Convert STIX descriptions to MISP comments

MISP / MISP-STIX-Converter

A utility repo to assist with converting between MISP and STIX formats

GNU Lesser General Public License v3.0

64 stars 31 forks source link

Open RichieB2B opened 7 years ago

RichieB2B commented 7 years ago

At the moment text in the STIX Indicator:Description field is lost. It would be nice to convert this to an attribute comment in MISP.

The same is true for the stix:Description field which could be converted to Catergory=other Type=comment in MISP.

FloatingGhost commented 7 years ago

This should be implemented now. I think so anyhow.

FloatingGhost commented 7 years ago

Ok, the issue with this one is that the Descriptions are on the indicator level, but we lint_roll to get the observables to parse.

I don't know if there's a way to get the "parent", so to speak.