Version: 2.1.0.13

python-cybox 2.1.0.13 Documentation

The python-cybox library provides an API for developing and consuming Cyber Observable eXpression (CybOX) content. Developers can leverage the API to create applications that create, consume, translate, or otherwise work with CybOX content.

Versions

Each version of python-cybox is designed to work with a single version of the CybOX Language. The table below shows the latest version the library for each version of CybOX.

CybOX Version python-cybox Version
2.1 2.1.0.11 (PyPI) (GitHub)
2.0.1 2.0.1.4 (PyPI) (GitHub)
2.0 2.0.0.1 (PyPI) (GitHub)
1.0 1.0.0b3 (PyPI) (GitHub)

Contents

Version: 2.1.0.13

Getting Started with python-cybox

Note

The python-cybox library is intended for developers who want to add CybOX support to existing programs or create new programs that handle CybOX content. Experience with Python development is assumed.

Other users should look at existing tools that support CybOX.

Understanding XML, XML Schema, and the CybOX language is also incredibly helpful when using python-cybox in an application.

First, you should follow the Installation procedures.

Example Scripts

The python-cybox repository contains several example scripts that help illustrate the capabilities of the APIs. These scripts are simple command line utilities that can be executed by passing the name of the script to a Python interpreter.

$ python simple_email_instance.py

Writing Your Own Application

See the Examples page for more examples of using python-cybox in your own application.

Version: 2.1.0.13

Installation

Dependencies

The python-cybox library is developed on Python 2.7 and tested against both Python 2.6 and 2.7. Besides the Python Standard Library, python-cybox relies on the following Python libraries:

  • lxml - A Pythonic binding for the C libraries libxml2 and libxslt.
  • python-dateutil - A library for parsing datetime information.
  • importlib (Python 2.6) - Convenience wrappers for __import__().

Note

importlib is built into Python 2.7, and is available on PyPI for Python 2.6.

Each of these can be installed with pip or by manually downloading packages from PyPI. On Windows, you will probably have the most luck using pre-compiled binaries for lxml. On Ubuntu (12.04 or 14.04), you should make sure the following packages are installed before attempting to compile lxml from source:

  • libxml2-dev
  • libxslt1-dev
  • zlib1g-dev

Manual Installation

If you are unable to use pip, you can also install python-cybox with setuptools. If you don’t already have setuptools installed, please install it before continuing.

  1. Download and install the dependencies above. Although setuptools will generally install dependencies automatically, installing the dependencies manually beforehand helps distinguish errors in dependency installation from errors in python-cybox installation. Make sure you check to ensure the versions you install are compatible with the version of python-cybox you plan to install.
  2. Download the desired version of python-cybox from PyPI or the GitHub releases page. The steps below assume you are using the 2.1.0.13 release.
  3. Extract the downloaded file. This will leave you with a directory named cybox-2.1.0.13.
$ tar -zxf cybox-2.1.0.13.tar.gz
$ ls
cybox-2.1.0.13 cybox-2.1.0.13.tar.gz

OR

$ unzip cybox-2.1.0.13.zip
$ ls
cybox-2.1.0.13 cybox-2.1.0.13.zip
  1. Run the installation script.
$ cd cybox-2.1.0.13
$ python setup.py install
  1. Test the installation.
$ python
Python 2.7.6 (default, Mar 22 2014, 22:59:56)
[GCC 4.8.2] on linux2
Type "help", "copyright", "credits" or "license" for more information.
>>> import cybox
>>>

If you don’t see an ImportError, the installation was successful.

Further Information

If you’re new to installing Python packages, you can learn more at the Python Packaging User Guide, specifically the Installing Python Packages section.

Version: 2.1.0.13

Overview

This page provides a quick overview needed to understand the inner workings of the python-cybox library. If you prefer a more hands-on approach, browse the Examples.

CybOX Entities

Each type within CybOX is represented by a class which derives from cybox.Entity. In general, there is one Python class per CybOX type, though in some cases classes which would have identical functionality have been reused rather than writing duplicating classes. One example of this is that many enumerated values are implemented using the cybox.common.properties.String, since values aren’t checked to make sure they are valid enumeration values.

Note

Not all CybOX types have yet been implemented.

Controlled Vocabulary Strings

Controlled Vocabulary strings are a concept originally designed for STIX and adapted for use in CybOX as well. For background, see the STIX documentation. Controlled Vocabulary strings are implemented in the cybox Python package very similarly to how they are implemented in the stix package, so viewing the python-stix documentation should help explain how to work with CybOX Controlled Vocabulary strings as well. CybOX vocabularies are defined in the cybox.common.vocabs module.

Version: 2.1.0.13

Examples

This page includes some basic examples of creating and parsing CybOX content.

There are a couple things we do in these examples for purposes of demonstration that shouldn’t be done in production code:

  • When calling to_xml(), we use include_namespaces=False. This is to make the example output easier to read, but means the resulting output cannot be successfully parsed. The XML parser doesn’t know what namespaces to use if they aren’t included. In production code, you should explicitly set include_namespaces to True or omit it entirely (True is the default).
  • We use set_id_method(IDGenerator.METHOD_INT) to make IDs for Objects and Observables easier to read and cross-reference within the XML document. In production code, you should omit this statement, which causes random UUIDs to be created instead, or create explicit IDs yourself for objects and observables.

Creating Objects

The easiest way to create an object is to construct one and then set various properties on it.

from cybox.objects.file_object import File
f = File()
f.file_name = "malware.exe"
f.file_path = "C:\Windows\Temp\malware.exe"
print(f.to_xml(include_namespaces=False, encoding=None))

Which outputs:

<FileObj:FileObjectType xsi:type="FileObj:FileObjectType">
    <FileObj:File_Name>malware.exe</FileObj:File_Name>
    <FileObj:File_Path>C:\Windows\Temp\malware.exe</FileObj:File_Path>
</FileObj:FileObjectType>

For some objects, such as the AddressObject, you can pass parameters direcly into the constructor.

from cybox.objects.address_object import Address
a = Address("1.2.3.4", Address.CAT_IPV4)
print(a.to_xml(include_namespaces=False, encoding=None))
<AddressObj:AddressObjectType xsi:type="AddressObj:AddressObjectType" category="ipv4-addr">
    <AddressObj:Address_Value>1.2.3.4</AddressObj:Address_Value>
</AddressObj:AddressObjectType>

Creating Observables

Full CybOX documents are expected to have Observables as the root element. You can pass any object to the Observables constructor to generate the proper XML.

from mixbox.idgen import IDGenerator, set_id_method
from cybox.core import Observables
from cybox.objects.file_object import File
set_id_method(IDGenerator.METHOD_INT)
f = File()
f.file_name = "malware.exe"
f.file_path = "C:\Windows\Temp\malware.exe"
print(Observables(f).to_xml(include_namespaces=False, encoding=None))
<cybox:Observables cybox_major_version="2" cybox_minor_version="1" cybox_update_version="0">
    <cybox:Observable id="example:Observable-1">
        <cybox:Object id="example:File-2">
            <cybox:Properties xsi:type="FileObj:FileObjectType">
                <FileObj:File_Name>malware.exe</FileObj:File_Name>
                <FileObj:File_Path>C:\Windows\Temp\malware.exe</FileObj:File_Path>
            </cybox:Properties>
        </cybox:Object>
    </cybox:Observable>
</cybox:Observables>

To include multiple objects as individual Observables within one document, you can pass them as a list to the Observables constructor.

from mixbox.idgen import IDGenerator, set_id_method
from cybox.core import Observables
from cybox.objects.address_object import Address
from cybox.objects.uri_object import URI
set_id_method(IDGenerator.METHOD_INT)
a = Address("1.2.3.4", Address.CAT_IPV4)
u = URI("http://cybox.mitre.org/")
print(Observables([a, u]).to_xml(include_namespaces=False, encoding=None))
<cybox:Observables cybox_major_version="2" cybox_minor_version="1" cybox_update_version="0">
    <cybox:Observable id="example:Observable-1">
        <cybox:Object id="example:Address-2">
            <cybox:Properties xsi:type="AddressObj:AddressObjectType" category="ipv4-addr">
                <AddressObj:Address_Value>1.2.3.4</AddressObj:Address_Value>
            </cybox:Properties>
        </cybox:Object>
    </cybox:Observable>
    <cybox:Observable id="example:Observable-3">
        <cybox:Object id="example:URI-4">
            <cybox:Properties xsi:type="URIObj:URIObjectType">
                <URIObj:Value>http://cybox.mitre.org/</URIObj:Value>
            </cybox:Properties>
        </cybox:Object>
    </cybox:Observable>
</cybox:Observables>

HTTP Message Body

When outputing XML, by default, reserved XML characters such as < and > are escaped by default.

from cybox.objects.http_session_object import HTTPMessage
m = HTTPMessage()
m.message_body = "<html><title>An HTML page</title><body><p>Body text</p></body></html>"
m.length = len(m.message_body.value)
print(m.to_xml(include_namespaces=False, encoding=None))
<HTTPSessionObj:HTTPMessageType>
    <HTTPSessionObj:Length>69</HTTPSessionObj:Length>
    <HTTPSessionObj:Message_Body>&lt;html&gt;&lt;title&gt;An HTML page&lt;/title&gt;&lt;body&gt;&lt;p&gt;Body text&lt;/p&gt;&lt;/body&gt;&lt;/html&gt;</HTTPSessionObj:Message_Body>
</HTTPSessionObj:HTTPMessageType>

When you parse this content, these characters are converted back.

from cybox.bindings.http_session_object import parseString
m2 =  HTTPMessage.from_obj(parseString(m.to_xml(encoding=None)))
print(m2.message_body)
<html><title>An HTML page</title><body><p>Body text</p></body></html>

