Ejemplo n.º 1
0
def dedup_collections_pkg(o):
    dedup(coalesce(o.observables, 'observables'), idref_path='idref')
    dedup(coalesce(o, 'campaigns'), idref_path='idref')
    dedup(coalesce(o, 'courses_of_action'), idref_path='idref')
    dedup(coalesce(o, 'exploit_targets'), idref_path='idref')
    dedup(coalesce(o, 'incidents'), idref_path='idref')
    dedup(coalesce(o, 'indicators'), idref_path='idref')
    dedup(coalesce(o, 'threat_actors'), idref_path='idref')
    dedup(coalesce(o, 'ttps'), idref_path='idref')
    dedup(coalesce(o, 'related_packages'))
Ejemplo n.º 2
0
def dedup_collections_inc(o):
    dedup(coalesce(o, 'attributed_threat_actors'))
    dedup(coalesce(o, 'leveraged_ttps'))
    dedup(coalesce(o, 'related_incidents'))
    dedup(coalesce(o, 'related_indicators'))
    dedup(coalesce(o, 'related_observables'))
    dedup(coalesce(o, 'coa_taken'), idref_path='idref')
Ejemplo n.º 3
0
def dedup_collections_cam(o):
    dedup(coalesce(o, 'associated_campaigns'), idref_path='idref')
    dedup(coalesce(o, 'related_packages'))
    dedup(coalesce(o, 'related_incidents'))
    dedup(coalesce(o, 'related_indicators'))
    dedup(coalesce(o, 'related_ttps'))
    for at in coalesce(o, 'attribution'):
        dedup(at)
Ejemplo n.º 4
0
def dedup_collections_tgt(o):
    dedup(coalesce(o, 'potential_coas'))
    dedup(coalesce(o, 'related_packages'))
    dedup(coalesce(o, 'related_exploit_targets'))
Ejemplo n.º 5
0
def dedup_collections_act(o):
    dedup(coalesce(o, 'related_packages'))
    dedup(coalesce(o, 'associated_actors'))
    dedup(coalesce(o, 'associated_campaigns'))
    dedup(coalesce(o, 'observed_ttps'))
Ejemplo n.º 6
0
def dedup_collections_ttp(o):
    dedup(coalesce(o, 'exploit_targets'))
    dedup(coalesce(o, 'related_ttps'))
Ejemplo n.º 7
0
def dedup_collections_coa(o):
    dedup(coalesce(o, 'related_coas'))
    dedup(coalesce(o, 'related_packages'))
    dedup(coalesce(o.parameter_observables, 'observables'), idref_path='idref')
Ejemplo n.º 8
0
def dedup_collections_obs(o):
    if o.observable_composition is not None:
        dedup(coalesce(o.observable_composition, 'observables'),
              idref_path='idref')
Ejemplo n.º 9
0
def dedup_collections_ind(o):
    dedup(coalesce(o, 'composite_indicator_expression'), idref_path='idref')
    dedup(coalesce(o, 'indicated_ttps'))
    dedup(coalesce(o, 'related_indicators'))
    dedup(coalesce(o, 'suggested_coas'))
    dedup(coalesce(o, 'observables'))