2018-07-10 20:54:17 +02:00
|
|
|
from collections import OrderedDict
|
|
|
|
import re
|
|
|
|
|
|
|
|
from .base import _Extension, _Observable, _STIXBase
|
2018-07-11 14:38:06 +02:00
|
|
|
from .core import (STIXDomainObject, _register_marking, _register_object,
|
|
|
|
_register_observable, _register_observable_extension)
|
2018-07-10 20:54:17 +02:00
|
|
|
from .utils import TYPE_REGEX, get_class_hierarchy_names
|
|
|
|
|
|
|
|
|
2018-07-11 14:11:47 +02:00
|
|
|
def _custom_object_builder(cls, type, properties, version):
|
2018-07-10 20:54:17 +02:00
|
|
|
class _CustomObject(cls, STIXDomainObject):
|
|
|
|
|
|
|
|
if not re.match(TYPE_REGEX, type):
|
|
|
|
raise ValueError("Invalid type name '%s': must only contain the "
|
|
|
|
"characters a-z (lowercase ASCII), 0-9, and hyphen (-)." % type)
|
|
|
|
elif len(type) < 3 or len(type) > 250:
|
|
|
|
raise ValueError(
|
|
|
|
"Invalid type name '%s': must be between 3 and 250 characters." % type)
|
|
|
|
|
|
|
|
if not properties or not isinstance(properties, list):
|
|
|
|
raise ValueError("Must supply a list, containing tuples. For example, [('property1', IntegerProperty())]")
|
|
|
|
|
|
|
|
_type = type
|
|
|
|
_properties = OrderedDict(properties)
|
|
|
|
|
|
|
|
def __init__(self, **kwargs):
|
|
|
|
_STIXBase.__init__(self, **kwargs)
|
|
|
|
try:
|
|
|
|
cls.__init__(self, **kwargs)
|
|
|
|
except (AttributeError, TypeError) as e:
|
|
|
|
# Don't accidentally catch errors raised in a custom __init__()
|
|
|
|
if ("has no attribute '__init__'" in str(e) or
|
|
|
|
str(e) == "object.__init__() takes no parameters"):
|
|
|
|
return
|
|
|
|
raise e
|
|
|
|
|
|
|
|
_register_object(_CustomObject, version=version)
|
|
|
|
return _CustomObject
|
|
|
|
|
|
|
|
|
2018-07-11 14:11:47 +02:00
|
|
|
def _custom_marking_builder(cls, type, properties, version):
|
2018-07-10 20:54:17 +02:00
|
|
|
class _CustomMarking(cls, _STIXBase):
|
|
|
|
|
|
|
|
if not properties or not isinstance(properties, list):
|
|
|
|
raise ValueError("Must supply a list, containing tuples. For example, [('property1', IntegerProperty())]")
|
|
|
|
|
|
|
|
_type = type
|
|
|
|
_properties = OrderedDict(properties)
|
|
|
|
|
|
|
|
def __init__(self, **kwargs):
|
|
|
|
_STIXBase.__init__(self, **kwargs)
|
|
|
|
try:
|
|
|
|
cls.__init__(self, **kwargs)
|
|
|
|
except (AttributeError, TypeError) as e:
|
|
|
|
# Don't accidentally catch errors raised in a custom __init__()
|
|
|
|
if ("has no attribute '__init__'" in str(e) or
|
|
|
|
str(e) == "object.__init__() takes no parameters"):
|
|
|
|
return
|
|
|
|
raise e
|
|
|
|
|
|
|
|
_register_marking(_CustomMarking, version=version)
|
|
|
|
return _CustomMarking
|
|
|
|
|
|
|
|
|
2018-07-11 14:11:47 +02:00
|
|
|
def _custom_observable_builder(cls, type, properties, version):
|
2018-07-10 20:54:17 +02:00
|
|
|
class _CustomObservable(cls, _Observable):
|
|
|
|
|
|
|
|
if not re.match(TYPE_REGEX, type):
|
|
|
|
raise ValueError("Invalid observable type name '%s': must only contain the "
|
|
|
|
"characters a-z (lowercase ASCII), 0-9, and hyphen (-)." % type)
|
|
|
|
elif len(type) < 3 or len(type) > 250:
|
|
