pycti 6.8.12__tar.gz
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pycti-6.8.12/PKG-INFO +166 -0
- pycti-6.8.12/README.md +109 -0
- pycti-6.8.12/pycti/__init__.py +170 -0
- pycti-6.8.12/pycti/api/__init__.py +0 -0
- pycti-6.8.12/pycti/api/opencti_api_client.py +1072 -0
- pycti-6.8.12/pycti/api/opencti_api_connector.py +182 -0
- pycti-6.8.12/pycti/api/opencti_api_draft.py +19 -0
- pycti-6.8.12/pycti/api/opencti_api_internal_file.py +26 -0
- pycti-6.8.12/pycti/api/opencti_api_notification.py +39 -0
- pycti-6.8.12/pycti/api/opencti_api_pir.py +37 -0
- pycti-6.8.12/pycti/api/opencti_api_playbook.py +54 -0
- pycti-6.8.12/pycti/api/opencti_api_public_dashboard.py +25 -0
- pycti-6.8.12/pycti/api/opencti_api_trash.py +42 -0
- pycti-6.8.12/pycti/api/opencti_api_work.py +282 -0
- pycti-6.8.12/pycti/api/opencti_api_workspace.py +24 -0
- pycti-6.8.12/pycti/connector/__init__.py +0 -0
- pycti-6.8.12/pycti/connector/opencti_connector.py +85 -0
- pycti-6.8.12/pycti/connector/opencti_connector_helper.py +2500 -0
- pycti-6.8.12/pycti/connector/opencti_metric_handler.py +145 -0
- pycti-6.8.12/pycti/entities/__init__.py +0 -0
- pycti-6.8.12/pycti/entities/indicator/__init__.py +0 -0
- pycti-6.8.12/pycti/entities/indicator/opencti_indicator_properties.py +272 -0
- pycti-6.8.12/pycti/entities/opencti_attack_pattern.py +658 -0
- pycti-6.8.12/pycti/entities/opencti_campaign.py +556 -0
- pycti-6.8.12/pycti/entities/opencti_capability.py +52 -0
- pycti-6.8.12/pycti/entities/opencti_case_incident.py +997 -0
- pycti-6.8.12/pycti/entities/opencti_case_rfi.py +990 -0
- pycti-6.8.12/pycti/entities/opencti_case_rft.py +988 -0
- pycti-6.8.12/pycti/entities/opencti_channel.py +500 -0
- pycti-6.8.12/pycti/entities/opencti_course_of_action.py +546 -0
- pycti-6.8.12/pycti/entities/opencti_data_component.py +586 -0
- pycti-6.8.12/pycti/entities/opencti_data_source.py +540 -0
- pycti-6.8.12/pycti/entities/opencti_event.py +540 -0
- pycti-6.8.12/pycti/entities/opencti_external_reference.py +400 -0
- pycti-6.8.12/pycti/entities/opencti_feedback.py +932 -0
- pycti-6.8.12/pycti/entities/opencti_group.py +722 -0
- pycti-6.8.12/pycti/entities/opencti_grouping.py +885 -0
- pycti-6.8.12/pycti/entities/opencti_identity.py +750 -0
- pycti-6.8.12/pycti/entities/opencti_incident.py +559 -0
- pycti-6.8.12/pycti/entities/opencti_indicator.py +576 -0
- pycti-6.8.12/pycti/entities/opencti_infrastructure.py +583 -0
- pycti-6.8.12/pycti/entities/opencti_intrusion_set.py +596 -0
- pycti-6.8.12/pycti/entities/opencti_kill_chain_phase.py +248 -0
- pycti-6.8.12/pycti/entities/opencti_label.py +275 -0
- pycti-6.8.12/pycti/entities/opencti_language.py +505 -0
- pycti-6.8.12/pycti/entities/opencti_location.py +552 -0
- pycti-6.8.12/pycti/entities/opencti_malware.py +647 -0
- pycti-6.8.12/pycti/entities/opencti_malware_analysis.py +622 -0
