MISP
/
cti-python-stix2
mirror of https://github.com/MISP/cti-python-stix2
2
0
Fork 0
Code Issues Releases Wiki Activity
1,707 Commits
6 Branches
12 Tags
5.9 MiB
Commit Graph

152 Commits (7a9d052a0dff52b5218b83d6ce546f3980071547)

Author SHA1 Message Date
Chris Lenk 7a9d052a0d Update Network Traffic for CS03 
- `end` must be greater than or equal to `start`
- `extensions` and `end` are now id-contributing properties
 2021-06-25 22:48:00 -04:00
Michael Chisholm 2b064872a4 Add variables for each individual enum value in the vocab modules. 2021-04-15 22:06:57 -04:00
Michael Chisholm e735b537c7 Remove a workaround which was used in the 2.0 and 2.1 Report 
objects, to structure object_refs type requirements as an empty
blacklist, instead of a whitelist.  I think it was originally
necessary due to the older implementation of ReferenceProperty
which was in place at the time.  With the implementation change
to invert whitelists with generics to blacklists when
allow_custom=True, a "full" whitelist is internally converted to
an empty blacklist anyway, so it winds up being the same thing.
But I think the full whitelist looks better in the code, so I
prefer that to the empty blacklist.
 2021-03-31 20:56:31 -04:00
Michael Chisholm c8c4e89415 Add back usage of spec_version where HashesProperty is used for 
various STIX objects.  Also pre-commit stylistic fixes...
 2021-03-31 16:20:33 -04:00
Michael Chisholm c590de8ea5 Add proper customization enforcement for open vocabs. This adds 
a new OpenVocabProperty class.  It also requires a redesign of
HashesProperty and redoes general library support for hash
algorithms.
 2021-03-31 16:20:28 -04:00
Michael Chisholm 387ce7e7cb Fix Report SDO: I'd fixed ReferenceProperty to work the way I 
thought it should, but forgot to fix Report to use
ReferenceProperty in the way I thought it should!  Oops.
Added some tests to ensure Report is working property with
custom ID types in object_refs.
 2021-03-31 15:22:00 -04:00
Michael Chisholm d2f960f2fc Initial revamp of customization enforcement and detection. 2021-03-31 15:21:55 -04:00
Chris Lenk b4a0a9ea10 Remove six dependency (backwards breaking) 
We've already removed Python 2 from our test harness, but this removes
all python 2 compatibility code left in.
 2021-02-18 12:38:35 -05:00
Emmanuelle Vargas-Gonzalez 77d20c787a
Update observables.py 
Add missing common properties in decorator closes #484
 2021-01-27 11:31:14 -05:00
Emmanuelle Vargas-Gonzalez 85c14d1502 all changes from add-trailing-commas v2.0.2 2021-01-13 17:52:15 -05:00
Emmanuelle Vargas-Gonzalez 119364c889
Merge branch 'master' into 472-issue 2020-11-20 10:02:46 -05:00
Emmanuelle Vargas-Gonzalez e7242c9ae6 forgot one... 2020-11-19 08:48:57 -05:00
Emmanuelle Vargas-Gonzalez 49985cc51d fix ordering problem with Class definitions 2020-11-18 19:01:12 -05:00
Emmanuelle Vargas-Gonzalez c9bafaf5ae fix typo for Class X509V3ExtensionsType 2020-11-18 18:08:57 -05:00
Michael Chisholm f5bbbe7a3b Fix bug with reference type enforcement on property 
where_sighted_refs on Sighting.
 2020-11-16 15:04:24 -05:00
Chris Lenk 806389117f Allow mixing single objects and lists in bundles 
...in bundle constructor

