openioc-to-stix

October 18, 2018 · View on GitHub

Generates STIX Indicator Output from an OpenIOC v1.0 XML File.

:Source: https://github.com/STIXProject/openioc-to-stix :Download: https://pypi.org/project/openioc-to-stix/

.. |travis badge| image:: https://api.travis-ci.org/STIXProject/openioc-to-stix.svg?branch=master :target: https://travis-ci.org/STIXProject/openioc-to-stix :alt: Build Status .. |landscape.io badge| image:: https://landscape.io/github/STIXProject/openioc-to-stix/master/landscape.svg?style=flat :target: https://landscape.io/github/STIXProject/openioc-to-stix/master :alt: Code Health .. |version badge| image:: https://img.shields.io/pypi/v/openioc-to-stix.svg?maxAge=3600 :target: https://pypi.org/project/openioc-to-stix/ :alt: Version Badge

Overview

The openioc-to-stix script generates STIX Indicators from an OpenIOC v1.0 XML file.

Compatible with OpenIOC v1.0
Generates STIX v1.2 and CybOX v2.1 content.

Please refer to the following websites for more information about the Structured Threat Information Expression (STIX), Cyber Observable eXpression (CybOX), and OpenIOC efforts.

Requirements

Python 2.6, 2.7, 3.4, 3.5, 3.6
mixbox >= v1.0.1
python-stix >= v1.2.0.2
python-cybox >= 2.1.0.13

NOTE Version 1.0.1 of openioc-to-stix requires python-stix < 1.2.0.0, python-cybox 2.1.0.12, and does not require mixbox.

Installation

Extract included files into your directory of choice. Please refer to the requirements.txt file for dependencies.

Install dependencies with pip::

$ pip install -r requirements.txt

You can also install openioc-to-stix into your site-packages and PATH by using pip::

$ cd /path/to/cloned/openioc-to-stix/repo/
$ pip install .

Usage

There are two main command line parameters for this script::

-i: the path to the input OpenIOC XML file
-o: the path to the output STIX XML file

To use the script, run the following command::

$ python openioc-to-stix.py -i <OpenIOC XML file> -o <STIX XML file>

Unsupported indicator items or those that error out during translation will be translated into an empty Observable with a description of the error in order to retain structural consistency between the input OpenIOC document and output STIX document.

Package Contents

README: This file.
openioc-to-stix.py: OpenIOC XML to STIX XML Python script.
openioc-to-cybox.py: OpenIOC XML to CybOX XML Python converter script which this script wraps.
openioc2stix/: Top-level API package.
LICENSE.txt: Terms of use for this script.
examples/*.xml: Sample input and output XML files.

TERMS

BY USING OPENIOC-TO-STIX YOU SIGNIFY YOUR ACCEPTANCE OF THE TERMS AND CONDITIONS OF USE. IF YOU DO NOT AGREE TO THESE TERMS, DO NOT USE OPENIOC-TO-STIX.

For more information, please refer to the LICENSE.txt file