PyPI - txt2stix - Versions diffs - 0.0.4__py3-none-any.whl - Mend

txt2stix 0.0.4__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (119) hide show

txt2stix/__init__.py +33 -0
txt2stix/ai_extractor/__init__.py +15 -0
txt2stix/ai_extractor/anthropic.py +12 -0
txt2stix/ai_extractor/base.py +87 -0
txt2stix/ai_extractor/deepseek.py +19 -0
txt2stix/ai_extractor/gemini.py +18 -0
txt2stix/ai_extractor/openai.py +15 -0
txt2stix/ai_extractor/openrouter.py +20 -0
txt2stix/ai_extractor/prompts.py +164 -0
txt2stix/ai_extractor/utils.py +85 -0
txt2stix/attack_flow.py +101 -0
txt2stix/bundler.py +428 -0
txt2stix/common.py +23 -0
txt2stix/extractions.py +59 -0
txt2stix/includes/__init__.py +0 -0
txt2stix/includes/extractions/ai/config.yaml +1023 -0
txt2stix/includes/extractions/lookup/config.yaml +393 -0
txt2stix/includes/extractions/pattern/config.yaml +609 -0
txt2stix/includes/helpers/mimetype_filename_extension_list.csv +936 -0
txt2stix/includes/helpers/stix_relationship_types.txt +41 -0
txt2stix/includes/helpers/tlds.txt +1446 -0
txt2stix/includes/helpers/windows_registry_key_prefix.txt +12 -0
txt2stix/includes/lookups/_README.md +11 -0
txt2stix/includes/lookups/_generate_lookups.py +247 -0
txt2stix/includes/lookups/attack_pattern.txt +1 -0
txt2stix/includes/lookups/campaign.txt +1 -0
txt2stix/includes/lookups/country_iso3166_alpha2.txt +249 -0
txt2stix/includes/lookups/course_of_action.txt +1 -0
txt2stix/includes/lookups/disarm_id_v1_5.txt +345 -0
txt2stix/includes/lookups/disarm_name_v1_5.txt +347 -0
txt2stix/includes/lookups/extensions.txt +78 -0
txt2stix/includes/lookups/identity.txt +1 -0
txt2stix/includes/lookups/infrastructure.txt +1 -0
txt2stix/includes/lookups/intrusion_set.txt +1 -0
txt2stix/includes/lookups/malware.txt +2 -0
txt2stix/includes/lookups/mitre_atlas_id_v4_5_2.txt +116 -0
txt2stix/includes/lookups/mitre_atlas_name_v4_5_2.txt +117 -0
txt2stix/includes/lookups/mitre_attack_enterprise_aliases_v16_0.txt +1502 -0
txt2stix/includes/lookups/mitre_attack_enterprise_id_v16_0.txt +1656 -0
txt2stix/includes/lookups/mitre_attack_enterprise_name_v16_0.txt +1765 -0
txt2stix/includes/lookups/mitre_attack_ics_aliases_v16_0.txt +141 -0
txt2stix/includes/lookups/mitre_attack_ics_id_v16_0.txt +254 -0
txt2stix/includes/lookups/mitre_attack_ics_name_v16_0.txt +293 -0
txt2stix/includes/lookups/mitre_attack_mobile_aliases_v16_0.txt +159 -0
txt2stix/includes/lookups/mitre_attack_mobile_id_v16_0.txt +277 -0
txt2stix/includes/lookups/mitre_attack_mobile_name_v16_0.txt +296 -0
txt2stix/includes/lookups/mitre_capec_id_v3_9.txt +559 -0
txt2stix/includes/lookups/mitre_capec_name_v3_9.txt +560 -0
