Firepit - STIX Columnar Storage
Columnar storage for STIX 2.0 observations.
Free software: Apache Software License 2.0
Documentation: https://firepit.readthedocs.io.
Features
Transforms STIX Observation SDOs to a columnar format
Inserts those transformed observations into SQL (currently sqlite3 and PostgreSQL)
Motivation
STIX 2.0 JSON is a graph-like data format. There aren’t many popular tools for working with graph-like data, but there are numerous tools for working with data from SQL databases. Firepit attempts to make those tools usable with STIX data obtained from stix-shifter.
Firepit also supports STIX 2.1
Firepit is primarily designed for use with the Kestrel Threat Hunting Language.
Credits
This package was created with Cookiecutter and the audreyr/cookiecutter-pypackage project template.
History
2.3.0 (2022-06-15)
Added query.BinnedColumn so you can group by time buckets
2.2.0 (2022-06-08)
Better STIX extension property support - Add a new __columns “private” table to store mapping from object path to column name - New path/prop metadata functions to supply metadata about STIX properties
Improved STIX process “deterministic” id generation - Use a unique ID from extension properties, if found - Use related x-oca-asset hostname or ID if available
2.1.0 (2022-05-18)
Add splint convert command to convert some logs files to STIX bundles
2.0.0 (2022-04-01)
Use a “normalized” SQL database
Initial STIX 2.1 support
1.3.0 (2021-10-04)
New assign_query API, minor query API improvements
new way to create views via assign_query
can now init a Query with a list instead of calling append
Some SQL injection protection in query classes
1.2.0 (2021-08-18)
Better support for grouped data
1.1.0 (2021-07-18)
First stable release
Concurrency fixes in cache()
1.0.0 (2021-05-18)
First release on PyPI.
Release files for firepit 2.3.35
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| firepit-2.3.35.tar.gz | 287.8 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| firepit-2.3.35-py2.py3-none-any.whl | Python 3, Python 2 | none | any | Details |
Total release size: 380.3 kB
Release files / firepit-2.3.35.tar.gz
| Download URL | firepit-2.3.35.tar.gz |
|---|---|
| Size | 287.8 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
ba47f38b1b3f0d549355affe88752d3cdcb4c4e18d3cd0d23348112037024643
|
|
BLAKE2b-256 checksum How to use checksums |
051c1c6a8df409d81d516a21f29a2d9195caf3839207b1b6ede2e1f3ede5b3c8
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/3.4.1 importlib_metadata/7.0.1 pkginfo/1.7.0 requests/2.31.0 requests-toolbelt/0.10.1 tqdm/4.61.1 CPython/3.9.2
|
Release files / firepit-2.3.35-py2.py3-none-any.whl
| Download URL | firepit-2.3.35-py2.py3-none-any.whl |
|---|---|
| Size | 92.5 kB |
| Tags | Python 2 Python 3 |
|
SHA-256 checksum How to use checksums |
3d21717b7af6ba57e43c9776be04d9a52da021d3e015c2ccef41c97e506f96a9
|
|
BLAKE2b-256 checksum How to use checksums |
488cfecef665bdcc093ff779df3e6846bd34f6bead3749f0922b9fd78e819353
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/3.4.1 importlib_metadata/7.0.1 pkginfo/1.7.0 requests/2.31.0 requests-toolbelt/0.10.1 tqdm/4.61.1 CPython/3.9.2
|
