Posted By
Drew Varner
12-24-2020 05:05
Found In
Egroup:
cti-comment
\
view thread
Hey Julian, I don’t use Python or the STIX2 library, but it should have what you need to get started. The expression comparison functions seem to work by: 1. Parsing the pattern into an abstract syntax tree (AST) 2. Canonicalizing the ASTs, possibly transforming them 3. Comparing the canonicalized ...
|