StixParser

Parse STIX files to Cortex XSOAR indicators by clicking the **Upload STIX File** button.

python · Base

Details

ID	`StixParser`
Language	python
From Version	5.0.0
Docker Image	`demisto/taxii:1.0.0.10133006`
Tags	stix ioc

README

Parse STIX files to Cortex XSOAR indicators by clicking the Upload STIX File button. This script is used for the button only.
This script does not support indicators relationships creation.
In order to create indicators from STIX files using an automation, use CreateIndicatorsFromSTIX. This automation supports indicators relationships creation.

Script Data

Name	Description
Script Type	python3
Tags	stix, ioc
Cortex XSOAR Version	5.0.0

Inputs

Argument Name	Description
iocXml	IOC XML or JSON in STIX format.
entry_id	IOC file entry ID.

Outputs

There are no outputs for this script.

Source

StixParser.py StixParser_test.py StixParser.yml

Download History Raw

args:
- default: true
  description: IOC XML or JSON in STIX format.
  name: iocXml
- default: true
  description: IOC file entry ID.
  name: entry_id
comment: Parse STIX files to Cortex XSOAR indicators by clicking the **Upload STIX File** button.
commonfields:
  id: StixParser
  version: -1
enabled: true
name: StixParser
outputs:
- contextPath: STIXParser.value
  description: Indicator value.
  type: String
- contextPath: STIXParser.type
  description: Indicator type.
  type: string
- contextPath: STIXParser.rawJSON
  description: Indicator rawJSON.
  type: string
script: '-'
system: true
tags:
- stix
- ioc
timeout: 0s
type: python
subtype: python3
dockerimage: demisto/taxii:1.0.0.10133006
tests:
- No tests
dependson: {}
fromversion: 5.0.0