cti-stix-elevator 4.0.0 is released

Hi everyone-

                        

We just published cti-stix-elevator version 4.0.0 on PyPi [1]. The source code is available at [2]. read-the-docs documentation is available at [3].

The elevator and stepper are compliant with STIX 2.1 CS01

Python 3.5 is no longer supported.

All compatibility code to support Python 2.7 has been removed (e.g., the six package)

Major Changes

Support Extension feature described in section 7.3 of the specification

Support Incident as a specification SDO

Use handle_missing_properties method to encapsulate most extension/custom functionality

Handle related objects with no know STIX 2.1 relationship

Other Changes

Handle ArchiveFile different for 2.0 vs 2.1

email_message:message_id is only in 2.1

Infer network-traffic protocol from extension type

Handle registry key in example where there is no hive property

Better handling of Sightings

Add object data marking to Relationships when appropriate based on the source and target references

Handle name and title properties of malware better

Testing changes

Added testing for python 3.9

Test for the ignore missing policy for STIX 2.1

Please enter an issue on GitHub for bugs and feature requests.

 

Contributions welcome.

  

Rich Piazza

Chris Lenk

 

MITRE

 

[1] https://pypi.org/project/stix2-elevator

[2] https://github.com/oasis-open/cti-stix-elevator

[3] https://stix2-elevator.readthedocs.io/en/latest/