txt2stix/includes/lookups/mitre_cwe_id_v4_15.txt +939 -0
txt2stix/includes/lookups/mitre_cwe_name_v4_15.txt +939 -0
txt2stix/includes/lookups/threat_actor.txt +1 -0
txt2stix/includes/lookups/tld.txt +1422 -0
txt2stix/includes/lookups/tool.txt +1 -0
txt2stix/includes/tests/test_cases.yaml +695 -0
txt2stix/indicator.py +860 -0
txt2stix/lookups.py +68 -0
txt2stix/pattern/__init__.py +13 -0
txt2stix/pattern/extractors/__init__.py +0 -0
txt2stix/pattern/extractors/base_extractor.py +167 -0
txt2stix/pattern/extractors/card/README.md +34 -0
txt2stix/pattern/extractors/card/__init__.py +15 -0
txt2stix/pattern/extractors/card/amex_card_extractor.py +52 -0
txt2stix/pattern/extractors/card/diners_card_extractor.py +47 -0
txt2stix/pattern/extractors/card/discover_card_extractor.py +48 -0
txt2stix/pattern/extractors/card/jcb_card_extractor.py +43 -0
txt2stix/pattern/extractors/card/master_card_extractor.py +63 -0
txt2stix/pattern/extractors/card/union_card_extractor.py +38 -0
txt2stix/pattern/extractors/card/visa_card_extractor.py +46 -0
txt2stix/pattern/extractors/crypto/__init__.py +3 -0
txt2stix/pattern/extractors/crypto/btc_extractor.py +38 -0
txt2stix/pattern/extractors/directory/__init__.py +10 -0
txt2stix/pattern/extractors/directory/unix_directory_extractor.py +40 -0
txt2stix/pattern/extractors/directory/unix_file_path_extractor.py +42 -0
txt2stix/pattern/extractors/directory/windows_directory_path_extractor.py +47 -0
txt2stix/pattern/extractors/directory/windows_file_path_extractor.py +42 -0
txt2stix/pattern/extractors/domain/__init__.py +8 -0
txt2stix/pattern/extractors/domain/domain_extractor.py +39 -0
txt2stix/pattern/extractors/domain/hostname_extractor.py +36 -0
txt2stix/pattern/extractors/domain/sub_domain_extractor.py +49 -0
txt2stix/pattern/extractors/hashes/__init__.py +16 -0
txt2stix/pattern/extractors/hashes/md5_extractor.py +16 -0
txt2stix/pattern/extractors/hashes/sha1_extractor.py +14 -0
txt2stix/pattern/extractors/hashes/sha224_extractor.py +18 -0
txt2stix/pattern/extractors/hashes/sha2_256_exactor.py +14 -0
txt2stix/pattern/extractors/hashes/sha2_512_exactor.py +13 -0
txt2stix/pattern/extractors/hashes/sha3_256_exactor.py +15 -0
txt2stix/pattern/extractors/hashes/sha3_512_exactor.py +16 -0
txt2stix/pattern/extractors/helper.py +64 -0
txt2stix/pattern/extractors/ip/__init__.py +14 -0
txt2stix/pattern/extractors/ip/ipv4_cidr_extractor.py +49 -0
txt2stix/pattern/extractors/ip/ipv4_extractor.py +18 -0
txt2stix/pattern/extractors/ip/ipv4_port_extractor.py +42 -0
txt2stix/pattern/extractors/ip/ipv6_cidr_extractor.py +18 -0
