stix.ttp.malware_instance Module stix.ttp.malware_instance Classes MalwareInstance Functions add_extension Constants _EXTENSION_MAP