maec_to_stix.indicator_extractor.indicator_filter Module

class maec_to_stix.indicator_extractor.indicator_filter.IndicatorFilter(config)

Bases: object

Used to filter Object History entries through contraindicator checking and required property checking. Also, used to prune any extraneous properties from an Object.

Parameters:config – The configuration structure. An instance of maec_to_stix.indicator_extractor.config_parser.ConfigParser.
prune_objects(candidate_indicator_objects)

Perform contraindicator and required property checking and prune un-wanted properties from the input list of candidate Indicator CybOX Objects.

Parameters:candidate_indicator_objects – a list of maec.bundle.object_history.ObjectHistoryEntry objects representing the initial list of CybOX Objects that may be used in the STIX Indicators.
Returns:A list of maec.bundle.object_history.ObjectHistoryEntry objects representing the final list of checked and pruned CybOX Objects that will be used for the STIX Indicators.