A Python library for extracting Structured Threat Information Expression (STIX™) Indicators from Malware Attribute Enumeration and Characterization (MAEC™) data, and also wrapping MAEC data in STIX.
The maec-to-stix package provides APIs and scripts for wrapping MAEC Packages
in STIX, and also extracting STIX Indicators from dynamic analysis data captured
in MAEC. It is compatible with the latest versions of MAEC and STIX,
Use pip to install or upgrade maec-to-stix:
$ pip install maec-to-stix [--pre] [--upgrade]
For more information, see the Installation instructions.
The maec-to-stix library depends on the presence of certain packages/libraries to function. Please refer to their installation documentation for installation instructions.
- python-maec >=184.108.40.206 and <= 220.127.116.11
- python-stix >=18.104.22.168 and <= 22.214.171.124.
- python-cybox >=126.96.36.199 and <= 188.8.131.52.
Read the Getting Started guide.
The maec-to-stix repository has the following layout:
docs/- Used to build the documentation.
maec_to_stix/- The main maec-to-stix source.
examples/- Examples of maec-to-stix usage.
Releases of maec-to-stix are given
major.minor.patch version numbers and
follow semantic versioning guidelines.
BY USING MAEC-TO-STIX YOU SIGNIFY YOUR ACCEPTANCE OF THE TERMS AND CONDITIONS OF USE. IF YOU DO NOT AGREE TO THESE TERMS, DO NOT USE MAEC-TO-STIX.
For more information, please refer to the LICENSE.txt file