def genObject_URI(data): from cybox.core.observable import Observables, Observable from cybox.utils import create_id as CyboxID from cybox.objects.uri_object import URI objURI = URI() objURI.idref = None objURI.properties = None objURI.related_objects = [] objURI.domain_specific_object_properties = None objURI.value = escape(unicode(data['url'])) objURI.value.condition = 'Equals' objURI.type_ = "URL" obsURI = Observable(objURI) obsURI.idref = None obsURI.object = None objURI = None obsURI.title = "URL: " + escape(unicode(data['url']))[:70] + "..." # sDscrpt = "URL: " + data['url'] + "| isOnline:" + data['online'] + "| dateVerified:" + data['verification_time'] # obsURI.description = "<![CDATA[" + sDscrpt + "]]>" # try: # obsURI.description = "URL: " + escape(unicode(data['url'])) + "| isOnline:" + data['online'] + "| dateVerified:" + data['verification_time'] # except: # obsURI.description = "URL: " + " --[URL Not Displayed - Due to encoding issue]-- " + "| isOnline:" + data['online'] + "| dateVerified:" + data['verification_time'] obsURI.description = "URL: " + escape(data['url']) + "| isOnline:" + data[ 'online'] + "| dateVerified:" + data['verification_time'] obsURI.event = None obsURI.observable_composition = None obsURI.sighting_count = 1 obsURI.observable_source = [] return (obsURI)
def create_observable(self, ce1sus_obs, event_permissions, user): identifier = 'ce1sus:Observable-{0}'.format(ce1sus_obs.uuid) cybox_observable = Observable() if identifier in self.seen_observables: # if I've seen the uuid then make a reference insead cybox_observable.idref = identifier else: self.seen_observables.append(identifier) cybox_observable.id_ = identifier cybox_observable.title = ce1sus_obs.title cybox_observable.description = ce1sus_obs.description if ce1sus_obs.object: cybox_obj = self.create_object(ce1sus_obs.object, event_permissions, user) cybox_observable.object_ = cybox_obj elif ce1sus_obs.observable_composition: cybox_obj_composition = self.create_composed_observable( ce1sus_obs.observable_composition, event_permissions, user) cybox_observable.observable_composition = cybox_obj_composition return cybox_observable