String], $version: DateTime, $noTriggerImport: Boolean) {
+                mutation StixDomainObjectEdit($id: ID!, $file: Upload!, $fileMarkings: [String], $version: DateTime, $noTriggerImport: Boolean, $embedded: Boolean) {
                     stixDomainObjectEdit(id: $id) {
-                        importPush(file: $file, version: $version, fileMarkings: $fileMarkings, noTriggerImport: $noTriggerImport) {
+                        importPush(file: $file, version: $version, fileMarkings: $fileMarkings, noTriggerImport: $noTriggerImport, embedded: $embedded) {
                             id
                             name
                         }
@@ -1402,6 +1403,7 @@ class StixDomainObject:
                         if isinstance(no_trigger_import, bool)
                         else no_trigger_import == "True"
                     ),
+                    "embedded": embedded,
                 },
             )
         else:

pycti/utils/opencti_stix2.py

@@ -758,6 +758,7 @@ class OpenCTIStix2:
                                 fileMarkings=file.get("object_marking_refs", None),
                                 mime_type=file["mime_type"],
                                 no_trigger_import=file.get("no_trigger_import", False),
+                                embedded=file.get("embedded", False),
                             )
                 if (
                     self.opencti.get_attribute_in_extension("files", external_reference)
@@ -775,6 +776,7 @@ class OpenCTIStix2:
                                 fileMarkings=file.get("object_marking_refs", None),
                                 mime_type=file["mime_type"],
                                 no_trigger_import=file.get("no_trigger_import", False),
+                                embedded=file.get("embedded", False),
                             )
                 external_references_ids.append(external_reference_id)
         # Granted refs
@@ -1050,6 +1052,7 @@ class OpenCTIStix2:
                             fileMarkings=file.get("object_marking_refs", None),
                             mime_type=file["mime_type"],
                             no_trigger_import=file.get("no_trigger_import", False),
+                            embedded=file.get("embedded", False),
                         )
             if (
                 self.opencti.get_attribute_in_extension("files", stix_object)
@@ -1067,6 +1070,7 @@ class OpenCTIStix2:
                             fileMarkings=file.get("object_marking_refs", None),
                             mime_type=file["mime_type"],
                             no_trigger_import=file.get("no_trigger_import", False),
+                            embedded=file.get("embedded", False),
                         )
         return stix_object_results
 
@@ -1179,6 +1183,7 @@ class OpenCTIStix2:
                             fileMarkings=file.get("object_marking_refs", None),
                             mime_type=file["mime_type"],
                             no_trigger_import=file.get("no_trigger_import", False),
+                            embedded=file.get("embedded", False),
                         )
             if (
                 self.opencti.get_attribute_in_extension("files", stix_object)
@@ -1196,6 +1201,7 @@ class OpenCTIStix2:
                             fileMarkings=file.get("object_marking_refs", None),
                             mime_type=file["mime_type"],
                             no_trigger_import=file.get("no_trigger_import", False),
+                            embedded=file.get("embedded", False),
                         )
             if "id" in stix_object:
                 self.mapping_cache[stix_object["id"]] = {
@@ -2472,6 +2478,7 @@ class OpenCTIStix2:
                         fileMarkings=file.get("object_marking_refs", None),
                         mime_type=file.get("mime_type", None),
                         no_trigger_import=file.get("no_trigger_import", False),
+                        embedded=file.get("embedded", False),
                     )
 
     def apply_patch(self, item):

{pycti-6.7.17.dist-info → pycti-6.7.19.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pycti
-Version: 6.7.17
+Version: 6.7.19
 Summary: Python API client for OpenCTI.
 Home-page: https://github.com/OpenCTI-Platform/client-python
 Author: Filigran

