Re: [cti-users] Help with python-stix

[Nicholas George <nick.george@countersight.co>]

Thanks for that Terry, I will check it out.
Nick George
Director of Engineering
Countersight

+61 (0) 405 546 228
nick.george@countersight.co
countersight.co



On Mon, Mar 27, 2017 at 11:10 AM, Terry MacDonald
<terry.macdonald@gmail.com> wrote:
> Hi Nicholas,
>
> Have you looked at the CTI-toolkit from cert-au?  It's a nice way of getting
> indicators out of STIX and into a usable state.
>
> https://github.com/certau/cti-toolkit
>
> Might help depending on your use case...
>
> Cheers
> Terry MacDonald
> Cosive
>
> On 27/03/2017 22:45, "Nicholas George" <nick.george@countersight.co> wrote:
>
> Hi cti-users,
>
> Python is not my strong point, I am trying to use the python-stix
> library to consume many stix packages from hailataxii.
>
> I have created an array of STIXPackages and am trying to iterate
> through them. What I don't get is how references (idref) between
> indicators, ttps, observables can work between packages. Will libstix
> magically link everything up for me? Or do I need to manually resolve
> idref references? I have attempted to see if it will 'just work' but
> am failing.
>
> I find the consumer examples on the stixproject website to be too
> trivial, are there any good examples of stix consumers that pull
> together lots of observables, indicators and ttps from a source like
> Hailataxii?
>
> Kind regards,
> Nick
>
> This publicly archived list provides a forum for asking questions,
> offering answers, and discussing topics of interest on STIX,
> TAXII, and CybOX.  Users and developers of solutions that leverage
> STIX, TAXII and CybOX are invited to participate.
>
> In order to verify user consent to OASIS mailing list guidelines
> and to minimize spam in the list archive, subscription is required
> before posting.
>
> Subscribe: cti-users-subscribe@lists.oasis-open.org
> Unsubscribe: cti-users-unsubscribe@lists.oasis-open.org
> Post: cti-users@lists.oasis-open.org
> List help: cti-users-help@lists.oasis-open.org
> List archive: http://lists.oasis-open.org/archives/cti-users/
> List Guidelines: http://www.oasis-open.org/maillists/guidelines.php
> CTI Technical Committee: https://www.oasis-open.org/committees/cti/
> Join OASIS: http://www.oasis-open.org/join/
>
>