Version: 1.2.0.4
API Coverage¶
The python-stix APIs currently provide ⚠ partial coverage of all STIX-defined constructs. Development is ongoing toward the goal of providing ✓ full STIX language support in the APIs. Until such time that full coverage is provided, an overview of which constructs are available in these APIs will be maintained below.
Note
Many STIX constructs can contain CybOX constructs. The python-cybox project provides its own APIs for interacting with the CybOX specification. Please see the CybOX API Documentation for information about CybOX API coverage.
STIX Core¶
| STIX Construct | API Coverage | Documentation |
|---|---|---|
| STIX Package | ✓ Full | stix.core.stix_package.STIXPackage |
| STIX Header | ✓ Full | stix.core.stix_header.STIXHeader |
| Related Packages | ✓ Full | stix.core.stix_package.RelatedPackages |
STIX Top-level Constructs¶
| STIX Construct | API Coverage | Documentation |
|---|---|---|
| Campaign | ✓ Full | stix.campaign.Campaign |
| Course of Action | ✓ Full | stix.coa.CourseOfAction |
| Exploit Target | ✓ Full | stix.exploit_target.ExploitTarget |
| Incident | ⚠ Partial | stix.incident.Incident |
| Indicator | ✓ Full | stix.indicator.indicator.Indicator |
| Observable | Provided by CybOX | |
| Threat Actor | ✓ Full | stix.threat_actor.ThreatActor |
| TTP | ⚠ Partial | stix.ttp.TTP |
STIX Features¶
| STIX Construct | API Coverage | Documentation |
|---|---|---|
| Confidence | ⚠ Partial | stix.common.confidence.Confidence |
| Handling | ✓ Full | stix.data_marking.Marking |
| Markup in Structured Text | × None | |
| Relationships | ✓ Full |