{pycti-6.7.17.dist-info → pycti-6.7.19.dist-info}/RECORD

@@ -1,4 +1,4 @@
-pycti/__init__.py,sha256=nHzL-aqj3GQM-WWt73RegK2mQyPy39G5Tf1BQ07wF14,5677
+pycti/__init__.py,sha256=1ixsJJHSPs3eAD9q1R5nLJBZFHFqkJtSw_XccMOI7VQ,5677
 pycti/api/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 pycti/api/opencti_api_client.py,sha256=lbygp2fOsmTKIrM-8Y7GxFzCZzdFStC0dhxyKYs0Wzo,35368
 pycti/api/opencti_api_connector.py,sha256=8xwHuLINP3ZCImzE9_K_iCR9QEA3K6aHpK4bJhcZf20,5582
@@ -20,17 +20,17 @@ pycti/entities/opencti_attack_pattern.py,sha256=HVfLhtd8rlT42xutRS8qOkDsG5_Ws4Eo
 pycti/entities/opencti_campaign.py,sha256=FIweLdt2oL70m2meamV-9NDheihL8EofjQ6G1oLLqfY,18079
 pycti/entities/opencti_capability.py,sha256=mAR3AT__w6ULuAgc4T_QYxDwW9Jz8bsXQ8SDKF2BCL4,1515
 pycti/entities/opencti_case_incident.py,sha256=N-9fSJawE7cK-AW2mE1wvB3oXjzJrim6G_UIioIAI7M,34731
-pycti/entities/opencti_case_rfi.py,sha256=dQhMyGy1NwhG2J8D4sANqvSaJClfr0WnlYkA0eaP77A,34389
-pycti/entities/opencti_case_rft.py,sha256=0-QLIeQIfGrNdNNKVSYDA2VhYuj-Auft4ZB_OSmGAn0,35312
+pycti/entities/opencti_case_rfi.py,sha256=nbiqptmdf2W8UsYfqrbZOXMcRg1ldzB0TTgCHkhzcrg,35038
+pycti/entities/opencti_case_rft.py,sha256=qrZReo83dSmMvJhsOQDHGZk065D5sNWW9CiMZZt5IBo,35961
 pycti/entities/opencti_channel.py,sha256=JPVy-DYcQnyxpySaX9xP8LkXmD6WZxEEnbJDfYVTlWY,16669
 pycti/entities/opencti_course_of_action.py,sha256=dVIJDF8GmuAZFchoC9EHZbyRbcEhoehOHEnUq5areME,18987
 pycti/entities/opencti_data_component.py,sha256=C8FHkEmeywlZJWpU4lz9C5DFmTQC3i0Zbg6SishfM5U,19559
 pycti/entities/opencti_data_source.py,sha256=OqgeOkQl463aREDb8CkFwVrYngKTNYnUTyghi8hmr8o,18444
 pycti/entities/opencti_event.py,sha256=lGqxCnurlcbIXDMdKIFI2gaxjq2LNJoj8k8HGQnKHXo,17099
-pycti/entities/opencti_external_reference.py,sha256=zSsGOUajrTgSG9T0MHUzq-16XalJ0BHHC54RvBaTD48,13524
+pycti/entities/opencti_external_reference.py,sha256=K7tyTCH5LPxCPE_uS16OcB5fbVHGGkOeoGyYUb1d5zQ,13656
 pycti/entities/opencti_feedback.py,sha256=nhOZrhM87_RaHgMZrhiosRJ_Ly0d1wxN6YyrlbdSSGg,32710
 pycti/entities/opencti_group.py,sha256=GgtA1zZunjXjxPdXc3wOV8Veitte0IGmRF1WwFYWs80,26390
-pycti/entities/opencti_grouping.py,sha256=cjXfgmRma0laGAP5j1oYMtZzVsQxrNvZ0o0-MsToufg,30569
+pycti/entities/opencti_grouping.py,sha256=SzvVQnxb7Xz7_EulW7wDj99Lpa5xx9_AqxeYC3NqBFU,31218
 pycti/entities/opencti_identity.py,sha256=Ih2LvYrDKXXFoQOjcsFv0ipTW3PBCtNtrBkyGWU-__8,26703
 pycti/entities/opencti_incident.py,sha256=mQn2PN2enf9CYoM2vFD3f8S2hIZj8pbiBUZOQ4cMT7Q,18966
 pycti/entities/opencti_indicator.py,sha256=DX-erowuSw3yfAGacIK5CGKUsIhiUfoTER8NwVH7myI,22732
@@ -53,8 +53,8 @@ pycti/entities/opencti_settings.py,sha256=3dArFaPPdcFTV44uGRffjHpnDE-MKIXgd496QZ
