Using the STIX 1 Indicator/Observable Parsers

The STIXPackage is usually created by the from_xml class method.

For more information, see python-stix Getting Started.

from cbc_importer.stix_parsers.v1.parser import STIX1Parser

from cbc_sdk import CBCloudAPI
from stix.core import STIXPackage


cbcsdk = CBCloudAPI(profile="default")
stix_parser = STIX1Parser(cbcsdk)
stix_package = STIXPackage(...).from_xml(...)

indicators = stix_package.indicators
observables = stix_package.observables

stix_parser._parse_stix_indicators(indicators)
stix_parser._parse_stix_observables(observables)

iocs = stix_parser.iocs