search

oasis-tcs / cti-stix2

OASIS CTI TC: Provides issue tracking and wiki pages for the STIX 2.x Work Products
https://github.com/oasis-tcs/cti-stix2
Other
24 stars 9 forks source link

The UUIDv5 SCO ids should be checked to make sure they agree with the generate_id method in python-stix2 #318

Open rpiazza opened 1 year ago

rpiazza commented 3 months ago

I ran a script. The file of examples is attached. I think these are the changes that need to be made:

@srrelitz2 - can you pass this on to Qem Lumi. He mentioned he wanted to help with this. He should independently check my work with one example.

/Users/rpiazza/py-envs/python3.11/bin/python3.11 /Users/rpiazza/git/stix/cti-python-stix2/determinsitic-id-checker.py id ipv4-addr--b4e29b62-2053-47c4-bab4-bbce39e5ed67 should be ipv4-addr--28bb3599-77cd-5a82-a950-b5bc3caf07c4 id ipv4-addr--84445275-e371-444b-baea-ac7d07a180fd should be ipv4-addr--055987b7-7d94-5326-8e20-c3dad8241976 id file--1190f2c9-166f-55f1-9706-eea3971d8082 should be file--ba8965d8-e4ec-5f9c-a4df-1c460994ca58 id directory--255cb0e4-8bdb-5d63-bb32-9c6f0b733ab2 should be directory--ab82f84a-5afc-5ea7-8d98-9fcbc277eda6 id domain-name--ecb120bf-2694-4902-a737-62b74539a41b should be domain-name--bedb4899-d24b-5401-bc86-8f6b4cc18ec7 id ipv4-addr--efcd5e80-570d-4131-b213-62cb18eaa6a8 should be ipv4-addr--28bb3599-77cd-5a82-a950-b5bc3caf07c4 id artifact--ca17bcf8-9846-5ab4-8662-75c1bf6e63ee should be artifact--a785c567-cc53-52a1-abeb-026bb7ddf8ba id artifact--6f437177-6e48-5cf8-9d9e-872a2bddd641 should be artifact--6be1fbcb-fd03-5ec3-b05f-4329746e9d2b id autonomous-system--f720c34b-98ae-597f-ade5-27dc241e8c74 should be autonomous-system--3aa27478-50b5-5ab8-9da9-cdc12b657fff id directory--93c0a9b0-520d-545d-9094-1a08ddf46b05 should be directory--0a58d0c1-59e6-5afd-8252-dcd3f13e5622 id domain-name--3c10e93f-798e-5a26-a0c1-08156efab7f5 should be domain-name--bedb4899-d24b-5401-bc86-8f6b4cc18ec7 id ipv4-addr--ff26c055-6336-5bc5-b98d-13d6226742dd should be ipv4-addr--28bb3599-77cd-5a82-a950-b5bc3caf07c4 id email-addr--2d77a846-6264-5d51-b586-e43822ea1ea3 should be email-addr--7165e2a9-671f-585d-b1e1-ca59c671d934 id email-message--72b7698f-10c2-565a-a2a6-b4996a2f2265 should be email-message--92fa1bfd-2c62-5a30-8b7c-5b91ea73cf29 id email-addr--89f52ea8-d6ef-51e9-8fce-6a29236436ed should be email-addr--6deb37bd-12b7-54ae-805f-5f7146f3d171 id email-addr--e4ee5301-b52d-59cd-a8fa-8036738c7194 should be email-addr--2aeeb98c-9db4-525e-874d-221fdfe9f76e id email-message--cf9b4b7f-14c8-5955-8065-020e0316b559 should be email-message--d7d69ead-3347-5772-815a-7766dc29c72c id email-addr--89f52ea8-d6ef-51e9-8fce-6a29236436ed should be email-addr--6deb37bd-12b7-54ae-805f-5f7146f3d171 id email-addr--d1b3bf0c-f02a-51a1-8102-11aba7959868 should be email-addr--3734e66b-c4e8-5d0b-bca9-befdd5699746 id email-addr--e4ee5301-b52d-59cd-a8fa-8036738c7194 should be email-addr--2aeeb98c-9db4-525e-874d-221fdfe9f76e id artifact--4cce66f8-6eaa-53cb-85d5-3a85fca3a6c5 should be artifact--0682152c-646a-513b-bc07-e516494ed178 id file--6ce09d9c-0ad3-5ebf-900c-e3cb288955b5 should be file--cfebcece-2336-51b0-baf1-d94daae5e1d1 id file--e277603e-1060-5ad4-9937-c26c97f1ca68 should be file--949eb97a-da1e-5292-8959-03c4249dc9f3 id file--90bd400b-89a5-51a5-b17d-55bc7719723b should be