class Validity(cybox.Entity):
_binding = x509_certificate_binding
_binding_class = x509_certificate_binding.ValidityType
_namespace = 'http://cybox.mitre.org/objects#X509CertificateObject-2'
not_before = cybox.TypedField("Not_Before", DateTime)
not_after = cybox.TypedField("Not_After", DateTime)
class PEDataDirectoryStruct(cybox.Entity):
_binding = win_executable_file_binding
_binding_class = win_executable_file_binding.PEDataDirectoryStructType
_namespace = "http://cybox.mitre.org/objects#WinExecutableFileObject-2"
virtual_address = cybox.TypedField("Virtual_Address", HexBinary)
size = cybox.TypedField("Size", NonNegativeInteger)
class HTTPRequestHeader(cybox.Entity):
_binding = http_session_binding
_binding_class = http_session_binding.HTTPRequestHeaderType
_namespace = "http://cybox.mitre.org/objects#HTTPSessionObject-2"
raw_header = cybox.TypedField("Raw_Header", String)
parsed_header = cybox.TypedField("Parsed_Header", HTTPRequestHeaderFields)
class ActionArgument(cybox.Entity):
_binding = core_binding
_binding_class = core_binding.ActionArgumentType
_namespace = 'http://cybox.mitre.org/cybox-2'
argument_name = cybox.TypedField("Argument_Name", ArgumentName)
argument_value = cybox.TypedField("Argument_Value")
class Volume(cybox.EntityList):
_binding = win_prefetch_binding
_binding_class = win_prefetch_binding.VolumeType
_namespace = "http://cybox.mitre.org/objects#WinPrefetchObject-2"
volumeitem = cybox.TypedField("VolumeItem", WinVolume)
deviceitem = cybox.TypedField("DeviceItem", Device)
class IComHandlerAction(cybox.Entity):
_binding = win_task_binding
_binding_class = win_task_binding.IComHandlerActionType
_namespace = 'http://cybox.mitre.org/objects#WinTaskObject-2'
com_data = cybox.TypedField("COM_Data", String)
com_class_id = cybox.TypedField("COM_Class_ID", String)
class EPJumpCode(cybox.Entity):
_binding = file_binding
_binding_class = file_binding.EPJumpCodeType
_namespace = 'http://cybox.mitre.org/objects#FileObject-2'
depth = cybox.TypedField("Depth", Integer)
opcodes = cybox.TypedField("Opcodes", String)
class FragmentationRequired(cybox.Entity):
_binding = network_packet_binding
_binding_class = network_packet_binding.FragmentationRequiredType
_namespace = "http://cybox.mitre.org/objects#PacketObject-2"
fragmentation_required = cybox.TypedField("Fragmentation_Required")
next_hop_mtu = cybox.TypedField("Next_Hop_MTU", HexBinary)
class ICMPv4ErrorMessageContent(cybox.Entity):
_binding = network_packet_binding
_binding_class = network_packet_binding.ICMPv4ErrorMessageContentType
_namespace = "http://cybox.mitre.org/objects#PacketObject-2"
ip_header = cybox.TypedField("IP_Header", IPv4Header)
first_eight_bytes = cybox.TypedField("First_Eight_Bytes", HexBinary)
class NDPRedirectedHeader(cybox.Entity):
_binding = network_packet_binding
_binding_class = network_packet_binding.NDPRedirectedHeaderType
_namespace = "http://cybox.mitre.org/objects#PacketObject-2"
length = cybox.TypedField("Length", Integer)
ipheader_and_data = cybox.TypedField("IPHeader_And_Data", HexBinary)
class IPv4Packet(cybox.Entity):
_binding = network_packet_binding
_binding_class = network_packet_binding.IPv4PacketType
_namespace = "http://cybox.mitre.org/objects#PacketObject-2"
ipv4_header = cybox.TypedField("IPv4_Header", IPv4Header)
data = cybox.TypedField("Data", HexBinary)
class NeighborSolicitation(cybox.Entity):
_binding = network_packet_binding
_binding_class = network_packet_binding.NeighborSolicitationType
_namespace = "http://cybox.mitre.org/objects#PacketObject-2"
target_ipv6_addr = cybox.TypedField("Target_IPv6_Addr", Address)
options = cybox.TypedField("Options", NeighborSolicitationOptions)
class NDPMTU(cybox.Entity):
_binding = network_packet_binding
_binding_class = network_packet_binding.NDPMTUType
_namespace = "http://cybox.mitre.org/objects#PacketObject-2"
length = cybox.TypedField("Length", Integer)
mtu = cybox.TypedField("MTU", Integer)
class X509CertificateSignature(cybox.Entity):
_binding = x509_certificate_binding
_binding_class = x509_certificate_binding.X509CertificateSignatureType
_namespace = 'http://cybox.mitre.org/objects#X509CertificateObject-2'
signature_algorithm = cybox.TypedField("Signature_Algorithm", String)
signature = cybox.TypedField("Signature", String)
class Kerberos(cybox.Entity):
_binding = account_binding
_binding_class = account_binding.KerberosType
_namespace = 'http://cybox.mitre.org/objects#WinComputerAccountObject-2'
delegation = cybox.TypedField("Delegation", KerberosDelegation)
ticket = cybox.TypedField("Ticket", UnsignedLong)
class ICMPv4AddressMaskReply(cybox.Entity):
_binding = network_packet_binding
_binding_class = network_packet_binding.ICMPv4AddressMaskReplyType