|
|
raise ValueError("Invalid observable type name '%s': must be between 3 and 250 characters." % type)
|
|
|
|
|
|
|
|
if not properties or not isinstance(properties, list):
|
|
|
|
raise ValueError("Must supply a list, containing tuples. For example, [('property1', IntegerProperty())]")
|
|
|
|
|
|
|
|
# Check properties ending in "_ref/s" are ObjectReferenceProperties
|
|
|
|
for prop_name, prop in properties:
|
|
|
|
if prop_name.endswith('_ref') and ('ObjectReferenceProperty' not in get_class_hierarchy_names(prop)):
|
|
|
|
raise ValueError("'%s' is named like an object reference property but "
|
|
|
|
"is not an ObjectReferenceProperty." % prop_name)
|
|
|
|
elif (prop_name.endswith('_refs') and ('ListProperty' not in get_class_hierarchy_names(prop)
|
|
|
|
or 'ObjectReferenceProperty' not in get_class_hierarchy_names(prop.contained))):
|
|
|
|
raise ValueError("'%s' is named like an object reference list property but "
|
|
|
|
"is not a ListProperty containing ObjectReferenceProperty." % prop_name)
|
|
|
|
|
|
|
|
_type = type
|
|
|
|
_properties = OrderedDict(properties)
|
|
|
|
|
|
|
|
def __init__(self, **kwargs):
|
|
|
|
_Observable.__init__(self, **kwargs)
|
|
|
|
try:
|
|
|
|
cls.__init__(self, **kwargs)
|
|
|
|
except (AttributeError, TypeError) as e:
|
|
|
|
# Don't accidentally catch errors raised in a custom __init__()
|
|
|
|
if ("has no attribute '__init__'" in str(e) or
|
|
|
|
str(e) == "object.__init__() takes no parameters"):
|
|
|
|
return
|
|
|
|
raise e
|
|
|
|
|
|
|
|
_register_observable(_CustomObservable, version=version)
|
|
|
|
return _CustomObservable
|
|
|
|
|
|
|
|
|
2018-07-11 14:11:47 +02:00
|
|
|
def _custom_extension_builder(cls, observable, type, properties, version):
|
2018-07-10 20:54:17 +02:00
|
|
|
if not observable or not issubclass(observable, _Observable):
|
|
|
|
raise ValueError("'observable' must be a valid Observable class!")
|
|
|
|
|
|
|
|
class _CustomExtension(cls, _Extension):
|
|
|
|
|
|
|
|
if not re.match(TYPE_REGEX, type):
|
|
|
|
raise ValueError("Invalid extension type name '%s': must only contain the "
|
|
|
|
"characters a-z (lowercase ASCII), 0-9, and hyphen (-)." % type)
|
|
|
|
elif len(type) < 3 or len(type) > 250:
|
|
|
|
raise ValueError("Invalid extension type name '%s': must be between 3 and 250 characters." % type)
|
|
|
|
|
|
|
|
if not properties or not isinstance(properties, list):
|
|
|
|
raise ValueError("Must supply a list, containing tuples. For example, [('property1', IntegerProperty())]")
|
|
|
|
|
|
|
|
_type = type
|
|
|
|
_properties = OrderedDict(properties)
|
|
|
|
|
|
|
|
def __init__(self, **kwargs):
|
|
|
|
_Extension.__init__(self, **kwargs)
|
|
|
|
try:
|
|
|
|
cls.__init__(self, **kwargs)
|
|
|
|
except (AttributeError, TypeError) as e:
|
|
|
|
# Don't accidentally catch errors raised in a custom __init__()
|
|
|
|
if ("has no attribute '__init__'" in str(e) or
|
|
|
|
str(e) == "object.__init__() takes no parameters"):
|
|
|
|
return
|
|
|
|
raise e
|
|
|
|
|
|
|
|
_register_observable_extension(observable, _CustomExtension, version=version)
|
|
|
|
return _CustomExtension
|