txt2stix/pattern/extractors/ip/ipv6_extractor.py +16 -0
txt2stix/pattern/extractors/ip/ipv6_port_extractor.py +46 -0
txt2stix/pattern/extractors/others/__init__.py +22 -0
txt2stix/pattern/extractors/others/asn_extractor.py +14 -0
txt2stix/pattern/extractors/others/cpe_extractor.py +29 -0
txt2stix/pattern/extractors/others/cve_extractor.py +14 -0
txt2stix/pattern/extractors/others/email_extractor.py +21 -0
txt2stix/pattern/extractors/others/filename_extractor.py +17 -0
txt2stix/pattern/extractors/others/iban_extractor.py +15 -0
txt2stix/pattern/extractors/others/mac_address_extractor.py +13 -0
txt2stix/pattern/extractors/others/phonenumber_extractor.py +41 -0
txt2stix/pattern/extractors/others/user_agent_extractor.py +20 -0
txt2stix/pattern/extractors/others/windows_registry_key_extractor.py +18 -0
txt2stix/pattern/extractors/url/__init__.py +7 -0
txt2stix/pattern/extractors/url/url_extractor.py +22 -0
txt2stix/pattern/extractors/url/url_file_extractor.py +21 -0
txt2stix/pattern/extractors/url/url_path_extractor.py +74 -0
txt2stix/retriever.py +126 -0
txt2stix/stix.py +1 -0
txt2stix/txt2stix.py +336 -0
txt2stix/utils.py +86 -0
txt2stix-0.0.4.dist-info/METADATA +190 -0
txt2stix-0.0.4.dist-info/RECORD +119 -0
txt2stix-0.0.4.dist-info/WHEEL +4 -0
txt2stix-0.0.4.dist-info/entry_points.txt +2 -0
txt2stix-0.0.4.dist-info/licenses/LICENSE +202 -0

txt2stix/includes/lookups/mitre_attack_mobile_aliases_v16_0.txt ADDED Viewed

@@ -0,0 +1,159 @@
+Operation Dust Storm
+C0033
+Bouncing Golf
+UNC788
+Sandworm Team
+ELECTRUM
+Telebots
+IRON VIKING
+BlackEnergy (Group)
+Quedagh
+Voodoo Bear
+IRIDIUM
+Seashell Blizzard
+FROZENBARENTS
+APT44
+Scattered Spider
+Roasted 0ktapus
+Octo Tempest
+Storm-0875
+Confucius
+Confucius APT
+MoustachedBouncer
+BITTER
+T-APT-17
+APT-C-23
+Mantis
+Arid Viper
+Desert Falcon
+TAG-63
+Grey Karkadann
+Big Bang APT
+Two-tailed Scorpion
+Dark Caracal
+Windshift
+Bahamut
+APT28
+IRON TWILIGHT
+SNAKEMACKEREL
+Swallowtail
+Group 74
+Sednit
+Sofacy
+Pawn Storm
+Fancy Bear
+STRONTIUM
+Tsar Team
+Threat Group-4127
+TG-4127
+Forest Blizzard
+FROZENLAKE
+Earth Lusca
+TAG-22
+Charcoal Typhoon
+CHROMIUM
+ControlX
+PROMETHIUM
+StrongPity
+CarbonSteal
+Cerberus
+DroidJack
+Rotexy
+Stealth Mango
+GoldenEagle
+FlixOnline
+Bread
+Joker
+Hornbill
+Gooligan
+Ghost Push
+SpyNote RAT
+TrickMo
+INSOMNIA
+Dvmap
+Zen
+AhRat
+XLoader for Android
+XLoader for iOS
+AbstractEmu
+Chameleon
+Exodus
+Exodus One
+Exodus Two
+Dendroid
+Desert Scorpion
+Pegasus for iOS
+Tangelo
+RCSAndroid
+Corona Updates
+Wabi Music
+Concipit1248
+Skygofree
+DoubleAgent
+Twitoor
+Fakecalls
+S.O.V.A.