_namespace = "http://cybox.mitre.org/objects#PacketObject-2"
address_mask_reply = cybox.TypedField("Address_Mask_Reply")
address_mask = cybox.TypedField("Address_Mask", Address)
class Layer7Connections(cybox.Entity):
_binding = network_connection_binding
_binding_class = network_connection_binding.Layer7ConnectionsType
_namespace = "http://cybox.mitre.org/objects#NetworkConnectionObject-2"
http_session = cybox.TypedField("HTTP_Session", HTTPSession)
dns_query = cybox.TypedField("DNS_Query", DNSQuery, multiple=True)
class Fragment(cybox.Entity):
_binding = network_packet_binding
_binding_class = network_packet_binding.FragmentType
_namespace = "http://cybox.mitre.org/objects#PacketObject-2"
fragment_header = cybox.TypedField("Fragment_Header", FragmentHeader)
fragment = cybox.TypedField("Fragment", HexBinary)
class IShowMessageAction(cybox.Entity):
_binding = win_task_binding
_binding_class = win_task_binding.IShowMessageActionType
_namespace = 'http://cybox.mitre.org/objects#WinTaskObject-2'
show_message_body = cybox.TypedField("Show_Message_Body", String)
show_message_title = cybox.TypedField("Show_Message_Title", String)
class ICMPv6PacketTooBig(cybox.Entity):
_binding = network_packet_binding
_binding_class = network_packet_binding.ICMPv6PacketTooBigType
_namespace = "http://cybox.mitre.org/objects#PacketObject-2"
packet_too_big = cybox.TypedField("Packet_Too_Big")
mtu = cybox.TypedField("MTU", HexBinary)
class EntryPointSignature(cybox.Entity):
_binding = file_binding
_binding_class = file_binding.EntryPointSignatureType
_namespace = 'http://cybox.mitre.org/objects#FileObject-2'
name = cybox.TypedField("Name", String)
type_ = cybox.TypedField("Type", String)
class UDP(cybox.Entity):
_binding = network_packet_binding
_binding_class = network_packet_binding.UDPType
_namespace = "http://cybox.mitre.org/objects#PacketObject-2"
udp_header = cybox.TypedField("UDP_Header", UDPHeader)
data = cybox.TypedField("Data", DataSegment)
class URI(ObjectProperties):
_binding = uri_binding
_binding_class = uri_binding.URIObjectType
_namespace = 'http://cybox.mitre.org/objects#URIObject-2'
_XSI_NS = 'URIObj'
_XSI_TYPE = "URIObjectType"
TYPE_URL = "URL"
TYPE_GENERAL = "General URN"
TYPE_DOMAIN = "Domain Name"
TYPES = (TYPE_URL, TYPE_GENERAL, TYPE_DOMAIN)
value = cybox.TypedField("Value", AnyURI)
type_ = cybox.TypedField("type_", key_name="type")
def __init__(self, value=None, type_=None):
super(URI, self).__init__()
self.value = value
self.type_ = type_
def __str__(self):
return self.__unicode__().encode("utf-8")
def __unicode__(self):
return unicode(self.value)
class TransportLayer(cybox.Entity):
_binding = network_packet_binding
_binding_class = network_packet_binding.TransportLayerType
_namespace = "http://cybox.mitre.org/objects#PacketObject-2"
tcp = cybox.TypedField("TCP", TCP)
udp = cybox.TypedField("UDP", UDP)
class DateRange(cybox.Entity):
_binding = common_binding
_binding_class = common_binding.DateRangeType
_namespace = 'http://cybox.mitre.org/common-2'
start_date = cybox.TypedField("Start_Date", DateWithPrecision)
end_date = cybox.TypedField("End_Date", DateWithPrecision)
class FullyQualifiedName(cybox.Entity):
_binding = account_binding
_binding_class = account_binding.FullyQualifiedNameType
_namespace = 'http://cybox.mitre.org/objects#WinComputerAccountObject-2'
netbeui_name = cybox.TypedField("NetBEUI_Name", String)
full_name = cybox.TypedField("Full_Name", String)
class HostField(cybox.Entity):
_binding = http_session_binding
_binding_class = http_session_binding.HostFieldType
_namespace = "http://cybox.mitre.org/objects#HTTPSessionObject-2"
domain_name = cybox.TypedField("Domain_Name", URI)
port = cybox.TypedField("Port", Port)
class KerberosDelegation(cybox.Entity):
_binding = account_binding
_binding_class = account_binding.KerberosDelegationType
_namespace = 'http://cybox.mitre.org/objects#WinComputerAccountObject-2'
bitmask = cybox.TypedField("Bitmask", HexBinary)
service = cybox.TypedField("Service", KerberosService)
class HTTPMessage(cybox.Entity):
_binding = http_session_binding
_binding_class = http_session_binding.HTTPMessageType
_namespace = "http://cybox.mitre.org/objects#HTTPSessionObject-2"
length = cybox.TypedField("Length", PositiveInteger)
message_body = cybox.TypedField("Message_Body", String)
class SubjectPublicKey(cybox.Entity):
_binding = x509_certificate_binding
_binding_class = x509_certificate_binding.SubjectPublicKeyType
_namespace = 'http://cybox.mitre.org/objects#X509CertificateObject-2'
public_key_algorithm = cybox.TypedField("Public_Key_Algorithm", String)
rsa_public_key = cybox.TypedField("RSA_Public_Key", RSAPublicKey)
