fork of CMU script from https://tools.netsa.cert.org/script-stix2cif/index.html