HTTP User Agent

from cybox.objects.http_session_object import *
fields = HTTPRequestHeaderFields()
fields.user_agent = 'Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:25.0) Gecko/20100101 Firefox/25.0'

header = HTTPRequestHeader()
header.parsed_header = fields

request = HTTPClientRequest()
request.http_request_header = header

req_res = HTTPRequestResponse()
req_res.http_client_request = request

session = HTTPSession()
session.http_request_response = [req_res]

print(session.to_xml(include_namespaces=False, encoding=None))
<HTTPSessionObj:HTTPSessionObjectType xsi:type="HTTPSessionObj:HTTPSessionObjectType">
    <HTTPSessionObj:HTTP_Request_Response>
        <HTTPSessionObj:HTTP_Client_Request>
            <HTTPSessionObj:HTTP_Request_Header>
                <HTTPSessionObj:Parsed_Header>
                    <HTTPSessionObj:User_Agent>Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:25.0) Gecko/20100101 Firefox/25.0</HTTPSessionObj:User_Agent>
                </HTTPSessionObj:Parsed_Header>
            </HTTPSessionObj:HTTP_Request_Header>
        </HTTPSessionObj:HTTP_Client_Request>
    </HTTPSessionObj:HTTP_Request_Response>
</HTTPSessionObj:HTTPSessionObjectType>

Objects with DateTime properties

When setting DateTime properties on objects, you can either use a native Python datetime.datetime or a string. The python-dateutil library is used to parse strings into dates, so a wide variety of formats is supported.

import datetime
from cybox.objects.email_message_object import EmailMessage
e = EmailMessage()
e.from_ = "spammer@spam.com"
e.subject = "This is not spam"
e.date = datetime.datetime(2012, 1, 17, 8, 35, 6)
print(e.to_xml(include_namespaces=False, encoding=None))
<EmailMessageObj:EmailMessageObjectType xsi:type="EmailMessageObj:EmailMessageObjectType">
    <EmailMessageObj:Header>
        <EmailMessageObj:From xsi:type="AddressObj:AddressObjectType" category="e-mail">
            <AddressObj:Address_Value>spammer@spam.com</AddressObj:Address_Value>
        </EmailMessageObj:From>
        <EmailMessageObj:Subject>This is not spam</EmailMessageObj:Subject>
        <EmailMessageObj:Date>2012-01-17T08:35:06</EmailMessageObj:Date>
    </EmailMessageObj:Header>
</EmailMessageObj:EmailMessageObjectType>
from cybox.objects.email_message_object import EmailMessage
e = EmailMessage()
e.date = "Mon, 14 Oct, 2013 12:32:03 -0500"
print(e.to_xml(include_namespaces=False, encoding=None))
<EmailMessageObj:EmailMessageObjectType xsi:type="EmailMessageObj:EmailMessageObjectType">
    <EmailMessageObj:Header>
        <EmailMessageObj:Date>2013-10-14T12:32:03-05:00</EmailMessageObj:Date>
    </EmailMessageObj:Header>
</EmailMessageObj:EmailMessageObjectType>

Hashes

In many cases you can pass a dictionary or a list to create an instance of a CybOX type.

from cybox.common import HashList
h = HashList.from_list([{'type' : 'MD5', 'simple_hash_value' : 'FFFFFF'},
                        {'type' : 'SHA1', 'simple_hash_value' : 'FFFFFF'}])
print(h.to_xml(include_namespaces=False, encoding=None))
<cyboxCommon:HashListType>
    <cyboxCommon:Hash>
        <cyboxCommon:Type>MD5</cyboxCommon:Type>
        <cyboxCommon:Simple_Hash_Value>FFFFFF</cyboxCommon:Simple_Hash_Value>
    </cyboxCommon:Hash>
    <cyboxCommon:Hash>
        <cyboxCommon:Type>SHA1</cyboxCommon:Type>
        <cyboxCommon:Simple_Hash_Value>FFFFFF</cyboxCommon:Simple_Hash_Value>
    </cyboxCommon:Hash>
</cyboxCommon:HashListType>

This can easily be incorporated into constructing objects as well.

from cybox.objects.win_file_object import WinFile
f = WinFile()
f.file_name = "foo.exe"
f.drive = "C:\\"
f.hashes = h
print(f.to_xml(include_namespaces=False, encoding=None))
<WinFileObj:WindowsFileObjectType xsi:type="WinFileObj:WindowsFileObjectType">
    <FileObj:File_Name>foo.exe</FileObj:File_Name>
    <FileObj:Hashes>
        <cyboxCommon:Hash>
            <cyboxCommon:Type>MD5</cyboxCommon:Type>
            <cyboxCommon:Simple_Hash_Value>FFFFFF</cyboxCommon:Simple_Hash_Value>
        </cyboxCommon:Hash>
        <cyboxCommon:Hash>
            <cyboxCommon:Type>SHA1</cyboxCommon:Type>
            <cyboxCommon:Simple_Hash_Value>FFFFFF</cyboxCommon:Simple_Hash_Value>
        </cyboxCommon:Hash>
    </FileObj:Hashes>
    <WinFileObj:Drive>C:\</WinFileObj:Drive>
</WinFileObj:WindowsFileObjectType>

Object Subclasses

The WindowsFile object is a subclass of the File object. As you can see, the correct namepaces for the various properties are set.

from cybox.objects.win_file_object import WinFile
f = WinFile()
f.file_name = "blah.exe"
f.drive = "C:\\"
print(f.to_xml(include_namespaces=False, encoding=None))
<WinFileObj:WindowsFileObjectType xsi:type="WinFileObj:WindowsFileObjectType">
    <FileObj:File_Name>blah.exe</FileObj:File_Name>
    <WinFileObj:Drive>C:\</WinFileObj:Drive>
</WinFileObj:WindowsFileObjectType>

As another example, the WinUser object is a refinement of the UserAccount object, which itself is a refinement of the Account object. As with Hashes, these can be constructed from a dictionary representation.

from cybox.objects.win_user_object import WinUser
winuser_dict = {
    # Account-specific fields
    'disabled': False,
    'domain': 'ADMIN',
    # UserAccount-specific fields
    'password_required': True,
    'full_name': "Steve Ballmer",
    'home_directory': "C:\\Users\\ballmer\\",
    'last_login': "2011-05-12T07:14:01+07:00",
    'username': "ballmer",
    'user_password_age': "P180D",
    # WinUser-specific fields
    'security_id': "S-1-5-21-3623811015-3361044348-30300820-1013",
    'security_type': "SidTypeUser",
    'xsi:type': 'WindowsUserAccountObjectType',
}
print(WinUser.from_dict(winuser_dict).to_xml(include_namespaces=False, encoding=None))
<WinUserAccountObj:WindowsUserAccountObjectType xsi:type="WinUserAccountObj:WindowsUserAccountObjectType"
        disabled="false" password_required="true">
    <AccountObj:Domain>ADMIN</AccountObj:Domain>
    <UserAccountObj:Full_Name>Steve Ballmer</UserAccountObj:Full_Name>
    <UserAccountObj:Home_Directory>C:\Users\ballmer\</UserAccountObj:Home_Directory>
    <UserAccountObj:Last_Login>2011-05-12T07:14:01+07:00</UserAccountObj:Last_Login>
    <UserAccountObj:Username>ballmer</UserAccountObj:Username>
    <UserAccountObj:User_Password_Age>P180D</UserAccountObj:User_Password_Age>
    <WinUserAccountObj:Security_ID>S-1-5-21-3623811015-3361044348-30300820-1013</WinUserAccountObj:Security_ID>
    <WinUserAccountObj:Security_Type>SidTypeUser</WinUserAccountObj:Security_Type>
</WinUserAccountObj:WindowsUserAccountObjectType>

ObservableCompositions

from mixbox.idgen import IDGenerator, set_id_method
from cybox.core import Observable, Observables, ObservableComposition
from cybox.objects.file_object import File
from cybox.objects.process_object import Process
set_id_method(IDGenerator.METHOD_INT)

observables = Observables()

proc = Process.from_dict(
    {"name": "cmd.exe",
    "image_info": {"command_line": "cmd.exe /c blah.bat"}})
proc.name.condition = "Equals"
proc.image_info.command_line.condition = "Contains"
oproc = Observable(proc)
observables.add(oproc)

f = File.from_dict({"file_name": "blah", "file_extension": "bat"})
f.file_name.condition = "Contains"
f.file_extension.condition = "Equals"
ofile = Observable(f)
observables.add(ofile)

oproc_ref = Observable()
oproc_ref.id_ = None
oproc_ref.idref = oproc.id_

ofile_ref = Observable()
ofile_ref.id_ = None
ofile_ref.idref = ofile.id_

o_comp = ObservableComposition(operator="OR")
o_comp.add(oproc_ref)
o_comp.add(ofile_ref)
observables.add(Observable(o_comp))

print(observables.to_xml(include_namespaces=False, encoding=None))
<cybox:Observables cybox_major_version="2" cybox_minor_version="1" cybox_update_version="0">
    <cybox:Observable id="example:Observable-1">
        <cybox:Object id="example:Process-2">
            <cybox:Properties xsi:type="ProcessObj:ProcessObjectType">
                <ProcessObj:Name condition="Equals">cmd.exe</ProcessObj:Name>
                <ProcessObj:Image_Info>
                    <ProcessObj:Command_Line condition="Contains">cmd.exe /c blah.bat</ProcessObj:Command_Line>
                </ProcessObj:Image_Info>
            </cybox:Properties>
        </cybox:Object>
    </cybox:Observable>
    <cybox:Observable id="example:Observable-3">
        <cybox:Object id="example:File-4">
            <cybox:Properties xsi:type="FileObj:FileObjectType">
                <FileObj:File_Name condition="Contains">blah</FileObj:File_Name>
                <FileObj:File_Extension condition="Equals">bat</FileObj:File_Extension>
            </cybox:Properties>
        </cybox:Object>
    </cybox:Observable>
    <cybox:Observable id="example:Observable-7">
        <cybox:Observable_Composition operator="OR">
            <cybox:Observable idref="example:Observable-1">
            </cybox:Observable>
            <cybox:Observable idref="example:Observable-3">
            </cybox:Observable>
        </cybox:Observable_Composition>
    </cybox:Observable>
</cybox:Observables>

Parsing example

Just as you can call to_xml() to generate XML, you can call parseString to parse an XML string.

