Version: 1.1.1.8

stix.threat_actor Module

Classes

class stix.threat_actor.ThreatActor(id_=None, idref=None, timestamp=None, title=None, description=None, short_description=None)

Bases: stix.base.BaseCoreComponent

Implementation of the STIX Threat Actor.

Parameters:
  • id (optional) – An identifier. If None, a value will be generated via mixbox.idgen.create_id(). If set, this will unset the idref property.
  • idref (optional) – An identifier reference. If set this will unset the id_ property.
  • timestamp (optional) – A timestamp value. Can be an instance of datetime.datetime or str.
  • description – A description of the purpose or intent of this object.
  • short_description – A short description of the intent or purpose of this object.
  • title – The title of this object.
add_intended_effect(value)

Adds a Statement object to the intended_effects collection.

If value is a string, an attempt will be made to convert it into an instance of Statement.

add_motivation(value)

Adds a Motivation object to the motivations collection.

add_planning_and_operational_support(value)

Adds a VocabString object to the planning_and_operational_supports collection.

If value is a string, an attempt will be made to convert it to an instance of PlanningAndOperationalSupport.

add_sophistication(value)

Adds a VocabString object to the sophistications collection.

If value is a string, an attempt will be made to convert it to an instance of ThreatActorSophistication.

add_type(value)

Adds a VocabString object to the types collection.

If set to a string, an attempt will be made to convert it into an instance of ThreatActorType.

class stix.threat_actor.AssociatedActors(scope=None, *args)

Bases: stix.common.related.GenericRelationshipList

class stix.threat_actor.AssociatedCampaigns(scope=None, *args)

Bases: stix.common.related.GenericRelationshipList

class stix.threat_actor.ObservedTTPs(scope=None, *args)

Bases: stix.common.related.GenericRelationshipList