Skip to main content
This is a pre-production deployment of Warehouse. Changes made here affect the production instance of PyPI (
Help us improve Python packaging - Donate today!

An API for parsing and creating MAEC content.

Project Description

A Python library for parsing, manipulating, and generating Malware Attribute Enumeration and Characterization (MAEC™) content.



A primary goal of the python-maec library is to remain faithful to both the MAEC standard and to customary Python practices. There are places where these will conflict, and the goal is to make the library intuitive both to those familiar with the XML schemas (but less familiar with Python) and also to experienced Python developers who want to add MAEC support to their programs.

There are currently two levels of APIs for dealing with MAEC content:

  • A low-level API is provided by auto-generated XML Schema - Python class bindings. These bindings were generated using generateDS. With these, any MAEC content can be parsed from or written to XML, but requires a bit more knowledge of the actual MAEC schemas. These “binding classes” are all located in the maec.bindings package.
  • A higher-level API consisting of manually designed Python classes. These “native classes” are intended to behave more like Python programmers would expect. As they are designed manually, they currently do not support the entire MAEC standard, but rather those object types we expect are used most frequently. These “native classes” also support exporting their content as Python dictionaries and lists, which can easily be converted to JSON. Importing from JSON is also supported.


The python-maec library is tested and written against python 2.6, 2.7, and 3.3+. Compatibility with other python versions is neither guaranteed nor implied.


Releases of the python-maec library will be given version numbers of the form major.minor.update.revision, where major, minor, and update correspond to the MAEC version being supported. The revision number is used to indicate new versions of the python-maec library itself.


The python-maec library can be installed via the distutils script included at the root directory:

$ python install

The python-maec library is also hosted on PyPI and can be installed with pip:

$ pip install maec


The maec package depends on the following Python libraries:

  • lxml
  • python-cybox
  • setuptools (only if installing using

For Windows installers of the above libraries, we recommend looking here: python-cybox can be found at

To build lxml on Ubuntu, you will need the following packages from the Ubuntu package repository:

  • python-dev
  • libxml2-dev
  • libxslt1-dev
  • zlib1g-dev

For more information about installing lxml, see


Bug reports and feature requests are welcome and encouraged. Pull requests are especially appreciated. Feel free to use the issue tracker on GitHub, join the MAEC Community Email Discussion List, or send an email directly to

Release History

This version
History Node


Download Files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

File Name & Hash SHA256 Hash Help Version File Type Upload Date
(134.4 kB) Copy SHA256 Hash SHA256
py2.py3 Wheel Nov 17, 2016
(150.6 kB) Copy SHA256 Hash SHA256
Source Nov 17, 2016
(196.9 kB) Copy SHA256 Hash SHA256
Source Nov 17, 2016

Supported By

WebFaction WebFaction Technical Writing Elastic Elastic Search Pingdom Pingdom Monitoring Dyn Dyn DNS Sentry Sentry Error Logging CloudAMQP CloudAMQP RabbitMQ Heroku Heroku PaaS Kabu Creative Kabu Creative UX & Design Fastly Fastly CDN DigiCert DigiCert EV Certificate Rackspace Rackspace Cloud Servers DreamHost DreamHost Log Hosting