>>> import cybox.bindings.file_object as file_binding
>>> from cybox.objects.file_object import File
>>> a = """
... <FileObj:FileObjectType
...     xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
...     xmlns:FileObj="http://cybox.mitre.org/objects#FileObject-2"
...     xsi:type="FileObj:FileObjectType">
...     <FileObj:File_Name condition="Contains">bad.exe</FileObj:File_Name>
... </FileObj:FileObjectType>
... """
>>> file_obj = file_binding.parseString(a)
>>> type(file_obj)
<class 'cybox.bindings.file_object.FileObjectType'>
>>> f = File.from_obj(file_obj)
>>> f.file_name.value
'bad.exe'
>>> str(f.file_name)
'bad.exe'
>>> f.file_name.condition
'Contains'

Comparisons

CybOX objects can be compared for equality using the standard Python equality operator. By default, every field must be equal between the two objects. However, you can explicitly say that some fields should not be considered.

>>> from cybox.objects.file_object import File

>>> file_1 = File.from_dict({'file_name': 'abcd.dll', 'size_in_bytes': '25556'})
>>> file_2 = File.from_dict({'file_name': 'abcd.dll', 'size_in_bytes': '25556'})
>>> file_3 = File.from_dict({'file_name': 'abcd.dll', 'size_in_bytes': '1337'})

# First, disable the use of ``size_in_bytes`` comparisons.
>>> File.size_in_bytes.comparable = False

>>> file_1 == file_2
True
>>> file_1 == file_3
True

# Now, set it back to True (the default).
>>> File.size_in_bytes.comparable = True

>>> file_1 == file_2
True
>>> file_1 == file_3
False

Custom Objects

The CybOX Custom Object is used to specify objects which do not have their own object type in CybOX. These objects should be used with care, as they can make interoperability more challenging if both producer and consumer do not agree on the fields used in the Custom object.

from cybox.common.object_properties import CustomProperties, Property
from cybox.objects.custom_object import Custom

c = Custom()

# This should be a QName with a prefix specific to the application
# (i.e. not "example"). The prefix should be included in the output
# namespaces.
c.custom_name = "example:OfficePassword"
c.description = "This is a string used as a password to protect an Microsoft Office document."
c.custom_properties = CustomProperties()

p1 = Property()
p1.name = "password"
p1.description = "MS Office encryption password"
p1.value = "SuP3rS3cr3T!"
c.custom_properties.append(p1)

print(c.to_xml(include_namespaces=False, encoding=None))
<CustomObj:CustomObjectType xsi:type="CustomObj:CustomObjectType" custom_name="example:OfficePassword">
    <cyboxCommon:Custom_Properties>
        <cyboxCommon:Property name="password" description="MS Office encryption password">SuP3rS3cr3T!</cyboxCommon:Property>
    </cyboxCommon:Custom_Properties>
    <CustomObj:Description>This is a string used as a password to protect an Microsoft Office document.</CustomObj:Description>
</CustomObj:CustomObjectType>

Version: 2.1.0.13

Contributing

If you notice a bug, have a suggestion for a new feature, or find that that something just isn’t behaving the way you’d expect it to, please submit an issue to our issue tracker.

If you’d like to contribute code to our repository, you can do so by issuing a pull request and we will work with you to try and integrate that code into our repository. Users who want to contribute code to the python-cybox repository should be familiar with git and the GitHub pull request process.

API Reference

Version: 2.1.0.13

API Reference

CybOX Common

Modules located in the base cybox.common package

Note

Most objects from the CybOX Common schema can be implemented directly from the cybox.commmon package, rather than needing to remember which submodule they are defined in.

Version: 2.1.0.13

cybox.common package

The cybox.common module contains classes needed to implement the types found in the CybOX Common schema (cybox_common.xsd). Although the implementation is spread between different modules within the cybox.common package, types should be imported directly from this module in case the implementations are reorganized in the future.

In other words, do this:

from cybox.common import String

rather than:

from cybox.common.properties import String
Submodules

Version: 2.1.0.13

Version: 2.1.0.13

cybox.common.byterun module
class cybox.common.byterun.ByteRun[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.cybox_common.ByteRunType
byte_order
XML Binding class name: Byte_Order
Dictionary key name: byte_order
byte_run_data
XML Binding class name: Byte_Run_Data
Dictionary key name: byte_run_data
file_system_offset
XML Binding class name: File_System_Offset
Dictionary key name: file_system_offset
hashes
XML Binding class name: Hashes
Dictionary key name: hashes
image_offset
XML Binding class name: Image_Offset
Dictionary key name: image_offset
length
XML Binding class name: Length
Dictionary key name: length
offset
XML Binding class name: Offset
Dictionary key name: offset
class cybox.common.byterun.ByteRuns(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.cybox_common.ByteRunsType
byte_run
(List of values permitted)
XML Binding class name: Byte_Run
Dictionary key name: byte_run

Version: 2.1.0.13

cybox.common.contributor module
class cybox.common.contributor.Contributor[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.cybox_common.ContributorType
contribution_location
XML Binding class name: Contribution_Location
Dictionary key name: contribution_location
date
XML Binding class name: Date
Dictionary key name: date
email
XML Binding class name: Email
Dictionary key name: email
name
XML Binding class name: Name
Dictionary key name: name
organization
XML Binding class name: Organization
Dictionary key name: organization
phone
XML Binding class name: Phone
Dictionary key name: phone
role
XML Binding class name: Role
Dictionary key name: role
class cybox.common.contributor.Personnel(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.cybox_common.PersonnelType
contributor
(List of values permitted)
XML Binding class name: Contributor
Dictionary key name: contributor

Version: 2.1.0.13

cybox.common.data_segment module
class cybox.common.data_segment.DataSegment[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.cybox_common.DataSegmentType
byte_order
XML Binding class name: Byte_Order
Dictionary key name: byte_order
data_format
XML Binding class name: Data_Format
Dictionary key name: data_format
data_segment
XML Binding class name: Data_Segment
Dictionary key name: data_segment
data_size
XML Binding class name: Data_Size
Dictionary key name: data_size
id_
XML Binding class name: id
Dictionary key name: id
offset
XML Binding class name: Offset
Dictionary key name: offset
search_distance
XML Binding class name: Search_Distance
Dictionary key name: search_distance
search_within
XML Binding class name: Search_Within
Dictionary key name: search_within
class cybox.common.data_segment.DataSize(value=None)[source]

Bases: cybox.common.properties.String

XML binding class: cybox.bindings.cybox_common.DataSizeType
is_plain()[source]
units
XML Binding class name: units
Dictionary key name: units

Version: 2.1.0.13

cybox.common.daterange module
class cybox.common.daterange.DateRange[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.cybox_common.DateRangeType
end_date
XML Binding class name: End_Date
Dictionary key name: end_date
start_date
XML Binding class name: Start_Date
Dictionary key name: start_date

Version: 2.1.0.13

cybox.common.datetimewithprecision module
class cybox.common.datetimewithprecision.DateTimeWithPrecision(value=None, precision='second')[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.cybox_common.DateTimeWithPrecisionType
precision
XML Binding class name: precision
Dictionary key name: precision
to_dict()[source]
value
XML Binding class name: valueOf_
Dictionary key name: value
class cybox.common.datetimewithprecision.DateWithPrecision(value=None, precision='day')[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.cybox_common.DateWithPrecisionType
precision
XML Binding class name: precision
Dictionary key name: precision
to_dict()[source]
value
XML Binding class name: valueOf_
Dictionary key name: value
cybox.common.datetimewithprecision.validate_date_precision(instance, value)[source]
cybox.common.datetimewithprecision.validate_datetime_precision(instance, value)[source]
cybox.common.datetimewithprecision.validate_time_precision(instance, value)[source]

Version: 2.1.0.13

cybox.common.digitalsignature module
class cybox.common.digitalsignature.DigitalSignature[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.cybox_common.DigitalSignatureInfoType
certificate_issuer
XML Binding class name: Certificate_Issuer
Dictionary key name: certificate_issuer
certificate_subject
XML Binding class name: Certificate_Subject
Dictionary key name: certificate_subject
signature_description
XML Binding class name: Signature_Description
Dictionary key name: signature_description
signature_exists
XML Binding class name: signature_exists
Dictionary key name: signature_exists
signature_verified
XML Binding class name: signature_verified
Dictionary key name: signature_verified
class cybox.common.digitalsignature.DigitalSignatureList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.cybox_common.DigitalSignaturesType
digital_signature
(List of values permitted)
XML Binding class name: Digital_Signature
Dictionary key name: digital_signature

Version: 2.1.0.13

cybox.common.environment_variable module
class cybox.common.environment_variable.EnvironmentVariable[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.cybox_common.EnvironmentVariableType
name
XML Binding class name: Name
Dictionary key name: name
value
XML Binding class name: Value
Dictionary key name: value
class cybox.common.environment_variable.EnvironmentVariableList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.cybox_common.EnvironmentVariableListType
environment_variable
(List of values permitted)
XML Binding class name: Environment_Variable
Dictionary key name: environment_variable

Version: 2.1.0.13

cybox.common.extracted_features module
class cybox.common.extracted_features.CodeSnippets(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.cybox_common.CodeSnippetsType
code_snippet
(List of values permitted)
XML Binding class name: Code_Snippet
Dictionary key name: code_snippet
class cybox.common.extracted_features.ExtractedFeatures[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.cybox_common.ExtractedFeaturesType
code_snippets
XML Binding class name: Code_Snippets
Dictionary key name: code_snippets
functions
XML Binding class name: Functions
Dictionary key name: functions
imports
XML Binding class name: Imports
Dictionary key name: imports
strings
XML Binding class name: Strings
Dictionary key name: strings
class cybox.common.extracted_features.Functions(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.cybox_common.FunctionsType
function
(List of values permitted)
XML Binding class name: Function
Dictionary key name: function
class cybox.common.extracted_features.Imports(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.cybox_common.ImportsType
import_
(List of values permitted)
XML Binding class name: Import
Dictionary key name: import

Version: 2.1.0.13

cybox.common.extracted_string module
class cybox.common.extracted_string.ExtractedString(string_value=None)[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.cybox_common.ExtractedStringType
address
XML Binding class name: Address
Dictionary key name: address
byte_string_value
XML Binding class name: Byte_String_Value
Dictionary key name: byte_string_value
encoding

TypedField subclass for VocabString fields.

