Re: [cti-users] Help with python-stix

Hi Nicholas,

Have you looked at the CTI-toolkit from cert-au? It's a nice way of getting indicators out of STIX and into a usable state.

https://github.com/certau/cti-toolkit

Might help depending on your use case...

Cheers

Terry MacDonald

Cosive

On 27/03/2017 22:45, "Nicholas George" <nick.george@countersight.co> wrote:

Hi cti-users,

Python is not my strong point, I am trying to use the python-stix
library to consume many stix packages from hailataxii.

I have created an array of STIXPackages and am trying to iterate
through them. What I don't get is how references (idref) between
indicators, ttps, observables can work between packages. Will libstix
magically link everything up for me? Or do I need to manually resolve
idref references? I have attempted to see if it will 'just work' but
am failing.

I find the consumer examples on the stixproject website to be too
trivial, are there any good examples of stix consumers that pull
together lots of observables, indicators and ttps from a source like
Hailataxii?

Kind regards,
Nick

This publicly archived list provides a forum for asking questions,
offering answers, and discussing topics of interest on STIX,
TAXII, and CybOX. Users and developers of solutions that leverage
STIX, TAXII and CybOX are invited to participate.

In order to verify user consent to OASIS mailing list guidelines
and to minimize spam in the list archive, subscription is required
before posting.

Subscribe: cti-users-subscribe@lists.oasis-open.org
Unsubscribe: cti-users-unsubscribe@lists.oasis-open.org
Post: cti-users@lists.oasis-open.org
List help: cti-users-help@lists.oasis-open.org
List archive: http://lists.oasis-open.org/archives/cti-users/
List Guidelines: http://www.oasis-open.org/maillists/guidelines.php
CTI Technical Committee: https://www.oasis-open.org/committees/cti/
Join OASIS: http://www.oasis-open.org/join/

cti-users message