Re: [cti-users] Re: Isolate STIX as file after transfer through TAXII 2

[Bret Jordan <jordan2175@gmail.com>]

You can also provide a URL parameter to filter for a specific object ID, like a report id.  Example "?match[id]=report--d4746afa-16c8-4abe-afaf-0baaed8804e3"

On Mar 9, 2018, at 18:38, ringo <ringowathelet@gmail.com> wrote:

Hi Stanley,

Yes, a bundle is use to "transport" one or more STIX-2 objects to the server, and from the server to the client.

To do what you ask, you could use a Taxii-2 client library like:

Python: https://github.com/oasis-open/cti-taxii-client

_javascript_: https://github.com/workingDog/taxii2lib

Scala: https://github.com/workingDog/Taxii2LibScala

and use the library to extract the individual STIX objects from the bundle and save them to file.

From the client side, have a look at my Scala TestApp at: https://github.com/workingDog/testtaxii

or a _javascript_ equivalent at: https://github.com/workingDog/taxii2lib/blob/master/src/testApp.js

Hope it helps.

Ringo

Thanks,

Bret

PGP Fingerprint: 63B4 FC53 680A 6B7D 1447  F2C0 74F8 ACAE 7415 0050

"Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."

Attachment: signature.asc
Description: Message signed with OpenPGP