- pycti-6.8.12/pycti/entities/opencti_marking_definition.py +373 -0
- pycti-6.8.12/pycti/entities/opencti_narrative.py +517 -0
- pycti-6.8.12/pycti/entities/opencti_note.py +900 -0
- pycti-6.8.12/pycti/entities/opencti_observed_data.py +907 -0
- pycti-6.8.12/pycti/entities/opencti_opinion.py +641 -0
- pycti-6.8.12/pycti/entities/opencti_report.py +993 -0
- pycti-6.8.12/pycti/entities/opencti_role.py +408 -0
- pycti-6.8.12/pycti/entities/opencti_security_coverage.py +336 -0
- pycti-6.8.12/pycti/entities/opencti_settings.py +383 -0
- pycti-6.8.12/pycti/entities/opencti_stix.py +77 -0
- pycti-6.8.12/pycti/entities/opencti_stix_core_object.py +2071 -0
- pycti-6.8.12/pycti/entities/opencti_stix_core_relationship.py +1355 -0
- pycti-6.8.12/pycti/entities/opencti_stix_cyber_observable.py +2368 -0
- pycti-6.8.12/pycti/entities/opencti_stix_domain_object.py +2320 -0
- pycti-6.8.12/pycti/entities/opencti_stix_nested_ref_relationship.py +334 -0
- pycti-6.8.12/pycti/entities/opencti_stix_object_or_stix_relationship.py +639 -0
- pycti-6.8.12/pycti/entities/opencti_stix_sighting_relationship.py +918 -0
- pycti-6.8.12/pycti/entities/opencti_task.py +713 -0
- pycti-6.8.12/pycti/entities/opencti_threat_actor.py +323 -0
- pycti-6.8.12/pycti/entities/opencti_threat_actor_group.py +533 -0
- pycti-6.8.12/pycti/entities/opencti_threat_actor_individual.py +540 -0
- pycti-6.8.12/pycti/entities/opencti_tool.py +474 -0
- pycti-6.8.12/pycti/entities/opencti_user.py +825 -0
- pycti-6.8.12/pycti/entities/opencti_vocabulary.py +203 -0
- pycti-6.8.12/pycti/entities/opencti_vulnerability.py +1187 -0
- pycti-6.8.12/pycti/entities/stix_cyber_observable/__init__.py +0 -0
- pycti-6.8.12/pycti/entities/stix_cyber_observable/opencti_stix_cyber_observable_deprecated.py +56 -0
- pycti-6.8.12/pycti/entities/stix_cyber_observable/opencti_stix_cyber_observable_properties.py +666 -0
- pycti-6.8.12/pycti/utils/__init__.py +0 -0
- pycti-6.8.12/pycti/utils/constants.py +498 -0
- pycti-6.8.12/pycti/utils/opencti_logger.py +118 -0
- pycti-6.8.12/pycti/utils/opencti_stix2.py +3148 -0
- pycti-6.8.12/pycti/utils/opencti_stix2_identifier.py +22 -0
- pycti-6.8.12/pycti/utils/opencti_stix2_splitter.py +300 -0
- pycti-6.8.12/pycti/utils/opencti_stix2_update.py +309 -0
- pycti-6.8.12/pycti/utils/opencti_stix2_utils.py +251 -0
- pycti-6.8.12/pycti.egg-info/PKG-INFO +166 -0
- pycti-6.8.12/pycti.egg-info/SOURCES.txt +90 -0
- pycti-6.8.12/pycti.egg-info/dependency_links.txt +1 -0
- pycti-6.8.12/pycti.egg-info/requires.txt +40 -0
- pycti-6.8.12/pycti.egg-info/top_level.txt +1 -0
- pycti-6.8.12/pyproject.toml +26 -0
- pycti-6.8.12/setup.cfg +77 -0
pycti-6.8.12/PKG-INFO
ADDED
|
@@ -0,0 +1,166 @@
|
|
|
1
|
+
Metadata-Version: 2.4
|
|
2
|
+
Name: pycti
|
|
3
|
+
Version: 6.8.12
|
|
4
|
+
Summary: Python API client for OpenCTI.
