2021-01-09 04:08:33 +01:00
|
|
|
import importlib
|
|
|
|
import pkgutil
|
|
|
|
import re
|
|
|
|
|
|
|
|
# Collects information on which classes implement which STIX types, for the
|
|
|
|
# various STIX spec versions.
|
|
|
|
STIX2_OBJ_MAPS = {}
|
|
|
|
|
|
|
|
|
|
|
|
def _collect_stix2_mappings():
|
|
|
|
"""Navigate the package once and retrieve all object mapping dicts for each
|
|
|
|
v2X package. Includes OBJ_MAP, OBJ_MAP_OBSERVABLE, EXT_MAP."""
|
|
|
|
if not STIX2_OBJ_MAPS:
|
|
|
|
top_level_module = importlib.import_module('stix2')
|
|
|
|
path = top_level_module.__path__
|
|
|
|
prefix = str(top_level_module.__name__) + '.'
|
|
|
|
|
|
|
|
for module_loader, name, is_pkg in pkgutil.walk_packages(path=path, prefix=prefix):
|
|
|
|
ver = name.split('.')[1]
|
|
|
|
if re.match(r'^stix2\.v2[0-9]$', name) and is_pkg:
|
|
|
|
mod = importlib.import_module(name, str(top_level_module.__name__))
|
|
|
|
STIX2_OBJ_MAPS[ver] = {}
|
|
|
|
STIX2_OBJ_MAPS[ver]['objects'] = mod.OBJ_MAP
|
|
|
|
STIX2_OBJ_MAPS[ver]['observables'] = mod.OBJ_MAP_OBSERVABLE
|
|
|
|
STIX2_OBJ_MAPS[ver]['observable-extensions'] = mod.EXT_MAP
|
|
|
|
elif re.match(r'^stix2\.v2[0-9]\.common$', name) and is_pkg is False:
|
|
|
|
mod = importlib.import_module(name, str(top_level_module.__name__))
|
|
|
|
STIX2_OBJ_MAPS[ver]['markings'] = mod.OBJ_MAP_MARKING
|
2021-01-12 22:30:26 +01:00
|
|
|
|
|
|
|
|
|
|
|
def get_stix2_class_maps(stix_version):
|
|
|
|
"""
|
|
|
|
Get the stix2 class mappings for the given STIX version.
|
|
|
|
|
|
|
|
:param stix_version: A STIX version as a string
|
|
|
|
:return: The class mappings. This will be a dict mapping from some general
|
|
|
|
category name, e.g. "object" to another mapping from STIX type
|
|
|
|
to a stix2 class.
|
|
|
|
"""
|
|
|
|
stix_vid = "v" + stix_version.replace(".", "")
|
|
|
|
cls_maps = STIX2_OBJ_MAPS[stix_vid]
|
|
|
|
|
|
|
|
return cls_maps
|