maec_to_stix.indicator_extractor Module¶
- class maec_to_stix.indicator_extractor.IndicatorExtractor(maec_package, file_name=None, config_directory=None)¶
Bases: object
Used to extract STIX Indicators from a MAEC Package.
- stix_package¶
the output STIX Package (with Indicators). An instance of the stix.STIXPackage class.
Parameters: - maec_package – the input MAEC Package, an instance of the maec.package.package.Package class.
- file_name – the name of the file that contained the MAEC Package. Optional.
- config_directory – the path to the directory where the JSON configuration files can be found. Optional.
- extract()¶
Attempt to extract STIX Indicators from the provided MAEC Package using the specified configuration.
Returns: If indicators were extracted, a stix.STIXPackage instance with the extracted STIX Indicators. Otherwise, if no indicators were extracted, None.
- exception maec_to_stix.indicator_extractor.UnsupportedMAECEntityException¶
Bases: exceptions.Exception
Basic exception for throwing when an unsupported MAEC document type is encountered.