|
|
5
|
+
Home-page: https://github.com/OpenCTI-Platform/opencti
|
|
6
|
+
Author: Filigran
|
|
7
|
+
Author-email: contact@filigran.io
|
|
8
|
+
Maintainer: Filigran
|
|
9
|
+
License: Apache
|
|
10
|
+
Classifier: Development Status :: 5 - Production/Stable
|
|
11
|
+
Classifier: Intended Audience :: Developers
|
|
12
|
+
Classifier: Intended Audience :: Information Technology
|
|
13
|
+
Classifier: Intended Audience :: Science/Research
|
|
14
|
+
Classifier: License :: OSI Approved :: Apache Software License
|
|
15
|
+
Classifier: Natural Language :: English
|
|
16
|
+
Classifier: Natural Language :: French
|
|
17
|
+
Classifier: Operating System :: OS Independent
|
|
18
|
+
Classifier: Programming Language :: Python :: 3
|
|
19
|
+
Classifier: Topic :: Security
|
|
20
|
+
Classifier: Topic :: Software Development :: Libraries :: Python Modules
|
|
21
|
+
Requires-Python: >=3.7
|
|
22
|
+
Description-Content-Type: text/markdown
|
|
23
|
+
Requires-Dist: datefinder~=0.7.3
|
|
24
|
+
Requires-Dist: pika~=1.3.0
|
|
25
|
+
Requires-Dist: pydantic<3,>=2.8.2
|
|
26
|
+
Requires-Dist: python-magic~=0.4.27; sys_platform == "linux" or sys_platform == "darwin"
|
|
27
|
+
Requires-Dist: python-magic-bin~=0.4.14; sys_platform == "win32"
|
|
28
|
+
Requires-Dist: python_json_logger~=3.3.0
|
|
29
|
+
Requires-Dist: PyYAML~=6.0
|
|
30
|
+
Requires-Dist: requests<3,>=2.32.0
|
|
31
|
+
Requires-Dist: setuptools~=80.9.0
|
|
32
|
+
Requires-Dist: cachetools~=5.5.2
|
|
33
|
+
Requires-Dist: prometheus-client~=0.22.1
|
|
34
|
+
Requires-Dist: opentelemetry-api~=1.35.0
|
|
35
|
+
Requires-Dist: opentelemetry-sdk~=1.35.0
|
|
36
|
+
Requires-Dist: deprecation~=2.1.0
|
|
37
|
+
Requires-Dist: fastapi<0.117.0,>=0.115.2
|
|
38
|
+
Requires-Dist: uvicorn[standard]<0.36.0,>=0.34.0
|
|
39
|
+
Requires-Dist: filigran-sseclient>=1.0.2
|
|
40
|
+
Requires-Dist: stix2~=3.0.1
|
|
41
|
+
Provides-Extra: dev
|
|
42
|
+
Requires-Dist: black~=25.1.0; extra == "dev"
|
|
43
|
+
Requires-Dist: build~=1.2.1; extra == "dev"
|
|
44
|
+
Requires-Dist: isort~=6.0.0; extra == "dev"
|
|
45
|
+
Requires-Dist: types-pytz~=2025.2.0.20250326; extra == "dev"
|
|
46
|
+
Requires-Dist: pre-commit~=4.2.0; extra == "dev"
|
|
47
|
+
Requires-Dist: pytest-cases~=3.9.1; extra == "dev"
|
|
48
|
+
Requires-Dist: pytest-cov~=6.2.1; extra == "dev"
|
|
49
|
+
Requires-Dist: pytest_randomly~=3.16.0; extra == "dev"
|
|
50
|
+
Requires-Dist: pytest~=8.4.1; extra == "dev"
|
|
51
|
+
Requires-Dist: types-python-dateutil~=2.9.0; extra == "dev"
|
|
52
|
+
Requires-Dist: wheel~=0.45.1; extra == "dev"
|
|
53
|
+
Provides-Extra: doc
|
|
54
|
+
Requires-Dist: autoapi~=2.0.1; extra == "doc"
|
|
55
|
+
Requires-Dist: sphinx-autodoc-typehints~=3.2.0; extra == "doc"
|
|
56
|
+
Requires-Dist: sphinx-rtd-theme~=3.0.2; extra == "doc"
|
|
57
|
+
|
|
58
|
+
# OpenCTI client for Python
|
|
59
|
+
|
|
60
|
+
[](https://opencti.io)
|
|
61
|
+
[](https://opencti-client-for-python.readthedocs.io/en/latest/)
|
|
62
|
+
[](https://pypi.python.org/pypi/pycti/)
|
|
63
|
+
[](https://community.filigran.io)
|
|
64
|
+
|
|
65
|
+
The official OpenCTI Python client helps developers to use the OpenCTI API by providing easy to use methods and utils.
