Help with python-stix

[Nicholas George <nick.george@countersight.co>]

Hi cti-users,

Python is not my strong point, I am trying to use the python-stix
library to consume many stix packages from hailataxii.

I have created an array of STIXPackages and am trying to iterate
through them. What I don't get is how references (idref) between
indicators, ttps, observables can work between packages. Will libstix
magically link everything up for me? Or do I need to manually resolve
idref references? I have attempted to see if it will 'just work' but
am failing.

I find the consumer examples on the stixproject website to be too
trivial, are there any good examples of stix consumers that pull
together lots of observables, indicators and ttps from a source like
Hailataxii?

Kind regards,
Nick