def from_dict(cls, d, return_obj=None):
if not d:
return None
import stix.extensions.structured_coa.generic_structured_coa # noqa
if not return_obj:
klass = stix.lookup_extension(d.get('xsi:type'))
return_obj = klass.from_dict(d)
else:
return_obj.id_ = d.get('id')
return_obj.idref = d.get('idref')
return return_obj
def from_dict(cls, d, return_obj=None):
if not d:
return None
import stix.extensions.structured_coa.generic_structured_coa # noqa
if not return_obj:
klass = stix.lookup_extension(d.get('xsi:type'))
return_obj = klass.from_dict(d)
else:
return_obj.id_ = d.get('id')
return_obj.idref = d.get('idref')
return return_obj
def from_obj(cls, obj, return_obj=None):
if not obj:
return None
# Registers the class extension
import stix.extensions.structured_coa.generic_structured_coa # noqa
if not return_obj:
klass = stix.lookup_extension(obj)
return_obj = klass.from_obj(obj)
else:
return_obj.id_ = obj.id
return_obj.idref = obj.idref
return return_obj
def from_obj(cls, obj, return_obj=None):
if not obj:
return None
# Registers the class extension
import stix.extensions.structured_coa.generic_structured_coa # noqa
if not return_obj:
klass = stix.lookup_extension(obj)
return_obj = klass.from_obj(obj)
else:
return_obj.id_ = obj.id
return_obj.idref = obj.idref
return return_obj
def from_obj(cls, obj, return_obj=None):
import stix.extensions.identity.ciq_identity_3_0 # noqa
if not obj:
return None
if not return_obj:
klass = stix.lookup_extension(obj, default=cls)
return_obj = klass.from_obj(obj, return_obj=klass())
else:
return_obj.id_ = obj.id
return_obj.idref = obj.idref
return_obj.name = obj.Name
return_obj.related_identities = \
RelatedIdentities.from_obj(obj.Related_Identities)
return return_obj
def from_obj(cls, obj, return_obj=None):
import stix.extensions.identity.ciq_identity_3_0 # noqa
if not obj:
return None
if not return_obj:
klass = stix.lookup_extension(obj, default=cls)
return_obj = klass.from_obj(obj, return_obj=klass())
else:
return_obj.id_ = obj.id
return_obj.idref = obj.idref
return_obj.name = obj.Name
return_obj.related_identities = \
RelatedIdentities.from_obj(obj.Related_Identities)
return return_obj
def from_obj(cls, obj, return_obj=None):
import stix.extensions.malware.maec_4_1_malware # noqa
if not obj:
return None
if not return_obj:
klass = stix.lookup_extension(obj, default=cls)
return_obj = klass.from_obj(obj, klass())
else:
return_obj.id_ = obj.id
return_obj.title = obj.Title
return_obj.descriptions = StructuredTextList.from_obj(obj.Description)
return_obj.short_descriptions = StructuredTextList.from_obj(obj.Short_Description)
return_obj.names = MalwareNames.from_obj(obj.Name)
return_obj.types = MalwareTypes.from_obj(obj.Type)
return return_obj
def from_dict(cls, dict_repr, return_obj=None):
import stix.extensions.identity.ciq_identity_3_0 # noqa
if not dict_repr:
return None
get = dict_repr.get
if not return_obj:
klass = stix.lookup_extension(get('xsi:type'), default=cls)
return_obj = klass.from_dict(dict_repr, klass())
else:
return_obj.name = get('name')
return_obj.id_ = get('id')
return_obj.idref = get('idref')
return_obj.related_identities = \
RelatedIdentities.from_dict(get('related_identities'))
return return_obj
def from_dict(cls, dict_repr, return_obj=None):
import stix.extensions.identity.ciq_identity_3_0 # noqa
if not dict_repr:
return None
get = dict_repr.get
if not return_obj:
klass = stix.lookup_extension(get('xsi:type'), default=cls)
return_obj = klass.from_dict(dict_repr, klass())
else:
return_obj.name = get('name')
return_obj.id_ = get('id')
return_obj.idref = get('idref')
return_obj.related_identities = \
RelatedIdentities.from_dict(get('related_identities'))
return return_obj
def from_dict(cls, d, return_obj=None):
if not d:
return None
import stix.extensions.test_mechanism.snort_test_mechanism # noqa
import stix.extensions.test_mechanism.open_ioc_2010_test_mechanism # noqa
import stix.extensions.test_mechanism.yara_test_mechanism # noqa
import stix.extensions.test_mechanism.generic_test_mechanism # noqa