|
|
66
|
+
This client is also used by some OpenCTI components.
|
|
67
|
+
|
|
68
|
+
## Install
|
|
69
|
+
|
|
70
|
+
To install the latest Python client library, please use `pip`:
|
|
71
|
+
|
|
72
|
+
```bash
|
|
73
|
+
$ pip3 install pycti
|
|
74
|
+
```
|
|
75
|
+
|
|
76
|
+
## Local development
|
|
77
|
+
|
|
78
|
+
```bash
|
|
79
|
+
# Fork the current repository, then clone your fork
|
|
80
|
+
$ git clone https://github.com/YOUR-USERNAME/opencti.git
|
|
81
|
+
$ cd client-python
|
|
82
|
+
$ git remote add upstream https://github.com/OpenCTI-Platform/opencti.git
|
|
83
|
+
# Create a branch for your feature/fix
|
|
84
|
+
$ git checkout -b [branch-name]
|
|
85
|
+
# Create a virtualenv
|
|
86
|
+
$ cd client-python
|
|
87
|
+
$ python3 -m venv .venv
|
|
88
|
+
$ source .venv/bin/activate
|
|
89
|
+
# Install the client-python and dependencies for the development and the documentation
|
|
90
|
+
$ python3 -m pip install -e .[dev,doc]
|
|
91
|
+
# Set up the git hook scripts
|
|
92
|
+
$ pre-commit install
|
|
93
|
+
# Create your feature/fix
|
|
94
|
+
# Create tests for your changes
|
|
95
|
+
$ pytest
|
|
96
|
+
# Push you feature/fix on Github
|
|
97
|
+
$ git add [file(s)]
|
|
98
|
+
$ git commit -m "[descriptive message]"
|
|
99
|
+
$ git push origin [branch-name]
|
|
100
|
+
# Open a pull request
|
|
101
|
+
```
|
|
102
|
+
|
|
103
|
+
### Install the package locally
|
|
104
|
+
|
|
105
|
+
```bash
|
|
106
|
+
$ pip install -e .
|
|
107
|
+
```
|
|
108
|
+
|
|
109
|
+
## Documentation
|
|
110
|
+
|
|
111
|
+
### Client usage
|
|
112
|
+
|
|
113
|
+
To learn about how to use the OpenCTI Python client and read some examples and cases, refer to [the client documentation](https://opencti-client-for-python.readthedocs.io/en/latest/client_usage/getting_started.html).
|
|
114
|
+
|
|
115
|
+
### API reference
|
|
116
|
+
|
|
117
|
+
To learn about the methods available for executing queries and retrieving their answers, refer to [the client API Reference](https://opencti-client-for-python.readthedocs.io/en/latest/pycti/pycti.html).
|
|
118
|
+
|
|
119
|
+
## Tests
|
|
120
|
+
|
|
121
|
+
### Install dependencies
|
|
122
|
+
|
|
123
|
+
```bash
|
|
124
|
+
$ pip install -r ./test-requirements.txt
|
|
125
|
+
```
|
|
126
|
+
|
|
127
|
+
[pytest](https://docs.pytest.org/en/7.2.x/) is used to launch the tests.
|
|
128
|
+
|
|
129
|
+
### Launch tests
|
|
130
|
+
|
|
131
|
+
#### Prerequisite
|
|
132
|
+
|
|
133
|
+
Your OpenCTI API should be running.
|
|
134
|
+
Your conftest.py should be configured with your API url, your token, and if applicable, your mTLS cert/key.
