OASIS Cyber Threat Intelligence (CTI) TC

Hi everyone-
                        
We just published cti-stix-elevator version 4.0. 2  on PyPi [1]. The source code is available at [2]. read-the-docs documentation is available at [3].
 
* Changes

    - Avoid generating nested observation expressions, which are invalid
    - Handle cybox Homename object as domain-name object in STIX 2.x
    - Make sure identity created_by_ref property is set correctly
    - Correctly convert file object properties in patterns
    - Handle nested related objects in STIX 1.x Observables
    - Handle Information Source in a STIX 1.x package data marking
    - Better way to avoid infinite recursion when called get_identity
    - Add suffix 'ref(s)'' to property names for custom/extension of Incident
    - AIS data markings:
        - Insure TTP generated STIX 2.x objects and relationship objects have the correct AIS data markings
        - Change labels to handle CISA-PROPRIETARY correctly
 
Please enter an issue on GitHub for bugs and feature requests.

 

Contributions welcome.

  

Rich Piazza

Chris Lenk

 

MITRE

 

[1]  https://pypi.org/project/stix2-elevator

[2]  https://github.com/oasis-open/cti-stix-elevator

[3]   https://stix2-elevator.readthedocs.io/en/latest/    
 

Hi everyone-                          We just published cti-stix-elevator version 4. 1.0  on PyPi [1]. The source code is available at [2]. read-the-docs documentation is available at [3].   This release optionally handles ACS data markings (see install doc) Other changes added --acs option for ACS data markings Fix hash_constant processing to handle defaults Handle literals in missing policy code Added time properties to incident extension Handle malware aliases Please enter an issue on GitHub for bugs and feature requests.   Contributions welcome.    Rich Piazza Chris Lenk   MITRE   [1]  https://pypi.org/project/stix2-elevator [2]  https://github.com/oasis-open/cti-stix-elevator [3]   https://stix2-elevator.readthedocs.io/en/latest/