XML Binding class name: Encoding
Dictionary key name: encoding
english_translation
XML Binding class name: English_Translation
Dictionary key name: english_translation
hashes
XML Binding class name: Hashes
Dictionary key name: hashes
language
XML Binding class name: Language
Dictionary key name: language
length
XML Binding class name: Length
Dictionary key name: length
string_value
XML Binding class name: String_Value
Dictionary key name: string_value
class cybox.common.extracted_string.ExtractedStrings(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.cybox_common.ExtractedStringsType
extracted_string
(List of values permitted)
XML Binding class name: String
Dictionary key name: string

Version: 2.1.0.13

cybox.common.hashes module
class cybox.common.hashes.Hash(hash_value=None, type_=None, exact=False)[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.cybox_common.HashType
fuzzy_hash_value
XML Binding class name: Fuzzy_Hash_Value
Dictionary key name: fuzzy_hash_value
simple_hash_value
XML Binding class name: Simple_Hash_Value
Dictionary key name: simple_hash_value
type_

TypedField subclass for VocabString fields.

XML Binding class name: Type
Dictionary key name: type
class cybox.common.hashes.HashList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.cybox_common.HashListType
hashes
(List of values permitted)
XML Binding class name: Hash
Dictionary key name: hash

Version: 2.1.0.13

cybox.common.measuresource module
class cybox.common.measuresource.MeasureSource[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.cybox_common.MeasureSourceType
class_
XML Binding class name: classxx
Dictionary key name: class
contributors
XML Binding class name: Contributors
Dictionary key name: contributors
description
XML Binding class name: Description
Dictionary key name: description
information_source_type

TypedField subclass for VocabString fields.

XML Binding class name: Information_Source_Type
Dictionary key name: information_source_type
instance
XML Binding class name: Instance
Dictionary key name: instance
name
XML Binding class name: name
Dictionary key name: name
platform
XML Binding class name: Platform
Dictionary key name: platform
sighting_count
XML Binding class name: sighting_count
Dictionary key name: sighting_count
source_type
XML Binding class name: source_type
Dictionary key name: source_type
system
XML Binding class name: System
Dictionary key name: system
time
XML Binding class name: Time
Dictionary key name: time
tool_type

TypedField subclass for VocabString fields.

XML Binding class name: Tool_Type
Dictionary key name: tool_type
tools
XML Binding class name: Tools
Dictionary key name: tools

Version: 2.1.0.13

cybox.common.object_properties module
class cybox.common.object_properties.CustomProperties(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.cybox_common.CustomPropertiesType
property_
(List of values permitted)
XML Binding class name: Property
Dictionary key name: property
class cybox.common.object_properties.ObjectProperties[source]

Bases: mixbox.entities.Entity

The Cybox ObjectProperties base class.

XML binding class: cybox.bindings.cybox_common.ObjectPropertiesType
custom_properties
XML Binding class name: Custom_Properties
Dictionary key name: custom_properties
object_reference
XML Binding class name: object_reference
Dictionary key name: object_reference
to_dict()[source]
to_obj(ns_info=None)[source]
class cybox.common.object_properties.Property(value=None)[source]

Bases: cybox.common.properties.String

XML binding class: cybox.bindings.cybox_common.PropertyType
description
XML Binding class name: description
Dictionary key name: description
is_plain()[source]

Whether the Property can be represented as a single value.

name
XML Binding class name: name
Dictionary key name: name

Version: 2.1.0.13

cybox.common.platform_specification module
class cybox.common.platform_specification.PlatformIdentifier(value=None)[source]

Bases: cybox.common.properties.String

XML binding class: cybox.bindings.cybox_common.PlatformIdentifierType
system
XML Binding class name: system
Dictionary key name: system
system_ref
XML Binding class name: system_ref
Dictionary key name: system_ref
class cybox.common.platform_specification.PlatformSpecification[source]

Bases: mixbox.entities.Entity

CybOX Common PlatformSpecification object representation

XML binding class: cybox.bindings.cybox_common.PlatformSpecificationType
description
XML Binding class name: Description
Dictionary key name: description
identifiers
(List of values permitted)
XML Binding class name: Identifier
Dictionary key name: identifier

Version: 2.1.0.13

cybox.common.properties module
class cybox.common.properties.BaseProperty(value=None)[source]
XML binding class: cybox.bindings.cybox_common.BaseObjectPropertyType
is_plain()[source]

Whether the Property can be represented as a single value.

The datatype can be inferred by the particular BaseProperty subclass, so if datatype and value are the only non-None properties, the BaseProperty can be represented by a single value rather than a dictionary. This makes the JSON representation simpler without losing any data fidelity.

class cybox.common.properties.AnyURI(value=None)[source]
XML binding class: cybox.bindings.cybox_common.AnyURIObjectPropertyType
class cybox.common.properties.Base64Binary(value=None)[source]
XML binding class: cybox.bindings.cybox_common.Base64BinaryObjectPropertyType
class cybox.common.properties.Date(value=None, precision='day')[source]
XML binding class: cybox.bindings.cybox_common.DateObjectPropertyType
class cybox.common.properties.DateTime(value=None, precision='second')[source]
XML binding class: cybox.bindings.cybox_common.DateTimeObjectPropertyType
class cybox.common.properties.Double(value=None)[source]
XML binding class: cybox.bindings.cybox_common.DoubleObjectPropertyType
class cybox.common.properties.Duration(value=None)[source]
XML binding class: cybox.bindings.cybox_common.DurationObjectPropertyType
class cybox.common.properties.Float(value=None)[source]
XML binding class: cybox.bindings.cybox_common.FloatObjectPropertyType
class cybox.common.properties.HexBinary(value=None)[source]
XML binding class: cybox.bindings.cybox_common.HexBinaryObjectPropertyType
class cybox.common.properties.Integer(value=None)[source]
XML binding class: cybox.bindings.cybox_common.IntegerObjectPropertyType
class cybox.common.properties.Long(value=None)[source]
XML binding class: cybox.bindings.cybox_common.LongObjectPropertyType
class cybox.common.properties.Name(value=None)[source]
XML binding class: cybox.bindings.cybox_common.NameObjectPropertyType
class cybox.common.properties.NonNegativeInteger(value=None)[source]
XML binding class: cybox.bindings.cybox_common.NonNegativeIntegerObjectPropertyType
class cybox.common.properties.PositiveInteger(value=None)[source]
XML binding class: cybox.bindings.cybox_common.PositiveIntegerObjectPropertyType
class cybox.common.properties.String(value=None)[source]
XML binding class: cybox.bindings.cybox_common.StringObjectPropertyType
class cybox.common.properties.Time(value=None, precision='second')[source]
XML binding class: cybox.bindings.cybox_common.TimeObjectPropertyType
class cybox.common.properties.UnsignedInteger(value=None)[source]
XML binding class: cybox.bindings.cybox_common.UnsignedIntegerObjectPropertyType
class cybox.common.properties.UnsignedLong(value=None)[source]
XML binding class: cybox.bindings.cybox_common.UnsignedLongObjectPropertyType

Version: 2.1.0.13

cybox.common.structured_text module
class cybox.common.structured_text.StructuredText(value=None)[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.cybox_common.StructuredTextType
is_plain()[source]

Whether this can be represented as a string rather than a dictionary

Subclasses can override this to include their custom fields in this check:

return (super(..., self).is_plain() and self.other_field is None)
structuring_format
XML Binding class name: structuring_format
Dictionary key name: structuring_format
to_dict()[source]
value
XML Binding class name: valueOf_
Dictionary key name: value

Version: 2.1.0.13

cybox.common.time module
class cybox.common.time.Time(start_time=None, end_time=None, produced_time=None, received_time=None)[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.cybox_common.TimeType
end_time
XML Binding class name: End_Time
Dictionary key name: end_time
produced_time
XML Binding class name: Produced_Time
Dictionary key name: produced_time
received_time
XML Binding class name: Received_Time
Dictionary key name: received_time
start_time
XML Binding class name: Start_Time
Dictionary key name: start_time

Version: 2.1.0.13

cybox.common.tools module
class cybox.common.tools.ToolInformation(tool_name=None, tool_vendor=None)[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.cybox_common.ToolInformationType
description
XML Binding class name: Description
Dictionary key name: description
id_
XML Binding class name: id
Dictionary key name: id
idref
XML Binding class name: idref
Dictionary key name: idref
name
XML Binding class name: Name
Dictionary key name: name
service_pack
XML Binding class name: Service_Pack
Dictionary key name: service_pack
tool_hashes
XML Binding class name: Tool_Hashes
Dictionary key name: tool_hashes
type_

TypedField subclass for VocabString fields.

(List of values permitted)
XML Binding class name: Type
Dictionary key name: type
vendor
XML Binding class name: Vendor
Dictionary key name: vendor
version
XML Binding class name: Version
Dictionary key name: version
class cybox.common.tools.ToolInformationList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.cybox_common.ToolsInformationType
tool
(List of values permitted)
XML Binding class name: Tool
Dictionary key name: tool

Version: 2.1.0.13

cybox.common.vocabs module
class cybox.common.vocabs.ActionArgumentName(value=None)[source]

Bases: cybox.common.vocabs.VocabString

XML binding class: cybox.bindings.cybox_common.ControlledVocabularyStringType
class cybox.common.vocabs.ActionName(value=None)[source]

Bases: cybox.common.vocabs.VocabString

XML binding class: cybox.bindings.cybox_common.ControlledVocabularyStringType
class cybox.common.vocabs.ActionObjectAssociationType(value=None)[source]

Bases: cybox.common.vocabs.VocabString

XML binding class: cybox.bindings.cybox_common.ControlledVocabularyStringType
class cybox.common.vocabs.ActionRelationshipType(value=None)[source]

Bases: cybox.common.vocabs.VocabString

XML binding class: cybox.bindings.cybox_common.ControlledVocabularyStringType
class cybox.common.vocabs.ActionType(value=None)[source]

Bases: cybox.common.vocabs.VocabString

XML binding class: cybox.bindings.cybox_common.ControlledVocabularyStringType
class cybox.common.vocabs.CharacterEncoding(value=None)[source]

Bases: cybox.common.vocabs.VocabString

XML binding class: cybox.bindings.cybox_common.ControlledVocabularyStringType
class cybox.common.vocabs.EventType(value=None)[source]