|
|
135
|
+
|
|
136
|
+
#### Launching
|
|
137
|
+
|
|
138
|
+
Unit tests
|
|
139
|
+
```bash
|
|
140
|
+
$ pytest ./tests/01-unit/
|
|
141
|
+
```
|
|
142
|
+
|
|
143
|
+
Integration testing
|
|
144
|
+
```bash
|
|
145
|
+
$ pytest ./tests/02-integration/
|
|
146
|
+
```
|
|
147
|
+
|
|
148
|
+
Example testing:
|
|
149
|
+
|
|
150
|
+
> OpenCTI must be running
|
|
151
|
+
|
|
152
|
+
```bash
|
|
153
|
+
cd examples
|
|
154
|
+
# Configure with you local instance of OpenCTI
|
|
155
|
+
export OPENCTI_API_URL="http://localhost:4000"
|
|
156
|
+
export OPENCTI_API_TOKEN="xxxxxxxxxxxxxxxxxxxxxx"
|
|
157
|
+
|
|
158
|
+
#Run one example file
|
|
159
|
+
python get_indicators_of_malware.py
|
|
160
|
+
```
|
|
161
|
+
|
|
162
|
+
## About
|
|
163
|
+
|
|
164
|
+
OpenCTI is a product designed and developed by the company [Filigran](https://filigran.io).
|
|
165
|
+
|
|
166
|
+
<a href="https://filigran.io" alt="Filigran"><img src="https://github.com/OpenCTI-Platform/opencti/raw/master/.github/img/logo_filigran.png" width="300" /></a>
|
pycti-6.8.12/README.md
ADDED
|
@@ -0,0 +1,109 @@
|
|
|
1
|
+
# OpenCTI client for Python
|
|
2
|
+
|
|
3
|
+
[](https://opencti.io)
|
|
4
|
+
[](https://opencti-client-for-python.readthedocs.io/en/latest/)
|
|
5
|
+
[](https://pypi.python.org/pypi/pycti/)
|
|
6
|
+
[](https://community.filigran.io)
|
|
7
|
+
|
|
8
|
+
The official OpenCTI Python client helps developers to use the OpenCTI API by providing easy to use methods and utils.
|
|
9
|
+
This client is also used by some OpenCTI components.
|
|
10
|
+
|
|
11
|
+
## Install
|
|
12
|
+
|
|
13
|
+
To install the latest Python client library, please use `pip`:
|
|
14
|
+
|
|
15
|
+
```bash
|
|
16
|
+
$ pip3 install pycti
|
|
17
|
+
```
|
|
18
|
+
|
|
19
|
+
## Local development
|
|
20
|
+
|
|
21
|
+
```bash
|
|
22
|
+
# Fork the current repository, then clone your fork
|
|
23
|
+
$ git clone https://github.com/YOUR-USERNAME/opencti.git
|
|
24
|
+
$ cd client-python
|
|
25
|
+
$ git remote add upstream https://github.com/OpenCTI-Platform/opencti.git
|
|
26
|
+
# Create a branch for your feature/fix
|
|
27
|
+
$ git checkout -b [branch-name]
|
|
28
|
+
# Create a virtualenv
|
|
29
|
+
$ cd client-python
|
|
30
|
+
$ python3 -m venv .venv
|
|
31
|
+
$ source .venv/bin/activate
|
|
32
|
+
# Install the client-python and dependencies for the development and the documentation
|
|
33
|
+
$ python3 -m pip install -e .[dev,doc]
|
|
34
|
+
# Set up the git hook scripts
|
|
35
|
+
$ pre-commit install
|
|
36
|
+
# Create your feature/fix
|
|
37
|
+
# Create tests for your changes
|
|
38
|
+
$ pytest
|
|
39
|
+
# Push you feature/fix on Github
|
|
40
|
+
$ git add [file(s)]
|
|
41
|
+
$ git commit -m "[descriptive message]"
|
|
42
|
+
$ git push origin [branch-name]
|
|
43
|
+
# Open a pull request
|
|
44
|
+
```
|
|
45
|
+
|
|
46
|
+
### Install the package locally
|
|
47
|
+
|
|
48
|
+
```bash
|
|
49
|
+
$ pip install -e .
|
|
50
|
+
```
|
|
51
|
+
|
|
52
|
+
## Documentation
|
|
53
|
+
|
|
54
|
+
### Client usage
|
|
55
|
+
|
|
56
|
+
To learn about how to use the OpenCTI Python client and read some examples and cases, refer to [the client documentation](https://opencti-client-for-python.readthedocs.io/en/latest/client_usage/getting_started.html).
|
|
57
|
+
|
|
58
|
+
### API reference
|
|
59
|
+
|
|
60
|
+
To learn about the methods available for executing queries and retrieving their answers, refer to [the client API Reference](https://opencti-client-for-python.readthedocs.io/en/latest/pycti/pycti.html).
