Package: maltego-stix2
Maltego STIX2 entitiesThis project allows you to generate a set of Maltego entities generated from official STIX 2 schemas.
It also contains generic transforms to explore the properties of STIX 2 entities.
The set of entities with the default configuration provided here is also distributed in the officialMaltego Transform Hub.Dependencies in submodulesWe are using the following assets to generate STIX2 Maltego entities:Official STIX 2 schemas :https://github.com/oasis-open/cti-stix2-json-schemasIcons :https://github.com/freetaxii/stix2-graphics(Copyright 2016-2019 Bret Jordan, All rights reserved.)UsageIf you are only using the default Maltego entities and don't want to customize anything, you can install the entities distributed in the officialMaltego Transform Hub.If you want to customize these entities (heritage with other entities, default transform to explore STIX2 properties), you can use this project to generate your own set of entities.If you want to build your own transforms using these entities, you can install the maltego_stix2 python package to help you write them. It contains the definition of the entities to be able to return them in your transforms, as well as utility functions to translate a Maltego entity into and from a STIX2 object. A template for such a transform is provided in./trx-demo.ConfigurationTo customize the STIX2 schemas used for the generation of entities, see./maltego_stix2/config.py, the submodule./cti-stix2-json-schemasand the manual./cti-stix2-json-schemas-extendedcurrently set-up for OpenCTI compatibilityTo customize the icons used for Maltego-STIX2 entities, see/maltego_stix2/config.py, the submodule./stix2-graphicsand the manual./stix2-graphics-extendedTo customize heritage between Maltego-STIX2 entities and other Maltego entities, see the mapping in./maltego_stix2/config.pyTo use local transforms which handle the exploration of STIX2 properties, see./local_config.pyand./transforms.csvTo use an iTDS, make sure to configure its URL in./local_config.pyTo generate custom entities, properties and transforms for the OpenCTI-STIX2 compatibility, add the argument--with-openction all bash scriptsGeneration$ git clone https://github.com/maltegotransforms/maltego-stix2
$ cd maltego-stix2
$ git submodule initRequirementsPlease install the following requirements before generating the Maltego-STIX2 entities:Python >= 3.6Libraries in ./requirements.txt$ pip3 install -r requirements.txtFor any customization of the heritage configuration of the entities, a custom version of the maltego-stix2 package has to be installed:$ pip3 install .GenerateTo generate theentities.mtzfile:$ git submodule update --remote
$ ./build_entities.sh (--with-opencti)To generate thetransforms.mtzfile (the transforms require installing this library in your environment):$ python3 setup.py install
$ ./build_transforms.sh (--with-opencti)To run the transforms locally, make sure the path to TRXproject.pyis set up in./local_config.pyFor any customization of the types of the entities, a custom version of the maltego-stix2 package has to be re-installed:$ pip3 install .ImportImport the filesoutput/entities.mtzandoutput/transforms.mtzin Maltego using the "Import config" menu.If you use an iTDS, import the fileoutput/importable_itds_config.csvin your iTDS management platform.ContributingCode of ConductWe follow a standardCode of Conductthat we expect project participants to adhere to. Please read thefull textso that you can understand what actions will and will not be tolerated.How to contributeThis module is not a huge project with an intense roadmap. Feel free to contribute through issues linked to pull requests for new features and bug solving.TODO: known wanted enhancementsRely on external library to parse JSON-ref filesAdd missing icons for some observables