CreateIndicatorsFromSTIX

Creates indicators from the submitted STIX file. Supports STIX 1.0 and STIX 2.x. This automation creates indicators and adds an indicator's relationships if available.

python · Common Scripts

Details

ID	`CreateIndicatorsFromSTIX`
Language	python
From Version	5.0.0
Docker Image	`demisto/python3:3.12.13.10404775`
Tags	stix ioc

README

Creates indicators from the submitted STIX file. Supports STIX 1.0 and STIX 2.x.
Wrapper for the StixParser automation. This automation creates indicators and adds an indicator’s relationships if available.

Script Data

Name	Description
Script Type	python3
Tags	stix, ioc
Cortex XSOAR Version	5.0.0

Inputs

Argument Name	Description
entry_id	The entry ID of the STIX file.
add_context	Adds indicators to context.
tags	A comma-separated list of tags to add to indicators.

Outputs

Path	Description	Type
StixIndicators.type	Type of the indicator.	String
StixIndicators.value	Value of the indicator.	String
StixIndicators.tags	Tags of the indicator.	Unknown

Source

CreateIndicatorsFromSTIX.py CreateIndicatorsFromSTIX_test.py CreateIndicatorsFromSTIX.yml

Download History Raw

args:
- description: The entry ID of the STIX file.
  name: entry_id
  required: true
- auto: PREDEFINED
  defaultValue: "false"
  description: Adds indicators to context.
  name: add_context
  predefined:
  - "true"
  - "false"
- description: A comma-separated list of tags to add to indicators. 
  name: tags
outputs:
- contextPath: StixIndicators.type
  description: Type of the indicator.
- contextPath: StixIndicators.value
  description: Value of the indicator.
- contextPath: StixIndicators.tags
  description: Tags of the indicator.
comment: Creates indicators from the submitted STIX file. Supports STIX 1.0 and STIX 2.x. This automation creates indicators and adds an indicator's relationships if available.
commonfields:
  id: CreateIndicatorsFromSTIX
  version: -1
name: CreateIndicatorsFromSTIX
script: '-'
subtype: python3
tags:
- stix
- ioc
timeout: '0'
type: python
dockerimage: demisto/python3:3.12.13.10404775
tests:
- No tests
fromversion: 5.0.0