if not return_obj:
klass = stix.lookup_extension(d.get('xsi:type'))
return_obj = klass.from_dict(d)
else:
return_obj.id_ = d.get('id')
return_obj.idref = d.get('idref')
return_obj.efficacy = Statement.from_dict(d.get('efficacy'))
return_obj.producer = InformationSource.from_dict(d.get('producer'))
return return_obj
def from_obj(cls, obj, return_obj=None):
if not obj:
return None
import stix.extensions.test_mechanism.snort_test_mechanism # noqa
import stix.extensions.test_mechanism.open_ioc_2010_test_mechanism # noqa
import stix.extensions.test_mechanism.yara_test_mechanism # noqa
import stix.extensions.test_mechanism.generic_test_mechanism # noqa
if not return_obj:
klass = stix.lookup_extension(obj)
return_obj = klass.from_obj(obj)
else:
return_obj.id_ = obj.id
return_obj.idref = obj.idref
return_obj.efficacy = Statement.from_obj(obj.Efficacy)
return_obj.producer = InformationSource.from_obj(obj.Producer)
return return_obj
def from_obj(cls, obj, return_obj=None):
if not obj:
return None
import stix.extensions.test_mechanism.snort_test_mechanism # noqa
import stix.extensions.test_mechanism.open_ioc_2010_test_mechanism # noqa
import stix.extensions.test_mechanism.yara_test_mechanism # noqa
import stix.extensions.test_mechanism.generic_test_mechanism # noqa
if not return_obj:
klass = stix.lookup_extension(obj)
return_obj = klass.from_obj(obj)
else:
return_obj.id_ = obj.id
return_obj.idref = obj.idref
return_obj.efficacy = Statement.from_obj(obj.Efficacy)
return_obj.producer = InformationSource.from_obj(obj.Producer)
return return_obj
def from_obj(cls, obj, return_obj=None):
import stix.extensions.marking.tlp # noqa
import stix.extensions.marking.simple_marking # noqa
import stix.extensions.marking.terms_of_use_marking # noqa
if not obj:
return None
if return_obj:
m = return_obj
m.id_ = obj.id
m.idref = obj.idref
m.marking_model_name = obj.marking_model_name
m.marking_model_ref = obj.marking_model_ref
else:
klass = stix.lookup_extension(obj, default=cls)
m = klass.from_obj(obj, return_obj=klass())
return m
def from_obj(cls, obj, return_obj=None):
import stix.extensions.malware.maec_4_1_malware # noqa
if not obj:
return None
if not return_obj:
klass = stix.lookup_extension(obj, default=cls)
return_obj = klass.from_obj(obj, klass())
else:
return_obj.id_ = obj.id
return_obj.title = obj.Title
return_obj.descriptions = StructuredTextList.from_obj(
obj.Description)
return_obj.short_descriptions = StructuredTextList.from_obj(
obj.Short_Description)
return_obj.names = MalwareNames.from_obj(obj.Name)
return_obj.types = MalwareTypes.from_obj(obj.Type)
return return_obj
def from_dict(cls, dict_repr, return_obj=None):
from stix.extensions.malware import maec_4_1_malware # noqa
if not dict_repr:
return None
get = dict_repr.get
if not return_obj:
klass = stix.lookup_extension(get('xsi:type'), cls)
return_obj = klass.from_dict(dict_repr, klass())
else:
return_obj.id_ = get('id')
return_obj.title = get('title')
return_obj.descriptions = StructuredTextList.from_dict(get('description'))
return_obj.short_descriptions = StructuredTextList.from_dict(get('short_description'))
return_obj.names = MalwareNames.from_dict(get('names'))
return_obj.types = MalwareTypes.from_dict(get('types'))
return return_obj
def from_dict(cls, d, return_obj=None):
if not d:
return None
import stix.extensions.test_mechanism.snort_test_mechanism # noqa
import stix.extensions.test_mechanism.open_ioc_2010_test_mechanism # noqa
import stix.extensions.test_mechanism.yara_test_mechanism # noqa
import stix.extensions.test_mechanism.generic_test_mechanism # noqa
if not return_obj:
klass = stix.lookup_extension(d.get('xsi:type'))
return_obj = klass.from_dict(d)
else:
return_obj.id_ = d.get('id')
return_obj.idref = d.get('idref')
return_obj.efficacy = Statement.from_dict(d.get('efficacy'))
return_obj.producer = InformationSource.from_dict(
d.get('producer'))
return return_obj
def from_dict(cls, d, return_obj=None):
import stix.extensions.marking.tlp # noqa
import stix.extensions.marking.simple_marking # noqa
