Skip to main content

An EDH marking extension API for python-stix.

Project description

Build_Status Version

An extension to python-stix supporting STIX Data Markings for the Enhance Shared Situational Awareness (ESSA) Initiative’s Information Sharing Architecture (ISA) Access Control Specification (ACS), which are based on the US Intelligence Community’s Enterprise Data Header (EDH) specification.

About the version numbers

stix-edh supports version 2.0 of the ISA Marking extensions for STIX, published January 19, 2016:

These schemas use version 3.0 of the Smart Data EDH Cyber Profile, and correspond to ACS Version 3.0.

NOTE: stix-edh does not currently support version 1.0 of the ISA Marking extensions (published February 26, 2015), which use the schemas below. Version 1.0 of the ISA Marking extensions use version 2.0 of the Smart Data EDH Cyber Profile, and corresponds to ACS Version 2.0.

The stix-edh library itself uses semantic versioning, and the version numbers are unrelated to the versions of EDH, ACS, or ISA.


To parse XML using with EDH data markings, just import stix_edh after import stix.

import stix
import stix_edh  # automatically registers extensions with python-stix

# Go on to parse your stix package
from stix.core import STIXPackage
package = STIXPackage.from_xml('stix.xml')

To create data markings, create an instance of stix_edh.ISAMarkings or stix_edh.ISAMarkingsAssertions, and add it to a MarkingSpecification object as a MarkingStructure. See examples/ in the source repository for more information.


  • Python 3.7+

  • python-stix

    • for STIX 1.1.1: >= and <

    • for STIX 1.2: >=

  • mixbox > 1.0.5


This software was produced for the U. S. Government, and is subject to the Rights in Data-General Clause 52.227-14, Alt. IV (DEC 2007).

Copyright (c) 2017, The MITRE Corporation. All Rights Reserved.

Project details

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distributions

No source distribution files available for this release.See tutorial on generating distribution archives.

Built Distribution

stix_edh-1.0.3-py2.py3-none-any.whl (27.2 kB view hashes)

Uploaded Python 2 Python 3

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page