+ANDROIDOS_ANSERVER.A
+Mandrake
+oxide
+briar
+ricinus
+darkmatter
+HilalRAT
+DEFENSOR ID
+BRATA
+Ginp
+eSurv
+TangleBot
+Monokle
+Red Alert 2.0
+ViceLeaker
+Triout
+FlyTrap
+FakeSpy
+SpyDealer
+Pegasus for Android
+Chrysaor
+FrozenCell
+AndroidOS/MalLocker.B
+SharkBot
+RedDrop
+CHEMISTGAMES
+YiSpecter
+BOULDSPY
+Anubis
+AndroRAT
+FinFisher
+FinSpy
+Agent Smith
+Asacub
+Trojan-SMS.AndroidOS.Smaps
+GPlayed
+EventBot
+HenBox
+Riltok
+GolfSpy
+Pallas
+Circles
+Tiktok Pro
+HummingBad
+Exobot
+Android/Chuli.A
+Charger
+Drinik
+SilkBean
+WolfRAT
+BusyGasper
+TERRACOTTA
+Escobar
+Triada
+Golden Cup
+FluBot
+ViperRAT
+SimBad
+Android/AdDisplay.Ashas
+Phenakite
+TianySpy
+Sunbird
+Gustuff
+FlexiSpy

txt2stix/includes/lookups/mitre_attack_mobile_id_v16_0.txt ADDED Viewed

@@ -0,0 +1,277 @@
+C0016
+C0033
+DS0009
+DS0013
+DS0017
+DS0029
+DS0041
+DS0042
+G0007
+G0034
+G0056
+G0070
+G0097
+G0112
+G0142
+G1002
+G1006
+G1015
+G1019
+G1028
+G1029
+M1001
+M1002
+M1003
+M1004
+M1006
+M1009
+M1010
+M1011
+M1012
+M1013
+M1014
+M1058
+M1059
+S0182
+S0285
+S0286
+S0287
+S0288
+S0289
+S0290
+S0291
+S0292
+S0293
+S0294
+S0295
+S0297
+S0298
+S0299
+S0300
+S0301
+S0302
+S0303
+S0304
+S0305
+S0306
+S0307
+S0308
+S0309
+S0310
+S0311
+S0312
+S0313
+S0314
+S0315
+S0316
+S0318
+S0319
+S0320
+S0321
+S0322
+S0323
+S0324
+S0325
+S0326
+S0327
+S0328
+S0329
+S0399
+S0403
+S0405
+S0406
+S0407
+S0408
+S0411
+S0418
+S0419
+S0420
+S0421
+S0422
+S0423
+S0424
+S0425
+S0426
+S0427
+S0432
+S0440
+S0463
+S0478
+S0479
+S0480
+S0485
+S0489
+S0490
+S0494
+S0505
+S0506
+S0507
+S0509
+S0522
+S0524
+S0525
+S0529
+S0535
+S0536
+S0539
+S0540
+S0544
+S0545
+S0549
+S0550
+S0551
+S0555
+S0558
+S0577
+S0602
+S0655
+S1054
+S1055
+S1056
+S1061
+S1062
+S1067
+S1069
+S1077
+S1079
+S1080
+S1082
+S1083
+S1092
+S1093
+S1094
+S1095
+S1103
+S1126
+S1128
+T1398
+T1404
+T1406
+T1406.001
+T1406.002
+T1407
+T1409
+T1414
+T1417
+T1417.001
+T1417.002
+T1418
+T1418.001
+T1420
+T1421
+T1422
+T1422.001
+T1422.002
+T1423
+T1424
+T1426
+T1428
+T1429
+T1430
+T1430.001
+T1430.002
+T1437
+T1437.001
+T1456
+T1458
+T1461
+T1464
+T1471
+T1474
+T1474.001
+T1474.002
+T1474.003
+T1481
+T1481.001
+T1481.002
+T1481.003
+T1509
+T1512
+T1513
+T1516
+T1517
+T1521
+T1521.001
+T1521.002
+T1521.003
+T1532
+T1533
+T1541
+T1544
+T1575
+T1577
+T1582
+T1603
+T1604
+T1616
+T1617
+T1623
+T1623.001
+T1624
+T1624.001
+T1625
+T1625.001
+T1626
+T1626.001
+T1627
+T1627.001
+T1628
+T1628.001
+T1628.002
+T1628.003
+T1629
+T1629.001
+T1629.002
+T1629.003
+T1630
+T1630.001
+T1630.002
+T1630.003
+T1631
+T1631.001
+T1632
+T1632.001
+T1633
+T1633.001
+T1634
+T1634.001
+T1635
+T1635.001
+T1636
+T1636.001
+T1636.002
+T1636.003
+T1636.004
+T1637
+T1637.001
+T1638
+T1639
+T1639.001
+T1640
+T1641
+T1641.001
+T1642
+T1643
+T1644
+T1645
+T1646