import stix.extensions.marking.terms_of_use_marking # noqa
if not d:
return None
get = d.get
if return_obj is not None:
m = return_obj
m.id_ = get('id')
m.idref = get('idref')
m.marking_model_name = get('marking_model_name')
m.marking_model_ref = get('marking_model_ref')
else:
klass = stix.lookup_extension(get('xsi:type'), default=cls)
m = klass.from_dict(d, return_obj=klass())
return m
def from_dict(cls, dict_repr, return_obj=None):
from stix.extensions.malware import maec_4_1_malware # noqa
if not dict_repr:
return None
get = dict_repr.get
if not return_obj:
klass = stix.lookup_extension(get('xsi:type'), cls)
return_obj = klass.from_dict(dict_repr, klass())
else:
return_obj.id_ = get('id')
return_obj.title = get('title')
return_obj.descriptions = StructuredTextList.from_dict(
get('description'))
return_obj.short_descriptions = StructuredTextList.from_dict(
get('short_description'))
return_obj.names = MalwareNames.from_dict(get('names'))
return_obj.types = MalwareTypes.from_dict(get('types'))
return return_obj
def lookup_class(xsi_type):
if not xsi_type:
raise ValueError("xsi:type is required")
return stix.lookup_extension(xsi_type)
def lookup_class(xsi_type):
return stix.lookup_extension(xsi_type, default=MarkingStructure)
def entity_class(cls, key):
import stix.extensions.marking.tlp # noqa
import stix.extensions.marking.simple_marking # noqa
import stix.extensions.marking.terms_of_use_marking # noqa
return stix.lookup_extension(key, default=MarkingStructure)
def lookup_class(xsi_type):
return stix.lookup_extension(xsi_type, default=MarkingStructure)
def entity_class(cls, key):
import stix.extensions.structured_coa.generic_structured_coa # noqa
return stix.lookup_extension(key)
def entity_class(cls, key):
import stix.extensions.structured_coa.generic_structured_coa # noqa
return stix.lookup_extension(key)
def lookup_class(xsi_type):
return stix.lookup_extension(xsi_type, default=Identity)
def lookup_class(xsi_type):
if not xsi_type:
raise ValueError("xsi:type is required")
return stix.lookup_extension(xsi_type)
def entity_class(cls, key):
from stix.extensions.malware.maec_4_1_malware import MAECInstance # noqa
return stix.lookup_extension(key, default=MalwareInstance)
def entity_class(cls, key):
return stix.lookup_extension(key, default=MalwareInstance)
def lookup_class(xsi_type):
if not xsi_type:
return MarkingStructure
return stix.lookup_extension(xsi_type)
def lookup_class(xsi_type):
try:
return stix.lookup_extension(xsi_type, default=VocabString)
except ValueError:
return VocabString
def entity_class(cls, key):
from stix.extensions.malware.maec_4_1_malware import MAECInstance # noqa
return stix.lookup_extension(key, default=MalwareInstance)
def entity_class(cls, key):
import stix.extensions.identity.ciq_identity_3_0 # noqa
return stix.lookup_extension(key, default=Identity)
def entity_class(self, key):
import stix.extensions.test_mechanism.snort_test_mechanism # noqa
import stix.extensions.test_mechanism.open_ioc_2010_test_mechanism # noqa
import stix.extensions.test_mechanism.yara_test_mechanism # noqa
import stix.extensions.test_mechanism.generic_test_mechanism # noqa
return stix.lookup_extension(key)
def entity_class(cls, key):
try:
return stix.lookup_extension(key, default=VocabString)
except ValueError:
return VocabString
def entity_class(cls, key):
import stix.extensions.marking.tlp # noqa
import stix.extensions.marking.simple_marking # noqa
import stix.extensions.marking.terms_of_use_marking # noqa
return stix.lookup_extension(key, default=MarkingStructure)
def lookup_class(xsi_type):
try:
return stix.lookup_extension(xsi_type, default=VocabString)
except ValueError:
return VocabString
def entity_class(self, key):
import stix.extensions.test_mechanism.snort_test_mechanism # noqa
import stix.extensions.test_mechanism.open_ioc_2010_test_mechanism # noqa
import stix.extensions.test_mechanism.yara_test_mechanism # noqa
import stix.extensions.test_mechanism.generic_test_mechanism # noqa
return stix.lookup_extension(key)
