cti-stix-elevator 1.2.0 released

We just published cti-stix-elevator version 1.2.0 on PyPi [1]. The source code is available at [2].Â Documentation is available at [3].

The stix2-elevator is a work-in-progress. It should be used to explore how existing STIX 1.x would potentially be represented in STIX 2.0. Using the current version of the elevator will provide insight to issues that might need to be mitigated to convert your STIX 1.x content.

It should not be used in a production environment and should not be considered final.

The elevator can be used on STIX 1.1.1 or STIX 1.2 content. However, you will need to download the correct version of python-stix depending upon which type of content you have. It is not possible to have both versions of python-stix installed at once.

For STIX 1.1.1 content:

- pip install stix<1.2 - this will install python-stix 1.1.1.12

- pip install stix2-elevator

For STIX 1.2 content:

- pip install stix2-elevator - this will install python-stix 1.2.0.6

The most important changes in the new release are:

1.2.0 - 2018-09-10

ÂÂÂ * Close #41, #85, #87, #91, #114, #116, #117, #120, #121

ÂÂÂ * Handle delimited list in patterns
ÂÂÂ * Fix timestamps
ÂÂÂ * Added modified time to registry keys
ÂÂÂ * Handle Process object more robustly
ÂÂÂ * Handle Vulnerability more robustly
ÂÂÂ * Correctly handle renumbering of objects in ObservedData
ÂÂÂ * Correctly handle multi-part emails
ÂÂÂ * Added _hex to machine and characteristics property names for windows binary file in convert_pattern.py
ÂÂÂ * Handle HTTPSession(HTTPClientRequest), NetworkPacket(ICMP), NetworkSocket
ÂÂÂ * Handle non-String properties in convert_http_network_connection_extension
ÂÂÂ * Added tests for new objects
ÂÂÂ * Fix campaign alias
ÂÂÂ * Remove dns_query from stix conversion. Warn message instead.
ÂÂÂ * Register markings by object and id. Don't try to create markings from idref cases
ÂÂÂ * If markings have id re-use them instead of creating new id
ÂÂÂ * Added some messages to signal skipped markings.
ÂÂÂ * Make adjustments to handle UTF-8 content.
ÂÂÂ * Ignore case for STIX 1.x conditions
ÂÂÂ * Gracefully handle unexpected formatting in STIX 1.x IDs
ÂÂÂ * Make find_dir more efficient

Please enter an issue on Github for bugs and feature requests.

Contributions welcome.

Rich Piazza

Chris Lenk

Emmanuelle Vargas-Gonzalez

MITRE

[1] https://pypi.python.org/pypi/stix2-elevator/

[2] https://github.com/oasis-open/cti-stix-elevator.

[3] https://stix2-elevator.readthedocs.io/

cti message