search

oasis-open / cti-python-stix2

OASIS TC Open Repository: Python APIs for STIX 2
https://stix2.readthedocs.io/
BSD 3-Clause "New" or "Revised" License
364 stars 119 forks source link

Is there any way to change the top level extension? #531

Open fear-the-reaper opened 2 years ago

fear-the-reaper commented 2 years ago

I'm adding extensions to my STIX objects then mapping them to an Elastic Cluster. The extension definition is quite long. Is there any way to change it? I've read the documentation but I haven't found a proper solution. Attached a picture below too. Thanks in advance! image

chisholm commented 2 years ago

That is the STIX ID of an extension definition. All STIX IDs are of the form <stix-type>--<UUID>. It is expected to identify a (separate) extension-definition object. That's how the consumer of your object can find the definition object and learn more about the extension, e.g. get a name, description, schema, etc. It establishes the linkage between an extension definition and all objects which have been extended according to that definition. It needs to be a compliant STIX ID since that's how identification is done in STIX. Only extensions built-in to the spec have shorter names, since they don't rely on external definitions; the spec defines them.

So no, it can't be made shorter and still do its job of identifying an extension definition object.