cti-python-stix2

cti-python-stix2 copied to clipboard

Is there any way to change the top level extension?

1

I'm adding extensions to my STIX objects then mapping them to an Elastic Cluster. The extension definition is quite long. Is there any way to change it? I've read the...

fear-the-reaper

@Custom decorators should warn if defining a common property it already does for you

4

For example, this should raise a warning: ```python @CustomObject('x-animal', [ ('created', TimestampProperty(required=True, precision='millisecond')), ('species', properties.StringProperty(required=True)), ('animal_class', properties.StringProperty()), ]) class Animal(object): ``` because `created` is a common property that the decorator...

clenk

TAXIICollectionSource should support 2.1 filters

3

`_parse_taxii_filters()` doesn't support the TAXII 2.1-specific filters of `limit`, `next`, or `spec_version`. See also: https://github.com/oasis-open/cti-taxii-client/issues/100.

clenk

Deprecated custom data marking not supported

6

This does not parse: { "created": "2016-08-01T00:00:00.000Z", "definition": { "level": "Confidential" }, "definition_type": "classification", "id": "marking-definition--0ee0838b-d40a-4c01-bde5-d0e502691764", "spec_version": "2.1", "type": "marking-definition" },

rpiazza

"Custom" content has a specific meaning, described in (deprecated) section 11 of the spec. These include custom properties, objects, and extensions. It does not include markings. There is effectively no...

chisholm

Properties ending in `_ref`/`_refs` should not be required to have a specific MRO

9

At the moment, we check the MRO of a property instance used in a custom SCO definition in order to determine if it is valid for use as a property...

maybe-sybr

Instance fields should be mutable

10

At the moment I can not change values of fields after STIX2 object instance was created: ```python In [2]: m = stix2.Malware(name='test malware', labels=['foo', 'bar']) In [3]: m.external_references = ['a']...

traut

Assuming it's not reverted, based on https://github.com/oasis-tcs/cti-stix2/issues/252#issuecomment-823571447, we should update `grouping.object_refs` to allow SMOs. https://github.com/oasis-open/cti-python-stix2/blob/master/stix2/v21/sdo.py#L131

clenk

When using query with Composite data source, can we have meta data in results (like which data source the record came from)

1

I've been learning stix2 here, and, for example if I run a search on a bunch of collections for a specific filter, I may want to understand the id and...

JohnOmernik

`stix2` has decent exception hierarchy in [`exceptions.py`][1]. Yet, in many places it raises Python built-in exceptions like `ValueError`, `AttributeError` and others. Mixing own and Python built-in exceptions makes no clear...

saaj