|
|
61
|
+
|
|
62
|
+
## Tests
|
|
63
|
+
|
|
64
|
+
### Install dependencies
|
|
65
|
+
|
|
66
|
+
```bash
|
|
67
|
+
$ pip install -r ./test-requirements.txt
|
|
68
|
+
```
|
|
69
|
+
|
|
70
|
+
[pytest](https://docs.pytest.org/en/7.2.x/) is used to launch the tests.
|
|
71
|
+
|
|
72
|
+
### Launch tests
|
|
73
|
+
|
|
74
|
+
#### Prerequisite
|
|
75
|
+
|
|
76
|
+
Your OpenCTI API should be running.
|
|
77
|
+
Your conftest.py should be configured with your API url, your token, and if applicable, your mTLS cert/key.
|
|
78
|
+
|
|
79
|
+
#### Launching
|
|
80
|
+
|
|
81
|
+
Unit tests
|
|
82
|
+
```bash
|
|
83
|
+
$ pytest ./tests/01-unit/
|
|
84
|
+
```
|
|
85
|
+
|
|
86
|
+
Integration testing
|
|
87
|
+
```bash
|
|
88
|
+
$ pytest ./tests/02-integration/
|
|
89
|
+
```
|
|
90
|
+
|
|
91
|
+
Example testing:
|
|
92
|
+
|
|
93
|
+
> OpenCTI must be running
|
|
94
|
+
|
|
95
|
+
```bash
|
|
96
|
+
cd examples
|
|
97
|
+
# Configure with you local instance of OpenCTI
|
|
98
|
+
export OPENCTI_API_URL="http://localhost:4000"
|
|
99
|
+
export OPENCTI_API_TOKEN="xxxxxxxxxxxxxxxxxxxxxx"
|
|
100
|
+
|
|
101
|
+
#Run one example file
|
|
102
|
+
python get_indicators_of_malware.py
|
|
103
|
+
```
|
|
104
|
+
|
|
105
|
+
## About
|
|
106
|
+
|
|
107
|
+
OpenCTI is a product designed and developed by the company [Filigran](https://filigran.io).
|
|
108
|
+
|
|
109
|
+
<a href="https://filigran.io" alt="Filigran"><img src="https://github.com/OpenCTI-Platform/opencti/raw/master/.github/img/logo_filigran.png" width="300" /></a>
|
|
@@ -0,0 +1,170 @@
|
|
|
1
|
+
# -*- coding: utf-8 -*-
|
|
2
|
+
__version__ = "6.8.12"
|
|
3
|
+
|
|
4
|
+
from .api.opencti_api_client import OpenCTIApiClient
|
|
5
|
+
from .api.opencti_api_connector import OpenCTIApiConnector
|
|
6
|
+
from .api.opencti_api_work import OpenCTIApiWork
|
|
7
|
+
from .connector.opencti_connector import ConnectorType, OpenCTIConnector
|
|
8
|
+
from .connector.opencti_connector_helper import (
|
|
9
|
+
OpenCTIConnectorHelper,
|
|
10
|
+
get_config_variable,
|
|
11
|
+
)
|
|
12
|
+
from .connector.opencti_metric_handler import OpenCTIMetricHandler
|
|
13
|
+
from .entities.opencti_attack_pattern import AttackPattern
|
|
14
|
+
from .entities.opencti_campaign import Campaign
|
|
15
|
+
|
|
16
|
+
# Administrative entities
|
|
17
|
+
from .entities.opencti_capability import Capability
|
|
18
|
+
from .entities.opencti_case_incident import CaseIncident
|
|
19
|
+
from .entities.opencti_case_rfi import CaseRfi
|
|
20
|
+
from .entities.opencti_case_rft import CaseRft
|
|
21
|
+
from .entities.opencti_channel import Channel
|
|
22
|
+
from .entities.opencti_course_of_action import CourseOfAction
|
|
23
|
+
from .entities.opencti_data_component import DataComponent
|
|
24
|
+
from .entities.opencti_data_source import DataSource
|
|
25
|
+
from .entities.opencti_external_reference import ExternalReference
|
|
26
|
+