file--7d1e3a18-89e7-5bc5-be36-9879f5b7f5c8 id directory--93c0a9b0-520d-545d-9094-1a08ddf46b05 should be directory--0a58d0c1-59e6-5afd-8252-dcd3f13e5622 id file--5a27d487-c542-5f97-a131-a8866b477b46 should be file--39643577-13b7-5f21-9584-df7e7c33f357 id file--019fde1c-94ca-5967-8b3c-a906a51d87ac should be file--70221dbf-52fd-5377-9619-c0ce6b3ffc8c id file--94fc2163-dec3-5715-b824-6e689c4de865 should be file--c0e2b1c9-232d-5b64-8b74-b6aee5bb9c47 id file--d07ff290-d7e0-545b-a2ff-04602a9e0b73 should be file--5d0833b7-065e-571f-8bf2-657cb9569570 id file--9a1f834d-2506-5367-baec-7aa63996ac43 should be file--391a57ed-e758-5e43-a49e-d2ca3601a5e9 id file--73c4cd13-7206-5100-88ef-822c42d3f02c should be file--ba04c974-3cef-5f42-adc7-084d467874e2 id file--ec3415cc-5f4f-5ec8-bdb1-6f86996ae66d should be file--965aa96f-d90a-506a-8317-d38d44b235f9 id file--c7d1e135-8b34-549a-bb47-302f5cf998ed should be file--66772174-3442-5e0d-b577-4bd7be55fb87 id file--fb0419a8-f09c-57f8-be64-71a80417591c should be file--9af228db-9a04-5787-ad43-ccadc137a0e2 id ipv4-addr--ff26c055-6336-5bc5-b98d-13d6226742dd should be ipv4-addr--28bb3599-77cd-5a82-a950-b5bc3caf07c4 id ipv4-addr--5853f6a4-638f-5b4e-9b0f-ded361ae3812 should be ipv4-addr--1ea47840-aa39-5aa8-b4a2-cd203eb6662a id ipv6-addr--1e61d36c-a16c-53b7-a80f-2a00161c96b1 should be ipv6-addr--85a85a8c-ee99-5722-946d-3c3a3270fc6f id ipv6-addr--5daf7456-8863-5481-9d42-237d477697f4 should be ipv6-addr--084d3b4c-7785-568a-a569-0c61c95754ab id mac-addr--65cfcf98-8a6e-5a1b-8f61-379ac4f92d00 should be mac-addr--757b1725-9903-54f5-a855-1240691d7659 id mutex--eba44954-d4e4-5d3b-814c-2b17dd8de300 should be mutex--f93fe911-e545-5239-b9b0-597840d0c871 id ipv4-addr--4d22aae0-2bf9-5427-8819-e4f6abf20a53 should be ipv4-addr--9cf4a8ec-7640-5f40-a006-79942896168b id ipv4-addr--ff26c055-6336-5bc5-b98d-13d6226742dd should be ipv4-addr--28bb3599-77cd-5a82-a950-b5bc3caf07c4 id network-traffic--2568d22a-8998-58eb-99ec-3c8ca74f527d should be network-traffic--6e0cb830-0305-57d4-8536-7be874d42005 id domain-name--3c10e93f-798e-5a26-a0c1-08156efab7f5 should be domain-name--bedb4899-d24b-5401-bc86-8f6b4cc18ec7 id network-traffic--15a157a8-26e3-56e0-820b-0c2a8e553a2c should be network-traffic--c695ada6-5d5d-5446-a661-935874e1d058 id ipv4-addr--e42c19c8-f9fe-5ae9-9fc8-22c398f78fb7 should be ipv4-addr--ad74bc22-43d2-52ed-890e-7d382f58e1eb id ipv4-addr--03b708d9-7761-5523-ab75-5ea096294a68 should be ipv4-addr--826fe3cb-56b0-5620-9d30-4c17ed7b24e3 id network-traffic--630d7bb1-0bbc-53a6-a6d4-f3c2d35c2734 should be network-traffic--44eb3012-751d-5c12-b9ba-1506e42e26ef id ipv4-addr--4d22aae0-2bf9-5427-8819-e4f6abf20a53 should be ipv4-addr--9cf4a8ec-7640-5f40-a006-79942896168b id ipv4-addr--e42c19c8-f9fe-5ae9-9fc8-22c398f78fb7 should be ipv4-addr--ad74bc22-43d2-52ed-890e-7d382f58e1eb id ipv4-addr--ffe65ce3-bf2a-577c-bb7e-947d39198637 should be ipv4-addr--a2935766-2522-5939-9513-cc3536f212a3 id network-traffic--ac267abc-1a41-536d-8e8d-98458d9bf491 should be network-traffic--372c0c73-777a-50de-bc3a-92cc72fcf7dd id network-traffic--53e0bf48-2eee-5c03-8bde-ed7049d2c0a3 should be network-traffic--8dce0dc4-f5ea-5313-8e6c-03646d419b6a id ipv4-addr--e42c19c8-f9fe-5ae9-9fc8-22c398f78fb7 should be ipv4-addr--ad74bc22-43d2-52ed-890e-7d382f58e1eb id ipv4-addr--f2d3c796-6c1a-5c4f-8516-d4db54727f89 should