+T1655
+T1655.001
+T1658
+T1660
+T1661
+T1662
+T1663
+T1664
+TA0027
+TA0028
+TA0029
+TA0030
+TA0031
+TA0032
+TA0033
+TA0034
+TA0035
+TA0036
+TA0037
+TA0041

txt2stix/includes/lookups/mitre_attack_mobile_name_v16_0.txt ADDED Viewed

@@ -0,0 +1,296 @@
+Mobile ATT&CK
+Scheduled Task/Job
+Adversary-in-the-Middle
+Abuse Elevation Control Mechanism
+Remote Access Software
+Uninstall Malicious Application
+Indicator Removal on Host
+Supply Chain Compromise
+Impersonate SS7 Nodes
+Match Legitimate Name or Location
+Protected User Data
+Asymmetric Cryptography
+Software Discovery
+Process Discovery
+Call Log
+Security Software Discovery
+Ptrace System Calls
+Impair Defenses
+Exploitation of Remote Services
+Web Protocols
+Steal Application Access Token
+User Evasion
+Virtualization/Sandbox Evasion
+Application Versioning
+Command and Scripting Interpreter
+Disable or Modify Tools
+Ingress Tool Transfer
+Dynamic Resolution
+Network Service Scanning
+Exfiltration Over C2 Channel
+Exploitation for Privilege Escalation
+Call Control
+Exfiltration Over Unencrypted Non-C2 Protocol
+Broadcast Receivers
+Access Notifications
+Exfiltration Over Alternative Protocol
+Internet Connection Discovery
+Boot or Logon Initialization Scripts
+Execution Guardrails
+GUI Input Capture
+Compromise Client Software Binary
+Software Packing
+Native API
+Exploitation for Client Execution
+Proxy Through Victim
+Foreground Persistence
+Replication Through Removable Media
+Audio Capture
+Hijack Execution Flow
+Unix Shell
+Application Layer Protocol
+Download New Code at Runtime
+Exploitation for Initial Access
+System Checks
+Stored Application Data
+Screen Capture
+Transmitted Data Manipulation
+Compromise Software Dependencies and Development Tools
+URI Hijacking
+Subvert Trust Controls
+Keychain
+Bidirectional Communication
+Non-Standard Port
+Compromise Software Supply Chain
+Dead Drop Resolver
+Location Tracking
+Device Administrator Permissions
+Remote Device Management Services
+Data Destruction
+Input Capture
+Generate Traffic from Victim
+Disguise Root/Jailbreak Indicators
+Calendar Entries
+File Deletion
+Device Lockout
+Keylogging
+SMS Control
+Process Injection
+Symmetric Cryptography
+Wi-Fi Discovery
+Compromise Hardware Supply Chain
+Clipboard Data
+Data Manipulation
+SMS Messages
+Web Service
+System Runtime API Hijacking
+Credentials from Password Store
+Hooking
+File and Directory Discovery
+Obfuscated Files or Information
+Input Injection
+Network Denial of Service
+Compromise Application Executable
+Event Triggered Execution
+System Network Configuration Discovery
+Video Capture
+One-Way Communication
+Data Encrypted for Impact
+Prevent Application Removal
+System Network Connections Discovery
+Phishing
+SSL Pinning
+Lockscreen Bypass
+Contact List