from .entities.opencti_feedback import Feedback
|
|
27
|
+
from .entities.opencti_group import Group
|
|
28
|
+
from .entities.opencti_grouping import Grouping
|
|
29
|
+
from .entities.opencti_identity import Identity
|
|
30
|
+
from .entities.opencti_incident import Incident
|
|
31
|
+
from .entities.opencti_indicator import Indicator
|
|
32
|
+
from .entities.opencti_infrastructure import Infrastructure
|
|
33
|
+
from .entities.opencti_intrusion_set import IntrusionSet
|
|
34
|
+
from .entities.opencti_kill_chain_phase import KillChainPhase
|
|
35
|
+
from .entities.opencti_label import Label
|
|
36
|
+
from .entities.opencti_location import Location
|
|
37
|
+
from .entities.opencti_malware import Malware
|
|
38
|
+
from .entities.opencti_malware_analysis import MalwareAnalysis
|
|
39
|
+
from .entities.opencti_marking_definition import MarkingDefinition
|
|
40
|
+
from .entities.opencti_note import Note
|
|
41
|
+
from .entities.opencti_observed_data import ObservedData
|
|
42
|
+
from .entities.opencti_opinion import Opinion
|
|
43
|
+
from .entities.opencti_report import Report
|
|
44
|
+
from .entities.opencti_role import Role
|
|
45
|
+
from .entities.opencti_settings import Settings
|
|
46
|
+
from .entities.opencti_stix_core_relationship import StixCoreRelationship
|
|
47
|
+
from .entities.opencti_stix_cyber_observable import StixCyberObservable
|
|
48
|
+
from .entities.opencti_stix_domain_object import StixDomainObject
|
|
49
|
+
from .entities.opencti_stix_nested_ref_relationship import StixNestedRefRelationship
|
|
50
|
+
from .entities.opencti_stix_object_or_stix_relationship import (
|
|
51
|
+
StixObjectOrStixRelationship,
|
|
52
|
+
)
|
|
53
|
+
from .entities.opencti_stix_sighting_relationship import StixSightingRelationship
|
|
54
|
+
from .entities.opencti_task import Task
|
|
55
|
+
from .entities.opencti_threat_actor import ThreatActor
|
|
56
|
+
from .entities.opencti_threat_actor_group import ThreatActorGroup
|
|
57
|
+
from .entities.opencti_threat_actor_individual import ThreatActorIndividual
|
|
58
|
+
from .entities.opencti_tool import Tool
|
|
59
|
+
from .entities.opencti_user import User
|
|
60
|
+
from .entities.opencti_vulnerability import Vulnerability
|
|
61
|
+
from .utils.constants import (
|
|
62
|
+
CustomObjectCaseIncident,
|
|
63
|
+
CustomObjectChannel,
|
|
64
|
+
CustomObjectTask,
|
|
65
|
+
CustomObservableBankAccount,
|
|
66
|
+
CustomObservableCredential,
|
|
67
|
+
CustomObservableCryptocurrencyWallet,
|
|
68
|
+
CustomObservableCryptographicKey,
|
|
69
|
+
CustomObservableHostname,
|
|
70
|
+
CustomObservableMediaContent,
|
|
71
|
+
CustomObservablePaymentCard,
|
|
72
|
+
CustomObservablePersona,
|
|
73
|
+
CustomObservablePhoneNumber,
|
|
74
|
+
CustomObservableText,
|
|
75
|
+
CustomObservableTrackingNumber,
|
|
76
|
+
CustomObservableUserAgent,
|
|
77
|
+
MultipleRefRelationship,
|
|
78
|
+
StixCyberObservableTypes,
|
|
79
|
+
StixMetaTypes,