Related: #429.
 2020-07-20 00:24:36 -04:00
Michael Chisholm d888eb60e2 Remove protocol_family and its uses from the v21 network 
socket SCO extension.  It's a 2.0 property that got copied into
the 2.1 code by mistake.
 2020-07-08 14:26:02 -04:00
Chris Lenk 8e785cbd05 Remove outdated comment 2020-07-06 16:42:33 -04:00
Emmanuelle Vargas-Gonzalez 9a0cb02ab3 nit-pick on v21 Indicator constructor 2020-06-30 13:58:19 -04:00
Chris Lenk b2ee33208f Set STIX 2.1 as default, fix indicator.valid_from 2020-06-26 16:43:19 -04:00
Michael Chisholm 99bf4215a3 Change all uses of ObjectReferenceProperty in 2.1 SCO classes 
to ReferenceProperty.  Add a unit test to ensure that when a
stix2 object is passed as a value of a ReferenceProperty, that
the ID is properly pulled out and used as the actual property
value, and that it doesn't affect the deterministic ID
calculation.
 2020-06-08 17:24:33 -04:00
Michael Chisholm 7def04fd6f Add __all__'s to v20 and v21/__init__.py to ensure that 
star-imports from those modules get the right symbols.  "base"
was a problem because it was getting imported via
stix2/__init__.py and overwriting stix2.base, making the actual
stix2/base.py module inaccessible.
 2020-06-03 17:39:09 -04:00
Chris Lenk df92770d25
Merge pull request #384 from oasis-open/365-versioned-classes 
Validate custom type/property name formats
 2020-04-03 17:30:24 -04:00
Chris Lenk 9145bdf5e8
Merge pull request #374 from chisholm/version_precision 
Support STIX 2.1 version precision
 2020-04-03 15:52:42 -04:00
Chris Lenk 03cb225932 Merge branch 'master' into 365-versioned-classes 2020-04-02 06:02:20 -04:00
Chris Lenk c494a2e477 Use TypeProperty.clean() to verify type format 2020-04-01 21:52:04 -04:00
Rich Piazza 46219bf072 add 2.1 links 2020-03-27 09:36:10 -04:00
Chris Lenk 01ba190525 Reorganize bases, use isinstance to check version 
Renamed STIXDomainObject -> _DomainObject.
Renamed STIXRelationshipObject -> _RelationshipObject.
 2020-03-27 02:40:42 -04:00
Chris Lenk e8035863b8
Make swid an id-contributing property 2020-03-21 23:56:09 -04:00
Chris Lenk e31634c32b Rework spec version detection for _STIXBase objs 2020-03-21 22:22:36 -04:00
Michael Chisholm 4aa69fa7c9 Add support for enforcing STIX 2.1 minimum precision requirement 
on versioning timestamps.
 2020-03-16 20:25:38 -04:00
Chris Lenk 3dda25e976
Merge pull request #362 from chisholm/file_id_contrib_props 
Add parent_directory_ref as an ID contributing property for file SCOs
 2020-03-12 09:36:16 -04:00
Chris Lenk 5abc139e79 Merge branch 'khdesai-fix_issue_338'; Close #347 2020-03-12 09:30:52 -04:00
Chris Lenk 3dd9351d38 Bring back lang, confidence for Course of Action 2020-03-12 09:24:43 -04:00
Desai, Kartikey H 82517ae284 Fixes #338 2020-03-12 09:24:43 -04:00
Desai, Kartikey H 8885a757cb Fix properties spec version back to 2.1, and re-adjust tests. Fixes #338 2020-03-12 09:24:43 -04:00
Desai, Kartikey H 36f7035785 Fixes #338 2020-03-12 09:24:43 -04:00
Chris Lenk e782d095ea
Merge pull request #369 from chisholm/malware_os_refs 
Change software SCO: os_execution_envs -> operating_system_refs
 2020-03-11 23:47:14 -04:00
Chris Lenk 94e3cd7ca6
Merge pull request #360 from chisholm/enforce_hash_keys 
Enforce hash keys on 2.1 external-references
 2020-03-11 23:13:55 -04:00
Chris Lenk 87c5ef30ad
Merge pull request #358 from chisholm/software_cpe_swid 
Add swid property to the software SCO
 2020-03-11 23:03:18 -04:00
Chris Lenk 33fb31421b
Merge pull request #357 from chisholm/malware_analysis_result 
Update malware-analysis SDO's av_result property
 2020-03-11 09:16:34 -04:00
Chris Lenk bdf7cab8fe
Merge pull request #356 from chisholm/malware_analysis_sample_ref 
Add the "sample_ref" property to malware-analysis SDOs
 2020-03-11 09:12:02 -04:00
Chris Lenk 2429533e4f
Merge pull request #355 from chisholm/optional_type_properties 
Changed several *_types properties to be optional due to STIX spec change
 2020-03-11 09:08:42 -04:00
Michael Chisholm 792cc570d7 Change the os_execution_envs property of software SCOs to 
operating_system_refs, and add a test for it.
 2020-03-06 19:43:47 -05:00
Michael Chisholm a862b930be Add parent_directory_ref as an ID contributing property for the 
file SCO.
 2020-03-05 17:18:32 -05:00
Michael Chisholm a5dc514403 Fix external-references to force hash keys to come from 
hash-algorithm-ov.
 2020-03-04 20:55:52 -05:00
Desai, Kartikey H a5cd0fdc50 Change location of None-check for id_contrib_props. Fixes #351 2020-03-04 14:46:55 -05:00
Desai, Kartikey H fc95b400ff Change default parameters from empty lists to None. Fixes #351 2020-03-04 14:29:35 -05:00
Michael Chisholm 4e2b018272 Add a property to the software SCO, due to STIX spec change. 2020-03-02 16:57:18 -05:00
Michael Chisholm d2bff4d411 Update malware-analysis SDO's av_result property: replace it with 
result and result_name properties.  Per:
https://github.com/oasis-tcs/cti-stix2/issues/213
 2020-02-27 17:26:04 -05:00