Skip to main content

An API for parsing and generating STIX content.

Project description


A python library for parsing, manipulating, and generating STIX v1.1.1 content.


|travis badge| |version badge| |downloads badge|

.. |travis badge| image::
:alt: Build Status
.. |version badge| image::
.. |downloads badge| image::


The python-stix library can be installed via the distutils script
included at the root directory:

$ python install

The python-stix library is also hosted on `PyPI
<>`_ and can be installed with `pip

$ pip install stix


The python-stix library depends on the presence of certain packages/libraries
to function. Please refer to their installation documentation for installation

- `python-cybox <>`_
- `lxml <>`_

Installation on Ubuntu 14.04 (and older)


$ sudo apt-get install python-dev python-pip libxml2-dev libxslt-dev zlib1g-dev
$ sudo pip install stix


Releases of the python-stix library will be given version numbers of the form
``major.minor.update.revision``, where ``major``, ``minor``, and ``update``
correspond to the STIX version being supported. The ``revision`` number is used
to indicate new versions of the python-stix library itself.


The python-stix package layout is as follows:

* ``stix/`` : root level package

* ``examples/`` : example python scripts that leverage the python-stix library

* ``stix/utils/`` : utility classes and modules used internally by the python-stix

* ``stix/bindings/`` : generateDS generated xml-to-python bindings (leveraged for
parsing and output of STIX XML content)

* ``stix/campaign/`` : APIs for STIX Campaign constructs

* ``stix/coa/`` : APIs for STIX Course Of Action constructs

* ``stix/core/`` : APIs for core STIX constructs (e.g., STIX Header, STIX Package)

* ``stix/common/`` : APIs for common STIX constructs (e.g., Structured Text,
Information Source)

* ``stix/exploit_target/`` : APIs for STIX Exploit Target constructs

* ``stix/incident/`` : APIs for common Incident constructs

* ``stix/indicator/`` : APIs for STIX Indicator constructs

* ``stix/extensions/`` : APIs for STIX extensions (e.g., CIQ Identity)

* ``stix/threat_actor/`` : APIs for STIX Threat Actor constructs

* ``stix/ttp/`` : APIs for STIX TTP constructs

Please refer to examples for concrete examples of how to interact with the
python-stix library

Project details

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distributions (331.1 kB view hashes)

Uploaded Source

stix- (213.0 kB view hashes)

Uploaded Source

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page