OASIS TC Open Repository: Python APIs for STIX 2

This project consists of an open source library allowing software to connect to data repositories using STIX Patterning, and return results as STIX Observations.

Threat-Intel repository. API: https://github.com/davidonzo/apiosintDS

MISP-STIX-Converter - Python library to handle the conversion between MISP and STIX formats

OASIS TC Open Repository: Validator for STIX 2.0 JSON normative requirements and best practices

OASIS Cyber Threat Intelligence (CTI) TC Open Repository: Convert STIX 1.2 XML to STIX 2.x JSON

Graph Representation of MITRE ATT&CK's CTI data

OASIS Cyber Threat Intelligence (CTI) TC: A tool for generating STIX content for prototyping and testing. https://github.com/oasis-open/cti-stix-generator

Extracts IoCs, TTPs and the relationships between them. Outputs a STIX 2.1 bundle.

OASIS TC Open Repository: Validate patterns used to express cyber observable content in STIX Indicators

🌴 The STIX2 Pattern expression parser for humans

OASIS TC Open Repository: The repository cti-stix-slider supports development of a Python application to convert STIX 2.0 content to STIX 1.x content

Generation of STIX2 compliant entities for Maltego

Firepit - STIX Columnar Storage

Extract machine readable cyber threat intelligence from unstructured data (inc. PDFs, Word docs, and HTML pages)

A command line tool that turns NVD CVE records into STIX 2.1 Objects.

A web API for various cyber threat intelligence frameworks, including MITRE ATT&CK, CWE, ATLAS...

A command line tool that converts Sigma Rules into STIX 2.1 Objects.

A STIX2 generator for the DISARM Framework

stix2arango is a command line tool that takes a group of STIX 2.1 objects in a bundle and inserts them into ArangoDB. It can also handle updates to existing objects in ArangoDB imported in a bundle.