be ipv4-addr--13cba85b-1780-5517-b600-7b6546cfd760 id ipv4-addr--bb884ffe-f2e4-56bb-a0c3-21f6711cb649 should be ipv4-addr--23476ffc-8715-5eee-bd37-2f204b7db486 id network-traffic--b4a8c150-e214-57a3-9017-e85dfa345f46 should be network-traffic--fc1686c0-b36e-5041-9ce4-c8df9cf10d6d id network-traffic--65a6016d-a91c-5781-baad-178cd55f01d4 should be network-traffic--27ed09d5-f85a-5a8e-8590-49a91d7e510e id ipv4-addr--6da8dad3-4de3-5f8e-ab23-45d0b8f12f16 should be ipv4-addr--165070a8-c561-58a8-8659-fce2f255c2c0 id network-traffic--f8ae967a-3dc3-5cdf-8f94-8505abff00c2 should be network-traffic--fdd6dbda-a206-52fe-b19b-64d908748850 id ipv4-addr--d7177770-fc12-586b-9244-426596a7008e should be ipv4-addr--4b8ed646-46df-5a9c-b5a6-b3ae128f35a6 id ipv4-addr--03b708d9-7761-5523-ab75-5ea096294a68 should be ipv4-addr--826fe3cb-56b0-5620-9d30-4c17ed7b24e3 id network-traffic--e7a939ca-78c6-5f27-8ae0-4ad112454626 should be network-traffic--4f156a67-4efc-58fb-b0a7-f2612927a37d id ipv4-addr--4d22aae0-2bf9-5427-8819-e4f6abf20a53 should be ipv4-addr--9cf4a8ec-7640-5f40-a006-79942896168b id network-traffic--c95e972a-20a4-5307-b00d-b8393faf02c5 should be network-traffic--59d8852c-0c68-5e0c-8ae2-f3c46bd7b1df id ipv4-addr--89830c10-2e94-57fa-8ca6-e0537d2719d1 should be ipv4-addr--f85034be-e4ad-5153-aa6b-79c450eb25b3 id ipv4-addr--45f4c6fb-2d7d-576a-a571-edc78d899a72 should be ipv4-addr--72073c96-1246-5058-8e5c-6ca59d656dee id network-traffic--09ca55c3-97e5-5966-bad0-1d41d557ae13 should be network-traffic--47b27c77-4272-563f-91ca-87e2a4afd6ef id file--edb1ebee-4387-41cc-943b-f94fd491118c should be file--3eb55c0e-fe96-588b-a7ab-10f55f7ec596 id process--d2ec5aab-808d-4492-890a-3c1a1e3cb06e should be process--8fac80fe-a220-4ba9-8ffe-4f43ce8edff8 id process--de02a3e4-4b96-460a-b799-684347004444 should be process--65a99d8a-e5b2-44bb-8311-963a580ee9a1 id file--4b9a516b-4974-4ff8-a50d-a8b8d552ce1f should be file--ca7d6a8a-b79e-5c3b-b736-8d48adcf0c97 id process--70b17c6c-93e5-4c80-8683-5a4d4e51f2c1 should be process--ab1ff083-dc96-4896-8c8d-4e623f6e145e id software--a1827f6d-ca53-5605-9e93-4316cd22a00a should be software--710b0b41-d4d0-5d6c-a400-fc9254554ffc id url--c1477287-23ac-5971-a010-5c287877fa60 should be url--47c3cf9a-5027-5bf0-997a-017c7edc7c55 id user-account--0d5b424b-93b8-5cd8-ac36-306e1789d63c should be user-account--f94d689e-707d-58c3-b803-c720bb6ed096 id user-account--9bd3afcf-deee-54f9-83e2-520653cb6bba should be user-account--f223e803-846b-591a-aefa-545e938f8a56 id user-account--0d5b424b-93b8-5cd8-ac36-306e1789d63c should be user-account--f94d689e-707d-58c3-b803-c720bb6ed096 id windows-registry-key--9d60798d-4e3e-5fe4-af8a-0e4986f0f90b should be windows-registry-key--1884b770-b679-522a-a9c7-45fadaaec7bb id windows-registry-key--2ba37ae7-2745-5082-9dfd-9486dad41016 should be windows-registry-key--f6a11ddf-fa2b-54c8-97ab-e7f28413095a id x509-certificate--463d7b2a-8516-5a50-a3d7-6f801465d5de should be x509-certificate--bf86f034-2390-54d7-8426-d08433db3fbe id x509-certificate--b595eaf0-0b28-5dad-9e8e-0fab9c1facc9 should be x509-certificate--5adb038a-160d-5d1c-826e-bde4926a0d2d

sco-examples-bundle.json

adulau commented 3 months ago

@ejratl will update the document.

srrelitz2 commented 3 months ago

Reviewed and concurred. Emily to add to doc and merge.

ejratl commented 3 months ago