{ "cells": [ { "cell_type": "code", "execution_count": 1, "metadata": {}, "outputs": [], "source": [ "import stix_notebook" ] }, { "cell_type": "code", "execution_count": 2, "metadata": {}, "outputs": [ { "data": { "text/html": [ "<style type=\"text/css\">.highlight .hll { background-color: #ffffcc }\n", ".highlight { background: #f8f8f8; }\n", ".highlight .c { color: #408080; font-style: italic } /* Comment */\n", ".highlight .err { border: 1px solid #FF0000 } /* Error */\n", ".highlight .k { color: #008000; font-weight: bold } /* Keyword */\n", ".highlight .o { color: #666666 } /* Operator */\n", ".highlight .ch { color: #408080; font-style: italic } /* Comment.Hashbang */\n", ".highlight .cm { color: #408080; font-style: italic } /* Comment.Multiline */\n", ".highlight .cp { color: #BC7A00 } /* Comment.Preproc */\n", ".highlight .cpf { color: #408080; font-style: italic } /* Comment.PreprocFile */\n", ".highlight .c1 { color: #408080; font-style: italic } /* Comment.Single */\n", ".highlight .cs { color: #408080; font-style: italic } /* Comment.Special */\n", ".highlight .gd { color: #A00000 } /* Generic.Deleted */\n", ".highlight .ge { font-style: italic } /* Generic.Emph */\n", ".highlight .gr { color: #FF0000 } /* Generic.Error */\n", ".highlight .gh { color: #000080; font-weight: bold } /* Generic.Heading */\n", ".highlight .gi { color: #00A000 } /* Generic.Inserted */\n", ".highlight .go { color: #888888 } /* Generic.Output */\n", ".highlight .gp { color: #000080; font-weight: bold } /* Generic.Prompt */\n", ".highlight .gs { font-weight: bold } /* Generic.Strong */\n", ".highlight .gu { color: #800080; font-weight: bold } /* Generic.Subheading */\n", ".highlight .gt { color: #0044DD } /* Generic.Traceback */\n", ".highlight .kc { color: #008000; font-weight: bold } /* Keyword.Constant */\n", ".highlight .kd { color: #008000; font-weight: bold } /* Keyword.Declaration */\n", ".highlight .kn { color: #008000; font-weight: bold } /* Keyword.Namespace */\n", ".highlight .kp { color: #008000 } /* Keyword.Pseudo */\n", ".highlight .kr { color: #008000; font-weight: bold } /* Keyword.Reserved */\n", ".highlight .kt { color: #B00040 } /* Keyword.Type */\n", ".highlight .m { color: #666666 } /* Literal.Number */\n", ".highlight .s { color: #BA2121 } /* Literal.String */\n", ".highlight .na { color: #7D9029 } /* Name.Attribute */\n", ".highlight .nb { color: #008000 } /* Name.Builtin */\n", ".highlight .nc { color: #0000FF; font-weight: bold } /* Name.Class */\n", ".highlight .no { color: #880000 } /* Name.Constant */\n", ".highlight .nd { color: #AA22FF } /* Name.Decorator */\n", ".highlight .ni { color: #999999; font-weight: bold } /* Name.Entity */\n", ".highlight .ne { color: #D2413A; font-weight: bold } /* Name.Exception */\n", ".highlight .nf { color: #0000FF } /* Name.Function */\n", ".highlight .nl { color: #A0A000 } /* Name.Label */\n", ".highlight .nn { color: #0000FF; font-weight: bold } /* Name.Namespace */\n", ".highlight .nt { color: #008000; font-weight: bold } /* Name.Tag */\n", ".highlight .nv { color: #19177C } /* Name.Variable */\n", ".highlight .ow { color: #AA22FF; font-weight: bold } /* Operator.Word */\n", ".highlight .w { color: #bbbbbb } /* Text.Whitespace */\n", ".highlight .mb { color: #666666 } /* Literal.Number.Bin */\n", ".highlight .mf { color: #666666 } /* Literal.Number.Float */\n", ".highlight .mh { color: #666666 } /* Literal.Number.Hex */\n", ".highlight .mi { color: #666666 } /* Literal.Number.Integer */\n", ".highlight .mo { color: #666666 } /* Literal.Number.Oct */\n", ".highlight .sa { color: #BA2121 } /* Literal.String.Affix */\n", ".highlight .sb { color: #BA2121 } /* Literal.String.Backtick */\n", ".highlight .sc { color: #BA2121 } /* Literal.String.Char */\n", ".highlight .dl { color: #BA2121 } /* Literal.String.Delimiter */\n", ".highlight .sd { color: #BA2121; font-style: italic } /* Literal.String.Doc */\n", ".highlight .s2 { color: #BA2121 } /* Literal.String.Double */\n", ".highlight .se { color: #BB6622; font-weight: bold } /* Literal.String.Escape */\n", ".highlight .sh { color: #BA2121 } /* Literal.String.Heredoc */\n", ".highlight .si { color: #BB6688; font-weight: bold } /* Literal.String.Interpol */\n", ".highlight .sx { color: #008000 } /* Literal.String.Other */\n", ".highlight .sr { color: #BB6688 } /* Literal.String.Regex */\n", ".highlight .s1 { color: #BA2121 } /* Literal.String.Single */\n", ".highlight .ss { color: #19177C } /* Literal.String.Symbol */\n", ".highlight .bp { color: #008000 } /* Name.Builtin.Pseudo */\n", ".highlight .fm { color: #0000FF } /* Name.Function.Magic */\n", ".highlight .vc { color: #19177C } /* Name.Variable.Class */\n", ".highlight .vg { color: #19177C } /* Name.Variable.Global */\n", ".highlight .vi { color: #19177C } /* Name.Variable.Instance */\n", ".highlight .vm { color: #19177C } /* Name.Variable.Magic */\n", ".highlight .il { color: #666666 } /* Literal.Number.Integer.Long */</style><div class=\"highlight\"><pre><span></span><span class=\"p\">{</span>\n", " <span class=\"nt\">"type"</span><span class=\"p\">:</span> <span class=\"s2\">"malware"</span><span class=\"p\">,</span>\n", " <span class=\"nt\">"spec_version"</span><span class=\"p\">:</span> <span class=\"s2\">"2.1"</span><span class=\"p\">,</span>\n", " <span class=\"nt\">"id"</span><span class=\"p\">:</span> <span class=\"s2\">"malware--2cea45fc-50f6-4f30-af29-38291ff9744c"</span><span class=\"p\">,</span>\n", " <span class=\"nt\">"created"</span><span class=\"p\">:</span> <span class=\"s2\">"2019-05-01T19:29:50.716Z"</span><span class=\"p\">,</span>\n", " <span class=\"nt\">"modified"</span><span class=\"p\">:</span> <span class=\"s2\">"2019-05-01T19:29:50.716Z"</span><span class=\"p\">,</span>\n", " <span class=\"nt\">"name"</span><span class=\"p\">:</span> <span class=\"s2\">"Test"</span><span class=\"p\">,</span>\n", " <span class=\"nt\">"malware_types"</span><span class=\"p\">:</span> <span class=\"p\">[</span>\n", " <span class=\"s2\">"trojan"</span><span class=\"p\">,</span>\n", " <span class=\"s2\">"ransomware"</span>\n", " <span class=\"p\">]</span>\n", "<span class=\"p\">}</span>\n", "<span class=\"p\">{</span>\n", " <span class=\"nt\">"type"</span><span class=\"p\">:</span> <span class=\"s2\">"indicator"</span><span class=\"p\">,</span>\n", " <span class=\"nt\">"spec_version"</span><span class=\"p\">:</span> <span class=\"s2\">"2.1"</span><span class=\"p\">,</span>\n", " <span class=\"nt\">"id"</span><span class=\"p\">:</span> <span class=\"s2\">"indicator--f4f021b1-eb41-4cb5-863a-0a808f3d453f"</span><span class=\"p\">,</span>\n", " <span class=\"nt\">"created"</span><span class=\"p\">:</span> <span class=\"s2\">"2019-05-01T19:29:50.718Z"</span><span class=\"p\">,</span>\n", " <span class=\"nt\">"modified"</span><span class=\"p\">:</span> <span class=\"s2\">"2019-05-01T19:29:50.718Z"</span><span class=\"p\">,</span>\n", " <span class=\"nt\">"indicator_types"</span><span class=\"p\">:</span> <span class=\"p\">[</span>\n", " <span class=\"s2\">"Type i"</span><span class=\"p\">,</span>\n", " <span class=\"s2\">"Type ii"</span>\n", " <span class=\"p\">],</span>\n", " <span class=\"nt\">"pattern"</span><span class=\"p\">:</span> <span class=\"s2\">"[foo:bar=1]"</span><span class=\"p\">,</span>\n", " <span class=\"nt\">"valid_from"</span><span class=\"p\">:</span> <span class=\"s2\">"2019-05-01T19:29:50.71854Z"</span>\n", "<span class=\"p\">}</span>\n", "<span class=\"p\">{</span>\n", " <span class=\"nt\">"type"</span><span class=\"p\">:</span> <span class=\"s2\">"relationship"</span><span class=\"p\">,</span>\n", " <span class=\"nt\">"spec_version"</span><span class=\"p\">:</span> <span class=\"s2\">"2.1"</span><span class=\"p\">,</span>\n", " <span class=\"nt\">"id"</span><span class=\"p\">:</span> <span class=\"s2\">"relationship--df91ae64-f8b3-488d-be9a-27a192acd62f"</span><span class=\"p\">,</span>\n", " <span class=\"nt\">"created"</span><span class=\"p\">:</span> <span class=\"s2\">"2019-05-01T19:29:50.741Z"</span><span class=\"p\">,</span>\n", " <span class=\"nt\">"modified"</span><span class=\"p\">:</span> <span class=\"s2\">"2019-05-01T19:29:50.741Z"</span><span class=\"p\">,</span>\n", " <span class=\"nt\">"relationship_type"</span><span class=\"p\">:</span> <span class=\"s2\">"indicates"</span><span class=\"p\">,</span>\n", " <span class=\"nt\">"source_ref"</span><span class=\"p\">:</span> <span class=\"s2\">"malware--2cea45fc-50f6-4f30-af29-38291ff9744c"</span><span class=\"p\">,</span>\n", " <span class=\"nt\">"target_ref"</span><span class=\"p\">:</span> <span class=\"s2\">"indicator--f4f021b1-eb41-4cb5-863a-0a808f3d453f"</span>\n", "<span class=\"p\">}</span>\n", "</pre></div>\n" ], "text/plain": [ "<IPython.core.display.HTML object>" ] }, "execution_count": 2, "metadata": {}, "output_type": "execute_result" } ], "source": [ "%%stix\n", "Malware indicates Indicator." ] } ], "metadata": { "kernelspec": { "display_name": "Python 3", "language": "python", "name": "python3" }, "language_info": { "codemirror_mode": { "name": "ipython", "version": 3 }, "file_extension": ".py", "mimetype": "text/x-python", "name": "python", "nbconvert_exporter": "python", "pygments_lexer": "ipython3", "version": "3.6.3" } }, "nbformat": 4, "nbformat_minor": 2 }