maec_to_stix.indicator_extractor.indicator_filter Module¶
- class maec_to_stix.indicator_extractor.indicator_filter.IndicatorFilter(config)¶
Bases: object
Used to filter Object History entries through contraindicator checking and required property checking. Also, used to prune any extraneous properties from an Object.
Parameters: config – The configuration structure. An instance of maec_to_stix.indicator_extractor.config_parser.ConfigParser. - prune_objects(candidate_indicator_objects)¶
Perform contraindicator and required property checking and prune un-wanted properties from the input list of candidate Indicator CybOX Objects.
Parameters: candidate_indicator_objects – a list of maec.bundle.object_history.ObjectHistoryEntry objects representing the initial list of CybOX Objects that may be used in the STIX Indicators. Returns: A list of maec.bundle.object_history.ObjectHistoryEntry objects representing the final list of checked and pruned CybOX Objects that will be used for the STIX Indicators.