+Data from Local System
+Account Access Removal
+System Information Discovery
+Archive Collected Data
+Geofencing
+Conceal Multimedia Files
+Endpoint Denial of Service
+Out of Band Data
+Encrypted Channel
+Suppress Application Icon
+Masquerading
+Steganography
+Hide Artifacts
+Code Signing Policy Modification
+Domain Generation Algorithms
+Drive-By Compromise
+Operation Dust Storm
+C0033
+Use Recent OS Version
+Application Developer Guidance
+Enterprise Policy
+User Guidance
+Do Not Mitigate
+Antivirus/Antimalware
+System Partition Integrity
+Encrypt Network Traffic
+Lock Bootloader
+Security Updates
+Deploy Compromised Device Detection Method
+Interconnection Filtering
+Attestation
+The MITRE Corporation
+Bouncing Golf
+UNC788
+Sandworm Team
+Scattered Spider
+Confucius
+MoustachedBouncer
+BITTER
+APT-C-23
+Dark Caracal
+Windshift
+APT28
+Earth Lusca
+PROMETHIUM
+CarbonSteal
+Cerberus
+DroidJack
+Rotexy
+Stealth Mango
+Allwinner
+GoldenEagle
+FlixOnline
+Bread
+Hornbill
+Judy
+OldBoot
+Gooligan
+SpyNote RAT
+TrickMo
+INSOMNIA
+Dvmap
+Zen
+NotCompatible
+AhRat
+XLoader for Android
+Trojan-SMS.AndroidOS.FakeInst.a
+XLoader for iOS
+AbstractEmu
+Chameleon
+Exodus
+Dendroid
+WireLurker
+Desert Scorpion
+Pegasus for iOS
+Tangelo
+RCSAndroid
+Corona Updates
+Skygofree
+KeyRaider
+ZergHelper
+DoubleAgent
+Twitoor
+Fakecalls
+S.O.V.A.
+ANDROIDOS_ANSERVER.A
+DualToy
+Mandrake
+HilalRAT
+X-Agent for Android
+DEFENSOR ID
+BRATA
+MazarBOT
+Ginp
+HummingWhale
+eSurv
+TangleBot
+Monokle
+Red Alert 2.0
+ViceLeaker
+FlyTrap
+FakeSpy
+SpyDealer
+Concipit1248
+RuMMS
+Pegasus for Android
+FrozenCell
+AndroidOS/MalLocker.B
+SharkBot
+RedDrop
+CHEMISTGAMES
+YiSpecter
+Trojan-SMS.AndroidOS.Agent.ao
+BOULDSPY
+Anubis
+AndroRAT
+FinFisher
+Agent Smith
+Asacub
+GPlayed
+EventBot
+HenBox
+Riltok
+GolfSpy
+Pallas
+Circles
+Tiktok Pro
+PJApps
+ShiftyBug
+HummingBad
+Exobot
+OBAD
+Android/Chuli.A
+Charger
+Drinik
+Trojan-SMS.AndroidOS.OpFake.a
+XcodeGhost
+SilkBean
+WolfRAT
+BusyGasper
+BrainTest
+TERRACOTTA
+Escobar
+Triada
+Golden Cup
+FluBot
+ViperRAT
+Adups
+SimBad
+Android/AdDisplay.Ashas
+Phenakite
+TianySpy
+Sunbird
+DressCode
+Gustuff
+None
+FlexiSpy
+Xbot
+Network Connection Creation
+Network Traffic Content
+Process Creation
+System Settings
+API Calls
+Application Assets
+Process Termination
+Command Execution
+Protected Configuration
+Network Communication
+Host Status
+Network Traffic Flow
+Permissions Requests
+System Notifications
+Permissions Request
+Process Metadata
+Sensor Health
+User Interface
+Command
+Network Traffic
+Application Vetting
+Process
+Initial Access
+Exfiltration
+Persistence
+Privilege Escalation
+Command and Control
+Execution
+Impact
+Credential Access
+Collection
+Lateral Movement
+Defense Evasion
+Discovery