2017-09-21 23:27:13 +02:00
|
|
|
"""Python APIs for STIX 2.
|
|
|
|
|
|
|
|
.. autosummary::
|
|
|
|
:toctree: api
|
|
|
|
|
|
|
|
common
|
|
|
|
core
|
|
|
|
environment
|
|
|
|
exceptions
|
2017-09-22 16:01:00 +02:00
|
|
|
markings
|
2017-09-21 23:27:13 +02:00
|
|
|
observables
|
|
|
|
patterns
|
|
|
|
properties
|
|
|
|
sdo
|
2017-09-22 16:01:00 +02:00
|
|
|
sources
|
2017-09-21 23:27:13 +02:00
|
|
|
sro
|
|
|
|
utils
|
|
|
|
"""
|
2017-01-17 21:37:47 +01:00
|
|
|
|
2017-03-22 14:05:59 +01:00
|
|
|
# flake8: noqa
|
|
|
|
|
2017-05-09 21:10:53 +02:00
|
|
|
from . import exceptions
|
2017-08-28 21:19:55 +02:00
|
|
|
from .common import (TLP_AMBER, TLP_GREEN, TLP_RED, TLP_WHITE, CustomMarking,
|
|
|
|
ExternalReference, GranularMarking, KillChainPhase,
|
|
|
|
MarkingDefinition, StatementMarking, TLPMarking)
|
2017-08-11 22:18:20 +02:00
|
|
|
from .core import Bundle, _register_type, parse
|
2017-09-08 15:01:12 +02:00
|
|
|
from .environment import Environment, ObjectFactory
|
2017-10-02 22:09:38 +02:00
|
|
|
from .markings import (add_markings, clear_markings, get_markings, is_marked,
|
|
|
|
remove_markings, set_markings)
|
2017-05-15 19:48:41 +02:00
|
|
|
from .observables import (URL, AlternateDataStream, ArchiveExt, Artifact,
|
2017-09-20 23:13:51 +02:00
|
|
|
AutonomousSystem, CustomExtension, CustomObservable,
|
|
|
|
Directory, DomainName, EmailAddress, EmailMessage,
|
2017-07-14 20:55:57 +02:00
|
|
|
EmailMIMEComponent, File, HTTPRequestExt, ICMPExt,
|
|
|
|
IPv4Address, IPv6Address, MACAddress, Mutex,
|
|
|
|
NetworkTraffic, NTFSExt, PDFExt, Process,
|
|
|
|
RasterImageExt, SocketExt, Software, TCPExt,
|
2017-05-15 19:48:41 +02:00
|
|
|
UNIXAccountExt, UserAccount, WindowsPEBinaryExt,
|
|
|
|
WindowsPEOptionalHeaderType, WindowsPESection,
|
|
|
|
WindowsProcessExt, WindowsRegistryKey,
|
|
|
|
WindowsRegistryValueType, WindowsServiceExt,
|
2017-07-14 20:55:57 +02:00
|
|
|
X509Certificate, X509V3ExtenstionsType,
|
|
|
|
parse_observable)
|
2017-07-19 15:39:17 +02:00
|
|
|
from .patterns import (AndBooleanExpression, AndObservationExpression,
|
|
|
|
BasicObjectPathComponent, EqualityComparisonExpression,
|
|
|
|
FloatConstant, FollowedByObservationExpression,
|
|
|
|
GreaterThanComparisonExpression,
|
|
|
|
GreaterThanEqualComparisonExpression, HashConstant,
|
|
|
|
HexConstant, IntegerConstant,
|
|
|
|
IsSubsetComparisonExpression,
|
|
|
|
IsSupersetComparisonExpression,
|
|
|
|
LessThanComparisonExpression,
|
|
|
|
LessThanEqualComparisonExpression,
|
|
|
|
LikeComparisonExpression, ListConstant,
|
|
|
|
ListObjectPathComponent, MatchesComparisonExpression,
|
|
|
|
ObjectPath, ObservationExpression, OrBooleanExpression,
|
|
|
|
OrObservationExpression, ParentheticalExpression,
|
|
|
|
QualifiedObservationExpression,
|
|
|
|
ReferenceObjectPathComponent, RepeatQualifier,
|
2017-09-11 15:00:40 +02:00
|
|
|
StartStopQualifier, StringConstant, TimestampConstant,
|
|
|
|
WithinQualifier)
|
2017-07-14 20:55:57 +02:00
|
|
|
from .sdo import (AttackPattern, Campaign, CourseOfAction, CustomObject,
|
2017-10-06 21:09:14 +02:00
|
|
|
Identity, Indicator, IntrusionSet, Location, Malware, Note,
|
|
|
|
ObservedData, Opinion, Report, ThreatActor, Tool,
|
|
|
|
Vulnerability)
|
2017-09-08 15:01:12 +02:00
|
|
|
from .sources import CompositeDataSource
|
|
|
|
from .sources.filesystem import (FileSystemSink, FileSystemSource,
|
|
|
|
FileSystemStore)
|
|
|
|
from .sources.filters import Filter
|
|
|
|
from .sources.memory import MemorySink, MemorySource, MemoryStore
|
|
|
|
from .sources.taxii import (TAXIICollectionSink, TAXIICollectionSource,
|
|
|
|
TAXIICollectionStore)
|
2017-03-31 21:52:27 +02:00
|
|
|
from .sro import Relationship, Sighting
|
2017-09-01 22:37:49 +02:00
|
|
|
from .utils import get_dict, new_version, revoke
|
2017-07-06 15:39:33 +02:00
|
|
|
from .version import __version__
|