RE: Doubts on representing results in STIX JSON

["Thompson, Dean" <Dean.Thompson@anz.com>]

 

Hi Foo,

 

Won’t you have to write a program which reads in the JSON from Cuckoo and converts that JSON into a STIX package using the STIX language bindings ?

 

Regards,

 

Dean

 

 

From: cti-users@lists.oasis-open.org [mailto:cti-users@lists.oasis-open.org] On Behalf Of #FOO CE ZHI#
Sent: Sunday, 17 September 2017 6:55 AM
To: cti-users@lists.oasis-open.org
Subject: [cti-users] Doubts on representing results in STIX JSON

 

Hi, 

 

I am implementing STIX 2.0 where I am looking at presenting analysis results obtained from Cuckoo sandbox into STIX 2.x in JSON format. Cuckoo sandbox is able to generate the report in JSON format. However, I have the following doubts that require your assistance.

 

1. Do I have to use a TAXII such that I can extract the results to be represented in STIX? Assuming I am producing the results for testing purposes in my local machine. 

2. How do I call or invoke the respective data to be presented in STIX?

 

I would be very much grateful and appreciative to your reply.

 

Thank you.

 

Best regards,

Foo

"This e-mail and any attachments to it (the "Communication") is, unless otherwise stated, confidential, may contain copyright material and is for the use only of the intended recipient. If you receive the Communication in error, please notify the sender immediately by return e-mail, delete the Communication and the return e-mail, and do not read, copy, retransmit or otherwise deal with it. Any views expressed in the Communication are those of the individual sender only, unless expressly stated to be those of Australia and New Zealand Banking Group Limited ABN 11 005 357 522, or any of its related entities including ANZ Bank New Zealand Limited (together "ANZ"). ANZ does not accept liability in connection with the integrity of or errors in the Communication, computer virus, data corruption, interference or delay arising from or in respect of the Communication."