Bases: cybox.common.vocabs.VocabString

XML binding class: cybox.bindings.cybox_common.ControlledVocabularyStringType
class cybox.common.vocabs.HashName(value=None)[source]

Bases: cybox.common.vocabs.VocabString

XML binding class: cybox.bindings.cybox_common.ControlledVocabularyStringType
class cybox.common.vocabs.InformationSourceType(value=None)[source]

Bases: cybox.common.vocabs.VocabString

XML binding class: cybox.bindings.cybox_common.ControlledVocabularyStringType
class cybox.common.vocabs.ObjectRelationship(value=None)[source]

Bases: cybox.common.vocabs.VocabString

XML binding class: cybox.bindings.cybox_common.ControlledVocabularyStringType
class cybox.common.vocabs.ObjectState(value=None)[source]

Bases: cybox.common.vocabs.VocabString

XML binding class: cybox.bindings.cybox_common.ControlledVocabularyStringType
class cybox.common.vocabs.ToolType(value=None)[source]

Bases: cybox.common.vocabs.VocabString

XML binding class: cybox.bindings.cybox_common.ControlledVocabularyStringType
class cybox.common.vocabs.VocabString(value=None)[source]

Bases: cybox.common.attribute_groups.PatternFieldGroup, mixbox.entities.Entity

XML binding class: cybox.bindings.cybox_common.ControlledVocabularyStringType
classmethod from_obj(cls_obj)[source]
is_plain()[source]

Whether the VocabString can be represented as a single value.

to_dict()[source]
to_obj(ns_info=None)[source]
value
XML Binding class name: valueOf_
Dictionary key name: value
vocab_name
XML Binding class name: vocab_name
Dictionary key name: vocab_name
vocab_reference
XML Binding class name: vocab_reference
Dictionary key name: vocab_reference
xsi_type
XML Binding class name: xsi_type
Dictionary key name: xsi:type
cybox.common.vocabs.register_vocab(cls)[source]

Register a VocabString subclass.

Also, calculate all the permitted values for class being decorated by adding an _ALLOWED_VALUES tuple of all the values of class members beginning with TERM_.

cybox.common.vocabs.validate_value(instance, value)[source]

Version: 2.1.0.13

Version: 2.1.0.13

cybox.common.byterun module

class cybox.common.byterun.ByteRun[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.cybox_common.ByteRunType
byte_order
XML Binding class name: Byte_Order
Dictionary key name: byte_order
byte_run_data
XML Binding class name: Byte_Run_Data
Dictionary key name: byte_run_data
file_system_offset
XML Binding class name: File_System_Offset
Dictionary key name: file_system_offset
hashes
XML Binding class name: Hashes
Dictionary key name: hashes
image_offset
XML Binding class name: Image_Offset
Dictionary key name: image_offset
length
XML Binding class name: Length
Dictionary key name: length
offset
XML Binding class name: Offset
Dictionary key name: offset
class cybox.common.byterun.ByteRuns(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.cybox_common.ByteRunsType
byte_run
(List of values permitted)
XML Binding class name: Byte_Run
Dictionary key name: byte_run

Version: 2.1.0.13

cybox.common.contributor module

class cybox.common.contributor.Contributor[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.cybox_common.ContributorType
contribution_location
XML Binding class name: Contribution_Location
Dictionary key name: contribution_location
date
XML Binding class name: Date
Dictionary key name: date
email
XML Binding class name: Email
Dictionary key name: email
name
XML Binding class name: Name
Dictionary key name: name
organization
XML Binding class name: Organization
Dictionary key name: organization
phone
XML Binding class name: Phone
Dictionary key name: phone
role
XML Binding class name: Role
Dictionary key name: role
class cybox.common.contributor.Personnel(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.cybox_common.PersonnelType
contributor
(List of values permitted)
XML Binding class name: Contributor
Dictionary key name: contributor

Version: 2.1.0.13

cybox.common.data_segment module

class cybox.common.data_segment.DataSegment[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.cybox_common.DataSegmentType
byte_order
XML Binding class name: Byte_Order
Dictionary key name: byte_order
data_format
XML Binding class name: Data_Format
Dictionary key name: data_format
data_segment
XML Binding class name: Data_Segment
Dictionary key name: data_segment
data_size
XML Binding class name: Data_Size
Dictionary key name: data_size
id_
XML Binding class name: id
Dictionary key name: id
offset
XML Binding class name: Offset
Dictionary key name: offset
search_distance
XML Binding class name: Search_Distance
Dictionary key name: search_distance
search_within
XML Binding class name: Search_Within
Dictionary key name: search_within
class cybox.common.data_segment.DataSize(value=None)[source]

Bases: cybox.common.properties.String

XML binding class: cybox.bindings.cybox_common.DataSizeType
is_plain()[source]
units
XML Binding class name: units
Dictionary key name: units

Version: 2.1.0.13

cybox.common.daterange module

class cybox.common.daterange.DateRange[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.cybox_common.DateRangeType
end_date
XML Binding class name: End_Date
Dictionary key name: end_date
start_date
XML Binding class name: Start_Date
Dictionary key name: start_date

Version: 2.1.0.13

cybox.common.datetimewithprecision module

class cybox.common.datetimewithprecision.DateTimeWithPrecision(value=None, precision='second')[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.cybox_common.DateTimeWithPrecisionType
precision
XML Binding class name: precision
Dictionary key name: precision
to_dict()[source]
value
XML Binding class name: valueOf_
Dictionary key name: value
class cybox.common.datetimewithprecision.DateWithPrecision(value=None, precision='day')[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.cybox_common.DateWithPrecisionType
precision
XML Binding class name: precision
Dictionary key name: precision
to_dict()[source]
value
XML Binding class name: valueOf_
Dictionary key name: value
cybox.common.datetimewithprecision.validate_date_precision(instance, value)[source]
cybox.common.datetimewithprecision.validate_datetime_precision(instance, value)[source]
cybox.common.datetimewithprecision.validate_time_precision(instance, value)[source]

Version: 2.1.0.13

cybox.common.digitalsignature module

class cybox.common.digitalsignature.DigitalSignature[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.cybox_common.DigitalSignatureInfoType
certificate_issuer
XML Binding class name: Certificate_Issuer
Dictionary key name: certificate_issuer
certificate_subject
XML Binding class name: Certificate_Subject
Dictionary key name: certificate_subject
signature_description
XML Binding class name: Signature_Description
Dictionary key name: signature_description
signature_exists
XML Binding class name: signature_exists
Dictionary key name: signature_exists
signature_verified
XML Binding class name: signature_verified
Dictionary key name: signature_verified
class cybox.common.digitalsignature.DigitalSignatureList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.cybox_common.DigitalSignaturesType
digital_signature
(List of values permitted)
XML Binding class name: Digital_Signature
Dictionary key name: digital_signature

Version: 2.1.0.13

cybox.common.environment_variable module

class cybox.common.environment_variable.EnvironmentVariable[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.cybox_common.EnvironmentVariableType
name
XML Binding class name: Name
Dictionary key name: name
value
XML Binding class name: Value
Dictionary key name: value
class cybox.common.environment_variable.EnvironmentVariableList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.cybox_common.EnvironmentVariableListType
environment_variable
(List of values permitted)
XML Binding class name: Environment_Variable
Dictionary key name: environment_variable

Version: 2.1.0.13

cybox.common.extracted_features module

class cybox.common.extracted_features.CodeSnippets(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.cybox_common.CodeSnippetsType
code_snippet
(List of values permitted)
XML Binding class name: Code_Snippet
Dictionary key name: code_snippet
class cybox.common.extracted_features.ExtractedFeatures[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.cybox_common.ExtractedFeaturesType
code_snippets
XML Binding class name: Code_Snippets
Dictionary key name: code_snippets
functions
XML Binding class name: Functions
Dictionary key name: functions
imports
XML Binding class name: Imports
Dictionary key name: imports
strings
XML Binding class name: Strings
Dictionary key name: strings
class cybox.common.extracted_features.Functions(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.cybox_common.FunctionsType
function
(List of values permitted)
XML Binding class name: Function
Dictionary key name: function
class cybox.common.extracted_features.Imports(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.cybox_common.ImportsType
import_
(List of values permitted)
XML Binding class name: Import
Dictionary key name: import

Version: 2.1.0.13

cybox.common.extracted_string module

class cybox.common.extracted_string.ExtractedString(string_value=None)[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.cybox_common.ExtractedStringType
address
XML Binding class name: Address
Dictionary key name: address
byte_string_value
XML Binding class name: Byte_String_Value
Dictionary key name: byte_string_value
encoding

TypedField subclass for VocabString fields.

XML Binding class name: Encoding
Dictionary key name: encoding
english_translation
XML Binding class name: English_Translation
Dictionary key name: english_translation
hashes
XML Binding class name: Hashes
Dictionary key name: hashes
language
XML Binding class name: Language
Dictionary key name: language
length
XML Binding class name: Length
Dictionary key name: length
string_value
XML Binding class name: String_Value
Dictionary key name: string_value
class cybox.common.extracted_string.ExtractedStrings(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.cybox_common.ExtractedStringsType
extracted_string
(List of values permitted)
XML Binding class name: String
Dictionary key name: string

Version: 2.1.0.13

cybox.common.hashes module

class cybox.common.hashes.Hash(hash_value=None, type_=None, exact=False)[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.cybox_common.HashType
fuzzy_hash_value
XML Binding class name: Fuzzy_Hash_Value
Dictionary key name: fuzzy_hash_value
simple_hash_value
XML Binding class name: Simple_Hash_Value
Dictionary key name: simple_hash_value
type_

TypedField subclass for VocabString fields.

XML Binding class name: Type
Dictionary key name: type
class cybox.common.hashes.HashList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.cybox_common.HashListType
hashes
(List of values permitted)
XML Binding class name: Hash
Dictionary key name: hash

Version: 2.1.0.13

cybox.common.measuresource module

class cybox.common.measuresource.MeasureSource[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.cybox_common.MeasureSourceType
class_
XML Binding class name: classxx
Dictionary key name: class
contributors
XML Binding class name: Contributors
Dictionary key name: contributors
description
XML Binding class name: Description
Dictionary key name: description
information_source_type

TypedField subclass for VocabString fields.

