1 file was added to this release more than 14 days after its initial publication. Inspect the release files before installing.
ioc_writer
The source code in this package is made available under the terms of the Apache License , Version 2.0. See the “LICENSE “ file for more information.
Status
Purpose
Provide a python library that allows for basic creation and editing of OpenIOC objects. It supports a basic CRUD (Create, Read, Update, Delete) for various items:
item |
Create |
Read |
Update |
Delete |
|---|---|---|---|---|
IOC name |
Yes |
No |
Yes |
Yes |
IOC description |
Yes |
No |
Yes |
Yes |
created date |
Yes |
No |
Yes |
N/A |
last modified date |
Yes |
No |
Yes |
N/A |
published date |
Yes |
No |
Yes |
N/A |
link metadata |
Yes |
No |
Yes |
Yes |
IndicatorItem nodes |
Yes |
No |
NotYet |
Yes |
Indicator nodes |
Yes |
No |
NotYet |
Yes |
Parameters |
Yes |
No |
Yes |
Yes |
Items do not have built in Read operations, since all items can be accesed with built in ElementTree syntax or the use of XPATH to select portions of the IOC.
No decision has been made about whether or not to support changing of existing Indicator/IndicatorItem nodes.
See the Docs located at https://pythonhosted.org/ioc_writer/ and the examples directory for examples of working with the library. The user code should avoid having to call functionality in ioc_writer.ioc_et.
Requirements
The python “lxml” library must be installed. This can be obtained from https://pypi.python.org/pypi/lxml
Installation
See the file named “INSTALL” for instructions on installing this library locally.
Examples
Example code lives in the examples folder of the repository.
examples/11_to_10_downgrade Script to downgrade OpenIOC 1.1 to OpenIOC 1.1.
examples/openioc_to_yara Scripts that support encapsulating YARA signatures in OpenIOC 1.1 format.
examples/simple_ioc_writer Script that consumes a csv of data to build an IOC. this csv contains the content, context, et cetera. An example CSV is provided.
Bug reports / questions / feedback / feature requests
william.gibb at fireeye dot com
2 maintainers
Metadata
2 maintainers
Release files for ioc_writer 0.3.3
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
File added late
1 file was uploaded more than 14 days after the first file in this release.
While project maintainers occasionally add legitimate files to an existing release, late additions can also indicate a security compromise.
We recommend inspecting the release files before installing.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| ioc_writer-0.3.3.tar.gz | 26.4 kB | Details |
Release files / ioc_writer-0.3.3.tar.gz
File added late
This file was uploaded more than 14 days after the first file in this release.
While project maintainers occasionally add legitimate files to an existing release, late additions can also indicate a security compromise.
We recommend inspecting the release file before installing.
| Download URL | ioc_writer-0.3.3.tar.gz |
|---|---|
| Size | 26.4 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
483ebee2134c8d1b09529feb1d596f343c8978a957def01baf5bba5ef601be3d
|
|
BLAKE2b-256 checksum How to use checksums |
fd489ffdaa8d37de7a207a15330095abf8bab5ba5c46463dc504c8ceb0826562
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