 pycti/entities/opencti_stix.py,sha256=9jVg21hXXaKMl5U8Mh6Df3U8IIjP7k9py5VGzn1qFzk,2410
 pycti/entities/opencti_stix_core_object.py,sha256=EMu3Vh72ALcHE4O5hk_2viP6VnBL-obsR_zhIxslzjs,63456
 pycti/entities/opencti_stix_core_relationship.py,sha256=aqguOR9n9jyL7Ez7xRoAO5EQ3wA6XcgTXxrYDGjw3cI,47786
-pycti/entities/opencti_stix_cyber_observable.py,sha256=3Lf8GnluYMwvznY_TsdzE2Nzwcd962cuQTwsOIRQmos,93198
-pycti/entities/opencti_stix_domain_object.py,sha256=bTnohBI9n5q909bmW6HQGHnPpAr_K3NierKlUivNctU,82790
+pycti/entities/opencti_stix_cyber_observable.py,sha256=7OS_bvZpdgtdAvF8CMmJyJsdJKoIJSCzWhXtqMyCfUs,93330
+pycti/entities/opencti_stix_domain_object.py,sha256=Di4dNbnJnUlpEBfetU8iPcf-H4VqOPY_oXeN3W3ps9U,82922
 pycti/entities/opencti_stix_nested_ref_relationship.py,sha256=7USJlfTanPFY16aFIH2YONdRakrfoBuIbB0d0I52PSM,12479
 pycti/entities/opencti_stix_object_or_stix_relationship.py,sha256=djQ1-2tghFc_mxxuBo2IVAuUNsR08bQZtq_04hGEBIo,20019
 pycti/entities/opencti_stix_sighting_relationship.py,sha256=Unih_8vUzR2i_1cFJ73j4dzogxLis4hrOiMwFeoCu1Q,31838
@@ -74,13 +74,13 @@ pycti/entities/stix_cyber_observable/opencti_stix_cyber_observable_properties.py
 pycti/utils/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 pycti/utils/constants.py,sha256=VRYRvDm6hkTR0ZcHHWMzQBwqlPRskYnusBpgoX0S05A,12854
 pycti/utils/opencti_logger.py,sha256=BHNy9fJuTUTn_JEYSCmyvVwd6y-9ZJKxO40mY4iZ0bc,2226
-pycti/utils/opencti_stix2.py,sha256=nrY6_ZVJm-lvd79r7BBMQgbCMUrBri3C09tsyAZnOBg,133665
+pycti/utils/opencti_stix2.py,sha256=OKwp95ierTnh0p0j_aRZhuNk2ArbNYGVdBjGq2tYtME,134131
 pycti/utils/opencti_stix2_identifier.py,sha256=k8L1z4q1xdCBfxqUba4YS_kT-MmbJFxYh0RvfGOmrOs,837
 pycti/utils/opencti_stix2_splitter.py,sha256=sjD9mN6jEea7Zr1k17rNiYaozLcDU4qg0HgIixXRHt4,11371
 pycti/utils/opencti_stix2_update.py,sha256=CnMyqkeVA0jgyxEcgqna8sABU4YPMjkEJ228GVurIn4,14658
 pycti/utils/opencti_stix2_utils.py,sha256=4vu-j3weP9IS3Ky31exOIw4t3fBg00emCTRlVpevrTU,5582
-pycti-6.7.17.dist-info/licenses/LICENSE,sha256=xx0jnfkXJvxRnG63LTGOxlggYnIysveWIZ6H3PNdCrQ,11357
-pycti-6.7.17.dist-info/METADATA,sha256=ddkjXUltCls-56KubmNRa2B10oKz1P0APWdctz9U8JM,5536
-pycti-6.7.17.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
-pycti-6.7.17.dist-info/top_level.txt,sha256=cqEpxitAhHP4VgSA6xmrak6Yk9MeBkwoMTB6k7d2ZnE,6
-pycti-6.7.17.dist-info/RECORD,,
+pycti-6.7.19.dist-info/licenses/LICENSE,sha256=xx0jnfkXJvxRnG63LTGOxlggYnIysveWIZ6H3PNdCrQ,11357
+pycti-6.7.19.dist-info/METADATA,sha256=gSpCU7Zp4coqtQKcFfoWmoTkXyGyaCINH1K-sMoNDUw,5536
+pycti-6.7.19.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
+pycti-6.7.19.dist-info/top_level.txt,sha256=cqEpxitAhHP4VgSA6xmrak6Yk9MeBkwoMTB6k7d2ZnE,6
+pycti-6.7.19.dist-info/RECORD,,