XML Binding class name: Information_Source_Type
Dictionary key name: information_source_type
instance
XML Binding class name: Instance
Dictionary key name: instance
name
XML Binding class name: name
Dictionary key name: name
platform
XML Binding class name: Platform
Dictionary key name: platform
sighting_count
XML Binding class name: sighting_count
Dictionary key name: sighting_count
source_type
XML Binding class name: source_type
Dictionary key name: source_type
system
XML Binding class name: System
Dictionary key name: system
time
XML Binding class name: Time
Dictionary key name: time
tool_type

TypedField subclass for VocabString fields.

XML Binding class name: Tool_Type
Dictionary key name: tool_type
tools
XML Binding class name: Tools
Dictionary key name: tools

Version: 2.1.0.13

cybox.common.object_properties module

class cybox.common.object_properties.CustomProperties(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.cybox_common.CustomPropertiesType
property_
(List of values permitted)
XML Binding class name: Property
Dictionary key name: property
class cybox.common.object_properties.ObjectProperties[source]

Bases: mixbox.entities.Entity

The Cybox ObjectProperties base class.

XML binding class: cybox.bindings.cybox_common.ObjectPropertiesType
custom_properties
XML Binding class name: Custom_Properties
Dictionary key name: custom_properties
object_reference
XML Binding class name: object_reference
Dictionary key name: object_reference
to_dict()[source]
to_obj(ns_info=None)[source]
class cybox.common.object_properties.Property(value=None)[source]

Bases: cybox.common.properties.String

XML binding class: cybox.bindings.cybox_common.PropertyType
description
XML Binding class name: description
Dictionary key name: description
is_plain()[source]

Whether the Property can be represented as a single value.

name
XML Binding class name: name
Dictionary key name: name

Version: 2.1.0.13

cybox.common.platform_specification module

class cybox.common.platform_specification.PlatformIdentifier(value=None)[source]

Bases: cybox.common.properties.String

XML binding class: cybox.bindings.cybox_common.PlatformIdentifierType
system
XML Binding class name: system
Dictionary key name: system
system_ref
XML Binding class name: system_ref
Dictionary key name: system_ref
class cybox.common.platform_specification.PlatformSpecification[source]

Bases: mixbox.entities.Entity

CybOX Common PlatformSpecification object representation

XML binding class: cybox.bindings.cybox_common.PlatformSpecificationType
description
XML Binding class name: Description
Dictionary key name: description
identifiers
(List of values permitted)
XML Binding class name: Identifier
Dictionary key name: identifier

Version: 2.1.0.13

cybox.common.properties module

class cybox.common.properties.BaseProperty(value=None)[source]
XML binding class: cybox.bindings.cybox_common.BaseObjectPropertyType
is_plain()[source]

Whether the Property can be represented as a single value.

The datatype can be inferred by the particular BaseProperty subclass, so if datatype and value are the only non-None properties, the BaseProperty can be represented by a single value rather than a dictionary. This makes the JSON representation simpler without losing any data fidelity.

class cybox.common.properties.AnyURI(value=None)[source]
XML binding class: cybox.bindings.cybox_common.AnyURIObjectPropertyType
class cybox.common.properties.Base64Binary(value=None)[source]
XML binding class: cybox.bindings.cybox_common.Base64BinaryObjectPropertyType
class cybox.common.properties.Date(value=None, precision='day')[source]
XML binding class: cybox.bindings.cybox_common.DateObjectPropertyType
class cybox.common.properties.DateTime(value=None, precision='second')[source]
XML binding class: cybox.bindings.cybox_common.DateTimeObjectPropertyType
class cybox.common.properties.Double(value=None)[source]
XML binding class: cybox.bindings.cybox_common.DoubleObjectPropertyType
class cybox.common.properties.Duration(value=None)[source]
XML binding class: cybox.bindings.cybox_common.DurationObjectPropertyType
class cybox.common.properties.Float(value=None)[source]
XML binding class: cybox.bindings.cybox_common.FloatObjectPropertyType
class cybox.common.properties.HexBinary(value=None)[source]
XML binding class: cybox.bindings.cybox_common.HexBinaryObjectPropertyType
class cybox.common.properties.Integer(value=None)[source]
XML binding class: cybox.bindings.cybox_common.IntegerObjectPropertyType
class cybox.common.properties.Long(value=None)[source]
XML binding class: cybox.bindings.cybox_common.LongObjectPropertyType
class cybox.common.properties.Name(value=None)[source]
XML binding class: cybox.bindings.cybox_common.NameObjectPropertyType
class cybox.common.properties.NonNegativeInteger(value=None)[source]
XML binding class: cybox.bindings.cybox_common.NonNegativeIntegerObjectPropertyType
class cybox.common.properties.PositiveInteger(value=None)[source]
XML binding class: cybox.bindings.cybox_common.PositiveIntegerObjectPropertyType
class cybox.common.properties.String(value=None)[source]
XML binding class: cybox.bindings.cybox_common.StringObjectPropertyType
class cybox.common.properties.Time(value=None, precision='second')[source]
XML binding class: cybox.bindings.cybox_common.TimeObjectPropertyType
class cybox.common.properties.UnsignedInteger(value=None)[source]
XML binding class: cybox.bindings.cybox_common.UnsignedIntegerObjectPropertyType
class cybox.common.properties.UnsignedLong(value=None)[source]
XML binding class: cybox.bindings.cybox_common.UnsignedLongObjectPropertyType

Version: 2.1.0.13

cybox.common.structured_text module

class cybox.common.structured_text.StructuredText(value=None)[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.cybox_common.StructuredTextType
is_plain()[source]

Whether this can be represented as a string rather than a dictionary

Subclasses can override this to include their custom fields in this check:

return (super(..., self).is_plain() and self.other_field is None)
structuring_format
XML Binding class name: structuring_format
Dictionary key name: structuring_format
to_dict()[source]
value
XML Binding class name: valueOf_
Dictionary key name: value

Version: 2.1.0.13

cybox.common.time module

class cybox.common.time.Time(start_time=None, end_time=None, produced_time=None, received_time=None)[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.cybox_common.TimeType
end_time
XML Binding class name: End_Time
Dictionary key name: end_time
produced_time
XML Binding class name: Produced_Time
Dictionary key name: produced_time
received_time
XML Binding class name: Received_Time
Dictionary key name: received_time
start_time
XML Binding class name: Start_Time
Dictionary key name: start_time

Version: 2.1.0.13

cybox.common.tools module

class cybox.common.tools.ToolInformation(tool_name=None, tool_vendor=None)[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.cybox_common.ToolInformationType
description
XML Binding class name: Description
Dictionary key name: description
id_
XML Binding class name: id
Dictionary key name: id
idref
XML Binding class name: idref
Dictionary key name: idref
name
XML Binding class name: Name
Dictionary key name: name
service_pack
XML Binding class name: Service_Pack
Dictionary key name: service_pack
tool_hashes
XML Binding class name: Tool_Hashes
Dictionary key name: tool_hashes
type_

TypedField subclass for VocabString fields.

(List of values permitted)
XML Binding class name: Type
Dictionary key name: type
vendor
XML Binding class name: Vendor
Dictionary key name: vendor
version
XML Binding class name: Version
Dictionary key name: version
class cybox.common.tools.ToolInformationList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.cybox_common.ToolsInformationType
tool
(List of values permitted)
XML Binding class name: Tool
Dictionary key name: tool

Version: 2.1.0.13

cybox.common.vocabs module

class cybox.common.vocabs.ActionArgumentName(value=None)[source]

Bases: cybox.common.vocabs.VocabString

XML binding class: cybox.bindings.cybox_common.ControlledVocabularyStringType
class cybox.common.vocabs.ActionName(value=None)[source]

Bases: cybox.common.vocabs.VocabString

XML binding class: cybox.bindings.cybox_common.ControlledVocabularyStringType
class cybox.common.vocabs.ActionObjectAssociationType(value=None)[source]

Bases: cybox.common.vocabs.VocabString

XML binding class: cybox.bindings.cybox_common.ControlledVocabularyStringType
class cybox.common.vocabs.ActionRelationshipType(value=None)[source]

Bases: cybox.common.vocabs.VocabString

XML binding class: cybox.bindings.cybox_common.ControlledVocabularyStringType
class cybox.common.vocabs.ActionType(value=None)[source]

Bases: cybox.common.vocabs.VocabString

XML binding class: cybox.bindings.cybox_common.ControlledVocabularyStringType
class cybox.common.vocabs.CharacterEncoding(value=None)[source]

Bases: cybox.common.vocabs.VocabString

XML binding class: cybox.bindings.cybox_common.ControlledVocabularyStringType
class cybox.common.vocabs.EventType(value=None)[source]

Bases: cybox.common.vocabs.VocabString

XML binding class: cybox.bindings.cybox_common.ControlledVocabularyStringType
class cybox.common.vocabs.HashName(value=None)[source]

Bases: cybox.common.vocabs.VocabString

XML binding class: cybox.bindings.cybox_common.ControlledVocabularyStringType
class cybox.common.vocabs.InformationSourceType(value=None)[source]

Bases: cybox.common.vocabs.VocabString

XML binding class: cybox.bindings.cybox_common.ControlledVocabularyStringType
class cybox.common.vocabs.ObjectRelationship(value=None)[source]

Bases: cybox.common.vocabs.VocabString

XML binding class: cybox.bindings.cybox_common.ControlledVocabularyStringType
class cybox.common.vocabs.ObjectState(value=None)[source]

Bases: cybox.common.vocabs.VocabString

XML binding class: cybox.bindings.cybox_common.ControlledVocabularyStringType
class cybox.common.vocabs.ToolType(value=None)[source]

Bases: cybox.common.vocabs.VocabString

XML binding class: cybox.bindings.cybox_common.ControlledVocabularyStringType
class cybox.common.vocabs.VocabString(value=None)[source]

Bases: cybox.common.attribute_groups.PatternFieldGroup, mixbox.entities.Entity

XML binding class: cybox.bindings.cybox_common.ControlledVocabularyStringType
classmethod from_obj(cls_obj)[source]
is_plain()[source]

Whether the VocabString can be represented as a single value.

to_dict()[source]
to_obj(ns_info=None)[source]
value
XML Binding class name: valueOf_
Dictionary key name: value
vocab_name
XML Binding class name: vocab_name
Dictionary key name: vocab_name
vocab_reference
XML Binding class name: vocab_reference
Dictionary key name: vocab_reference
xsi_type
XML Binding class name: xsi_type
Dictionary key name: xsi:type
cybox.common.vocabs.register_vocab(cls)[source]

Register a VocabString subclass.