|
|
80
|
+
)
|
|
81
|
+
from .utils.opencti_stix2 import (
|
|
82
|
+
STIX_EXT_MITRE,
|
|
83
|
+
STIX_EXT_OCTI,
|
|
84
|
+
STIX_EXT_OCTI_SCO,
|
|
85
|
+
OpenCTIStix2,
|
|
86
|
+
)
|
|
87
|
+
from .utils.opencti_stix2_splitter import OpenCTIStix2Splitter
|
|
88
|
+
from .utils.opencti_stix2_update import OpenCTIStix2Update
|
|
89
|
+
from .utils.opencti_stix2_utils import OpenCTIStix2Utils
|
|
90
|
+
|
|
91
|
+
__all__ = [
|
|
92
|
+
"AttackPattern",
|
|
93
|
+
"Campaign",
|
|
94
|
+
"CaseIncident",
|
|
95
|
+
"CaseRfi",
|
|
96
|
+
"CaseRft",
|
|
97
|
+
"Channel",
|
|
98
|
+
"Task",
|
|
99
|
+
"ConnectorType",
|
|
100
|
+
"CourseOfAction",
|
|
101
|
+
"DataComponent",
|
|
102
|
+
"DataSource",
|
|
103
|
+
"ExternalReference",
|
|
104
|
+
"Feedback",
|
|
105
|
+
"Grouping",
|
|
106
|
+
"Identity",
|
|
107
|
+
"Incident",
|
|
108
|
+
"Indicator",
|
|
109
|
+
"Infrastructure",
|
|
110
|
+
"IntrusionSet",
|
|
111
|
+
"KillChainPhase",
|
|
112
|
+
"Label",
|
|
113
|
+
"Location",
|
|
114
|
+
"Malware",
|
|
115
|
+
"MalwareAnalysis",
|
|
116
|
+
"MarkingDefinition",
|
|
117
|
+
"Note",
|
|
118
|
+
"ObservedData",
|
|
119
|
+
"OpenCTIApiClient",
|
|
120
|
+
"OpenCTIApiConnector",
|
|
121
|
+
"OpenCTIApiWork",
|
|
122
|
+
"OpenCTIConnector",
|
|
123
|
+
"OpenCTIConnectorHelper",
|
|
124
|
+
"OpenCTIMetricHandler",
|
|
125
|
+
"OpenCTIStix2",
|
|
126
|
+
"OpenCTIStix2Splitter",
|
|
127
|
+
"OpenCTIStix2Update",
|
|
128
|
+
"OpenCTIStix2Utils",
|
|
129
|
+
"Opinion",
|
|
130
|
+
"Report",
|
|
131
|
+
"StixCoreRelationship",
|
|
132
|
+
"StixCyberObservable",
|
|
133
|
+
"StixNestedRefRelationship",
|
|
134
|
+
"StixCyberObservableTypes",
|
|
135
|
+
"StixDomainObject",
|
|
136
|
+
"StixMetaTypes",
|
|
137
|
+
"MultipleRefRelationship",
|
|
138
|
+
"StixObjectOrStixRelationship",
|
|
139
|
+
"StixSightingRelationship",
|
|
140
|
+
"ThreatActor",
|
|
141
|
+
"ThreatActorGroup",
|
|
142
|
+
"ThreatActorIndividual",
|
|
143
|
+
"Tool",
|
|
144
|
+
"Vulnerability",
|
|
145
|
+
"get_config_variable",
|
|
146
|
+
"CustomObjectCaseIncident",
|
|
147
|
+
"CustomObjectTask",
|
|
148
|
+
"CustomObjectChannel",
|
|
149
|
+
"StixCyberObservableTypes",
|
|
150
|
+
"CustomObservableCredential",
|
|
151
|
+
"CustomObservableHostname",
|
|
152
|
+
"CustomObservableUserAgent",
|
|
153
|
+
"CustomObservableBankAccount",
|
|
154
|
+
"CustomObservableCryptographicKey",
|
|
155
|
+
"CustomObservableCryptocurrencyWallet",
|
|
156
|
+
"CustomObservablePaymentCard",
|
|
157
|
+
"CustomObservablePersona",
|
|
158
|
+
"CustomObservablePhoneNumber",
|
|
159
|
+
"CustomObservableTrackingNumber",
|
|
160
|
+
"CustomObservableText",
|
|
161
|
+
"CustomObservableMediaContent",
|
|
162
|
+
"STIX_EXT_MITRE",
|
|
163
|
+
"STIX_EXT_OCTI_SCO",
|
|
164
|
+
"STIX_EXT_OCTI",
|
|
165
|
+
"Capability",
|
|
166
|
+
"Role",
|
|
167
|
+
"Group",
|
|
168
|
+
"User",
|
|
169
|
+
"Settings",
|
|
170
|
+
]
|
|
File without changes
|