MISP
/
cti-python-stix2
mirror of https://github.com/MISP/cti-python-stix2
2
0
Fork 0
Code Issues Releases Wiki Activity

Merge pull request #356 from chisholm/malware_analysis_sample_ref 

Add the "sample_ref" property to malware-analysis SDOs
master
Chris Lenk 2020-03-11 09:12:02 -04:00 committed by GitHub
parent 2429533e4f 50eb188190
commit bdf7cab8fe
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
stix2/test/v21/test_malware_analysis.py
View File

@ -38,7 +38,8 @@ MALWARE_ANALYSIS_JSON = """{
"analysis_sco_refs": [ "analysis_sco_refs": [
"file--fc27e371-6c88-4c5c-868a-4dda0e60b167", "file--fc27e371-6c88-4c5c-868a-4dda0e60b167",
"url--6f7a74cd-8eb2-4b88-a4da-aa878e50ac2e" "url--6f7a74cd-8eb2-4b88-a4da-aa878e50ac2e"
] ],
"sample_ref": "email-addr--499a32d7-74c1-4276-ace9-725ac933e243"
}""" }"""

1
stix2/v21/sdo.py
View File

@ -526,6 +526,7 @@ class MalwareAnalysis(STIXDomainObject):
('analysis_ended', TimestampProperty()), ('analysis_ended', TimestampProperty()),
('av_result', StringProperty()), ('av_result', StringProperty()),
('analysis_sco_refs', ListProperty(ReferenceProperty(valid_types="SCO", spec_version='2.1'))), ('analysis_sco_refs', ListProperty(ReferenceProperty(valid_types="SCO", spec_version='2.1'))),
('sample_ref', ReferenceProperty(valid_types="SCO", spec_version="2.1")),
]) ])
def _check_object_constraints(self): def _check_object_constraints(self):