Also, calculate all the permitted values for class being decorated by adding an _ALLOWED_VALUES tuple of all the values of class members beginning with TERM_.

cybox.common.vocabs.validate_value(instance, value)[source]

CybOX Core

Modules located in the base cybox.core package

Note

Most objects from the CybOX Core schema can be implemented directly from the cybox.core package, rather than needing to remember which submodule they are defined in.

Version: 2.1.0.13

cybox.core package

Submodules

Version: 2.1.0.13

cybox.core.action module
class cybox.core.action.Action[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.cybox_core.ActionType
action_aliases
XML Binding class name: Action_Aliases
Dictionary key name: action_aliases
action_arguments
XML Binding class name: Action_Arguments
Dictionary key name: action_arguments
action_status
XML Binding class name: action_status
Dictionary key name: action_status
associated_objects
XML Binding class name: Associated_Objects
Dictionary key name: associated_objects
context
XML Binding class name: context
Dictionary key name: context
description
XML Binding class name: Description
Dictionary key name: description
discovery_method
XML Binding class name: Discovery_Method
Dictionary key name: discovery_method
frequency
XML Binding class name: Frequency
Dictionary key name: frequency
id_
XML Binding class name: id
Dictionary key name: id
idref
XML Binding class name: idref
Dictionary key name: idref
name

TypedField subclass for VocabString fields.

XML Binding class name: Name
Dictionary key name: name
ordinal_position
XML Binding class name: ordinal_position
Dictionary key name: ordinal_position
relationships
XML Binding class name: Relationships
Dictionary key name: relationships
timestamp
XML Binding class name: timestamp
Dictionary key name: timestamp
type_

TypedField subclass for VocabString fields.

XML Binding class name: Type
Dictionary key name: type
class cybox.core.action.ActionAliases(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.cybox_core.ActionAliasesType
action_alias
(List of values permitted)
Type: cybox.Unicode
XML Binding class name: Action_Alias
Dictionary key name: action_alias
class cybox.core.action.ActionArgument[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.cybox_core.ActionArgumentType
argument_name

TypedField subclass for VocabString fields.

XML Binding class name: Argument_Name
Dictionary key name: argument_name
argument_value
XML Binding class name: Argument_Value
Dictionary key name: argument_value
class cybox.core.action.ActionArguments(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.cybox_core.ActionArgumentsType
action_argument
(List of values permitted)
XML Binding class name: Action_Argument
Dictionary key name: action_argument
class cybox.core.action.ActionRelationship[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.cybox_core.ActionRelationshipType
action_references
(List of values permitted)
XML Binding class name: Action_Reference
Dictionary key name: action_reference
type

TypedField subclass for VocabString fields.

XML Binding class name: Type
Dictionary key name: type
class cybox.core.action.ActionRelationships(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.cybox_core.ActionRelationshipsType
relationship
(List of values permitted)
XML Binding class name: Relationship
Dictionary key name: relationship
class cybox.core.action.Actions(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.cybox_core.ActionsType
action
(List of values permitted)
XML Binding class name: Action
Dictionary key name: action
class cybox.core.action.AssociatedObjects(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.cybox_core.AssociatedObjectsType
associated_object
(List of values permitted)
XML Binding class name: Associated_Object
Dictionary key name: associated_object

Version: 2.1.0.13

cybox.core.action_reference module

CybOX Action Reference Class

class cybox.core.action_reference.ActionReference(action_id=None)[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.cybox_core.ActionReferenceType
action_id
XML Binding class name: action_id
Dictionary key name: action_id

Version: 2.1.0.13

cybox.core.associated_object module
class cybox.core.associated_object.AssociatedObject(defined_object=None, type_=None, association_type=None)[source]

Bases: cybox.core.object.Object

The CybOX Associated Object element.

Currently only supports the id, association_type and ObjectProperties properties

XML binding class: cybox.bindings.cybox_core.AssociatedObjectType
association_type

TypedField subclass for VocabString fields.

XML Binding class name: Association_Type
Dictionary key name: association_type

Version: 2.1.0.13

cybox.core.event module
class cybox.core.event.Event[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.cybox_core.EventType
actions
XML Binding class name: Actions
Dictionary key name: actions
description
XML Binding class name: Description
Dictionary key name: description
event
(List of values permitted)
XML Binding class name: Event
Dictionary key name: event
frequency
XML Binding class name: Frequency
Dictionary key name: frequency
id_
XML Binding class name: id
Dictionary key name: id
idref
XML Binding class name: idref
Dictionary key name: idref
observation_method
XML Binding class name: Observation_Method
Dictionary key name: observation_method
type_

TypedField subclass for VocabString fields.

XML Binding class name: Type
Dictionary key name: type

Version: 2.1.0.13

cybox.core.frequency module
class cybox.core.frequency.Frequency[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.cybox_core.FrequencyType
rate
XML Binding class name: rate
Dictionary key name: rate
scale
XML Binding class name: scale
Dictionary key name: scale
trend
XML Binding class name: trend
Dictionary key name: trend
units
XML Binding class name: units
Dictionary key name: units

Version: 2.1.0.13

cybox.core.object module
class cybox.core.object.DomainSpecificObjectProperties[source]

Bases: mixbox.entities.Entity

The Cybox DomainSpecificObjectProperties base class.

XML binding class: cybox.bindings.cybox_core.DomainSpecificObjectPropertiesType
to_dict()[source]
to_obj(ns_info=None)[source]
class cybox.core.object.Object(properties=None, type_=None, id_=None, idref=None)[source]

Bases: mixbox.entities.Entity

The CybOX Object element.

Currently only supports the following data members: - id_ - idref - properties - related_objects - domain specific object properties

XML binding class: cybox.bindings.cybox_core.ObjectType
domain_specific_object_properties
XML Binding class name: Domain_Specific_Object_Properties
Dictionary key name: domain_specific_object_properties
id_
XML Binding class name: id
Dictionary key name: id
idref
XML Binding class name: idref
Dictionary key name: idref
properties
XML Binding class name: Properties
Dictionary key name: properties
related_objects
XML Binding class name: Related_Objects
Dictionary key name: related_objects
class cybox.core.object.RelatedObject(*args, **kwargs)[source]

Bases: cybox.core.object.Object

XML binding class: cybox.bindings.cybox_core.RelatedObjectType
classmethod from_dict(cls_dict)[source]
classmethod from_obj(cls_obj)[source]
get_properties()[source]
relationship

TypedField subclass for VocabString fields.

XML Binding class name: Relationship
Dictionary key name: relationship
to_dict()[source]
to_obj(ns_info=None)[source]
class cybox.core.object.RelatedObjects(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.cybox_core.RelatedObjectsType
related_object
(List of values permitted)
XML Binding class name: Related_Object
Dictionary key name: related_object
cybox.core.object.add_external_class(klass, xsi_type)[source]

Adds a class implementation to this binding’s globals() dict.

These classes can be used to implement Properties, Domain_Specific_Object_Properties, or Defined_Effect fields on an Object.

Parameters:
  • klass (class) – Python class that implements the new type
  • xsi_type (str) – An xsi:type value corresponding to the klass.

Version: 2.1.0.13

cybox.core.observable module
class cybox.core.observable.Keywords(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.cybox_core.KeywordsType
keyword
(List of values permitted)
Type: cybox.Unicode
XML Binding class name: Keyword
Dictionary key name: keyword
class cybox.core.observable.Observable(item=None, id_=None, idref=None, title=None, description=None)[source]

Bases: mixbox.entities.Entity

A single Observable.

XML binding class: cybox.bindings.cybox_core.ObservableType
add_keyword(value)[source]
description
XML Binding class name: Description
Dictionary key name: description
event
XML Binding class name: Event
Dictionary key name: event
id_
XML Binding class name: id
Dictionary key name: id
idref
XML Binding class name: idref
Dictionary key name: idref
keywords
XML Binding class name: Keywords
Dictionary key name: keywords
object_
XML Binding class name: Object
Dictionary key name: object
observable_composition
XML Binding class name: Observable_Composition
Dictionary key name: observable_composition
observable_source
(List of values permitted)
XML Binding class name: Observable_Source
Dictionary key name: observable_source
pattern_fidelity
Type: cybox.core.pattern_fidelity.PatternFidelity
XML Binding class name: Pattern_Fidelity
Dictionary key name: pattern_fidelity
sighting_count
XML Binding class name: sighting_count
Dictionary key name: sighting_count
title
XML Binding class name: Title
Dictionary key name: title
class cybox.core.observable.ObservableComposition(operator='AND', observables=None)[source]

Bases: mixbox.entities.EntityList

The ObservableCompositionType entity defines a logical compositions of CybOX Observables. The combinatorial behavior is derived from the operator property.

XML binding class: cybox.bindings.cybox_core.ObservableCompositionType
add(observable)[source]
observables
(List of values permitted)
XML Binding class name: Observable
Dictionary key name: observables
operator
XML Binding class name: operator
Dictionary key name: operator
class cybox.core.observable.Observables(observables=None)[source]

Bases: mixbox.entities.EntityList

The root CybOX Observables object.

Pools are not currently supported.

XML binding class: cybox.bindings.cybox_core.ObservablesType
add(observable)[source]
observable_package_source
XML Binding class name: Observable_Package_Source
Dictionary key name: observable_package_source
observables
(List of values permitted)
XML Binding class name: Observable
Dictionary key name: observables
to_dict()[source]
to_obj(ns_info=None)[source]
cybox.core.observable.validate_event(instance, value)[source]
cybox.core.observable.validate_object(instance, value)[source]
cybox.core.observable.validate_observable_composition(instance, value)[source]
cybox.core.observable.validate_operator(instance, value)[source]

Version: 2.1.0.13

cybox.core.action module

class cybox.core.action.Action[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.cybox_core.ActionType
action_aliases
XML Binding class name: Action_Aliases
Dictionary key name: action_aliases
action_arguments
XML Binding class name: Action_Arguments
Dictionary key name: action_arguments
action_status
XML Binding class name: action_status
Dictionary key name: action_status
associated_objects
XML Binding class name: Associated_Objects
Dictionary key name: associated_objects
context
XML Binding class name: context
Dictionary key name: context
description
XML Binding class name: Description
Dictionary key name: description
discovery_method
XML Binding class name: Discovery_Method
Dictionary key name: discovery_method
frequency
XML Binding class name: Frequency
Dictionary key name: frequency
id_
XML Binding class name: id
Dictionary key name: id
idref
XML Binding class name: idref
Dictionary key name: idref
name

TypedField subclass for VocabString fields.

