95 lines
2.4 KiB
Plaintext
95 lines
2.4 KiB
Plaintext
|
{
|
||
|
|
"cells": [
|
||
|
|
{
|
||
|
|
"cell_type": "code",
|
||
|
|
"execution_count": 2,
|
||
|
|
"metadata": {
|
||
|
|
"collapsed": true,
|
||
|
|
"nbsphinx": "hidden"
|
||
|
|
},
|
||
|
|
"outputs": [],
|
||
|
|
"source": [
|
||
|
|
"# Delete this cell to re-enable tracebacks\n",
|
||
|
|
"import sys\n",
|
||
|
|
"ipython = get_ipython()\n",
|
||
|
|
"\n",
|
||
|
|
"def hide_traceback(exc_tuple=None, filename=None, tb_offset=None,\n",
|
||
|
|
" exception_only=False, running_compiled_code=False):\n",
|
||
|
|
" etype, value, tb = sys.exc_info()\n",
|
||
|
|
" return ipython._showtraceback(etype, value, ipython.InteractiveTB.get_exception_only(etype, value))\n",
|
||
|
|
"\n",
|
||
|
|
"ipython.showtraceback = hide_traceback"
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"cell_type": "markdown",
|
||
|
|
"metadata": {},
|
||
|
|
"source": [
|
||
|
|
"## Serializing STIX Objects"
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"cell_type": "markdown",
|
||
|
|
"metadata": {},
|
||
|
|
"source": [
|
||
|
|
"The string representation of all STIX classes is a valid STIX JSON object."
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"cell_type": "code",
|
||
|
|
"execution_count": 4,
|
||
|
|
"metadata": {},
|
||
|
|
"outputs": [
|
||
|
|
{
|
||
|
|
"name": "stdout",
|
||
|
|
"output_type": "stream",
|
||
|
|
"text": [
|
||
|
|
"{\n",
|
||
|
|
" \"type\": \"indicator\",\n",
|
||
|
|
" \"id\": \"indicator--d44ae7d5-01dc-4151-a5de-c9a763c7de3e\",\n",
|
||
|
|
" \"created\": \"2017-09-14T18:15:08.073Z\",\n",
|
||
|
|
" \"modified\": \"2017-09-14T18:15:08.073Z\",\n",
|
||
|
|
" \"labels\": [\n",
|
||
|
|
" \"malicious-activity\"\n",
|
||
|
|
" ],\n",
|
||
|
|
" \"name\": \"File hash for malware variant\",\n",
|
||
|
|
" \"pattern\": \"[file:hashes.md5 = 'd41d8cd98f00b204e9800998ecf8427e']\",\n",
|
||
|
|
" \"valid_from\": \"2017-09-14T18:15:08.073928Z\"\n",
|
||
|
|
"}\n"
|
||
|
|
]
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"source": [
|
||
|
|
"from stix2 import Indicator\n",
|
||
|
|
"\n",
|
||
|
|
"indicator = Indicator(name=\"File hash for malware variant\",\n",
|
||
|
|
" labels=[\"malicious-activity\"],\n",
|
||
|
|
" pattern=\"[file:hashes.md5 = 'd41d8cd98f00b204e9800998ecf8427e']\")\n",
|
||
|
|
"\n",
|
||
|
|
"print(str(indicator))"
|
||
|
|
]
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"metadata": {
|
||
|
|
"kernelspec": {
|
||
|
|
"display_name": "Python 2",
|
||
|
|
"language": "python",
|
||
|
|
"name": "python2"
|
||
|
|
},
|
||
|
|
"language_info": {
|
||
|
|
"codemirror_mode": {
|
||
|
|
"name": "ipython",
|
||
|
|
"version": 2
|
||
|
|
},
|
||
|
|
"file_extension": ".py",
|
||
|
|
"mimetype": "text/x-python",
|
||
|
|
"name": "python",
|
||
|
|
"nbconvert_exporter": "python",
|
||
|
|
"pygments_lexer": "ipython2",
|
||
|
|
"version": "2.7.12"
|
||
|
|
}
|
||
|
|
},
|
||
|
|
"nbformat": 4,
|
||
|
|
"nbformat_minor": 2
|
||
|
|
}
|