client-python icon indicating copy to clipboard operation
client-python copied to clipboard

Add PAP marking definitions in OpenCTI python library

Open marckto-filigran opened this issue 8 months ago • 1 comments

The PAP marking definitions also do not seem to have the correct IDs. The IDs for PAP are described in the official extension definition at https://github.com/oasis-open/cti-stix-common-objects/blob/main/extension-definition-specifications/pap-marking-definition-f8d/extension-definition--f8d78575-edfd-406e-8e84-6162a8450f5b.json

As an example, the marking definition for PAP:RED should be marking-definition—740d36e5-7714-4c30-961a-3ae632ceee0e but seems to be marking-definition--4e4e3b84-de45-53df-9d9b-b21207699fd8

The OpenCTI python library defines TLP markings that matches the Oasis standard IDs, but nothing refered to PAP markings.

It would be good to add the PAP markings so that the IDs stick to the standard.

marckto-filigran avatar Apr 09 '25 11:04 marckto-filigran

@romain-filigran should this have been moved to the Python client? As I understand it the PAP STIX IDs within the platform itself do not adhere to the official definition. It would simply be a convenience within the Python library to include the IDs hardcoded, but would not address the core issue.

peritz avatar Jun 03 '25 14:06 peritz