XML Binding class name: Name
Dictionary key name: name
ordinal_position
XML Binding class name: ordinal_position
Dictionary key name: ordinal_position
relationships
XML Binding class name: Relationships
Dictionary key name: relationships
timestamp
XML Binding class name: timestamp
Dictionary key name: timestamp
type_

TypedField subclass for VocabString fields.

XML Binding class name: Type
Dictionary key name: type
class cybox.core.action.ActionAliases(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.cybox_core.ActionAliasesType
action_alias
(List of values permitted)
Type: cybox.Unicode
XML Binding class name: Action_Alias
Dictionary key name: action_alias
class cybox.core.action.ActionArgument[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.cybox_core.ActionArgumentType
argument_name

TypedField subclass for VocabString fields.

XML Binding class name: Argument_Name
Dictionary key name: argument_name
argument_value
XML Binding class name: Argument_Value
Dictionary key name: argument_value
class cybox.core.action.ActionArguments(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.cybox_core.ActionArgumentsType
action_argument
(List of values permitted)
XML Binding class name: Action_Argument
Dictionary key name: action_argument
class cybox.core.action.ActionRelationship[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.cybox_core.ActionRelationshipType
action_references
(List of values permitted)
XML Binding class name: Action_Reference
Dictionary key name: action_reference
type

TypedField subclass for VocabString fields.

XML Binding class name: Type
Dictionary key name: type
class cybox.core.action.ActionRelationships(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.cybox_core.ActionRelationshipsType
relationship
(List of values permitted)
XML Binding class name: Relationship
Dictionary key name: relationship
class cybox.core.action.Actions(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.cybox_core.ActionsType
action
(List of values permitted)
XML Binding class name: Action
Dictionary key name: action
class cybox.core.action.AssociatedObjects(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.cybox_core.AssociatedObjectsType
associated_object
(List of values permitted)
XML Binding class name: Associated_Object
Dictionary key name: associated_object

Version: 2.1.0.13

cybox.core.action_reference module

CybOX Action Reference Class

class cybox.core.action_reference.ActionReference(action_id=None)[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.cybox_core.ActionReferenceType
action_id
XML Binding class name: action_id
Dictionary key name: action_id

Version: 2.1.0.13

cybox.core.associated_object module

class cybox.core.associated_object.AssociatedObject(defined_object=None, type_=None, association_type=None)[source]

Bases: cybox.core.object.Object

The CybOX Associated Object element.

Currently only supports the id, association_type and ObjectProperties properties

XML binding class: cybox.bindings.cybox_core.AssociatedObjectType
association_type

TypedField subclass for VocabString fields.

XML Binding class name: Association_Type
Dictionary key name: association_type

Version: 2.1.0.13

cybox.core.event module

class cybox.core.event.Event[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.cybox_core.EventType
actions
XML Binding class name: Actions
Dictionary key name: actions
description
XML Binding class name: Description
Dictionary key name: description
event
(List of values permitted)
XML Binding class name: Event
Dictionary key name: event
frequency
XML Binding class name: Frequency
Dictionary key name: frequency
id_
XML Binding class name: id
Dictionary key name: id
idref
XML Binding class name: idref
Dictionary key name: idref
observation_method
XML Binding class name: Observation_Method
Dictionary key name: observation_method
type_

TypedField subclass for VocabString fields.

XML Binding class name: Type
Dictionary key name: type

Version: 2.1.0.13

cybox.core.frequency module

class cybox.core.frequency.Frequency[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.cybox_core.FrequencyType
rate
XML Binding class name: rate
Dictionary key name: rate
scale
XML Binding class name: scale
Dictionary key name: scale
trend
XML Binding class name: trend
Dictionary key name: trend
units
XML Binding class name: units
Dictionary key name: units

Version: 2.1.0.13

cybox.core.object module

class cybox.core.object.DomainSpecificObjectProperties[source]

Bases: mixbox.entities.Entity

The Cybox DomainSpecificObjectProperties base class.

XML binding class: cybox.bindings.cybox_core.DomainSpecificObjectPropertiesType
to_dict()[source]
to_obj(ns_info=None)[source]
class cybox.core.object.Object(properties=None, type_=None, id_=None, idref=None)[source]

Bases: mixbox.entities.Entity

The CybOX Object element.

Currently only supports the following data members: - id_ - idref - properties - related_objects - domain specific object properties

XML binding class: cybox.bindings.cybox_core.ObjectType
domain_specific_object_properties
XML Binding class name: Domain_Specific_Object_Properties
Dictionary key name: domain_specific_object_properties
id_
XML Binding class name: id
Dictionary key name: id
idref
XML Binding class name: idref
Dictionary key name: idref
properties
XML Binding class name: Properties
Dictionary key name: properties
related_objects
XML Binding class name: Related_Objects
Dictionary key name: related_objects
class cybox.core.object.RelatedObject(*args, **kwargs)[source]

Bases: cybox.core.object.Object

XML binding class: cybox.bindings.cybox_core.RelatedObjectType
classmethod from_dict(cls_dict)[source]
classmethod from_obj(cls_obj)[source]
get_properties()[source]
relationship

TypedField subclass for VocabString fields.

XML Binding class name: Relationship
Dictionary key name: relationship
to_dict()[source]
to_obj(ns_info=None)[source]
class cybox.core.object.RelatedObjects(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.cybox_core.RelatedObjectsType
related_object
(List of values permitted)
XML Binding class name: Related_Object
Dictionary key name: related_object
cybox.core.object.add_external_class(klass, xsi_type)[source]

Adds a class implementation to this binding’s globals() dict.

These classes can be used to implement Properties, Domain_Specific_Object_Properties, or Defined_Effect fields on an Object.

Parameters:
  • klass (class) – Python class that implements the new type
  • xsi_type (str) – An xsi:type value corresponding to the klass.

Version: 2.1.0.13

cybox.core.observable module

class cybox.core.observable.Keywords(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.cybox_core.KeywordsType
keyword
(List of values permitted)
Type: cybox.Unicode
XML Binding class name: Keyword
Dictionary key name: keyword
class cybox.core.observable.Observable(item=None, id_=None, idref=None, title=None, description=None)[source]

Bases: mixbox.entities.Entity

A single Observable.

XML binding class: cybox.bindings.cybox_core.ObservableType
add_keyword(value)[source]
description
XML Binding class name: Description
Dictionary key name: description
event
XML Binding class name: Event
Dictionary key name: event
id_
XML Binding class name: id
Dictionary key name: id
idref
XML Binding class name: idref
Dictionary key name: idref
keywords
XML Binding class name: Keywords
Dictionary key name: keywords
object_
XML Binding class name: Object
Dictionary key name: object
observable_composition
XML Binding class name: Observable_Composition
Dictionary key name: observable_composition
observable_source
(List of values permitted)
XML Binding class name: Observable_Source
Dictionary key name: observable_source
pattern_fidelity
Type: cybox.core.pattern_fidelity.PatternFidelity
XML Binding class name: Pattern_Fidelity
Dictionary key name: pattern_fidelity
sighting_count
XML Binding class name: sighting_count
Dictionary key name: sighting_count
title
XML Binding class name: Title
Dictionary key name: title
class cybox.core.observable.ObservableComposition(operator='AND', observables=None)[source]

Bases: mixbox.entities.EntityList

The ObservableCompositionType entity defines a logical compositions of CybOX Observables. The combinatorial behavior is derived from the operator property.

XML binding class: cybox.bindings.cybox_core.ObservableCompositionType
add(observable)[source]
observables
(List of values permitted)
XML Binding class name: Observable
Dictionary key name: observables
operator
XML Binding class name: operator
Dictionary key name: operator
class cybox.core.observable.Observables(observables=None)[source]

Bases: mixbox.entities.EntityList

The root CybOX Observables object.

Pools are not currently supported.

XML binding class: cybox.bindings.cybox_core.ObservablesType
add(observable)[source]
observable_package_source
XML Binding class name: Observable_Package_Source
Dictionary key name: observable_package_source
observables
(List of values permitted)
XML Binding class name: Observable
Dictionary key name: observables
to_dict()[source]
to_obj(ns_info=None)[source]
cybox.core.observable.validate_event(instance, value)[source]
cybox.core.observable.validate_object(instance, value)[source]
cybox.core.observable.validate_observable_composition(instance, value)[source]
cybox.core.observable.validate_operator(instance, value)[source]

CybOX Objects

Modules located in the base cybox.objects package

Version: 2.1.0.13

cybox.objects package

Submodules

Version: 2.1.0.13

cybox.objects.account_object module
class cybox.objects.account_object.Account[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.account_object.AccountObjectType
authentication
(List of values permitted)
XML Binding class name: Authentication
Dictionary key name: authentication
creation_date
XML Binding class name: Creation_Date
Dictionary key name: creation_date
description
XML Binding class name: Description
Dictionary key name: description
disabled
XML Binding class name: disabled
Dictionary key name: disabled
domain
XML Binding class name: Domain
Dictionary key name: domain
last_accessed_time
XML Binding class name: Last_Accessed_Time
Dictionary key name: last_accessed_time
locked_out
XML Binding class name: locked_out
Dictionary key name: locked_out
modified_date
XML Binding class name: Modified_Date
Dictionary key name: modified_date
class cybox.objects.account_object.Authentication[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.account_object.AuthenticationType
authentication_data
XML Binding class name: Authentication_Data
Dictionary key name: authentication_data
authentication_token_protection_mechanism

TypedField subclass for VocabString fields.

XML Binding class name: Authentication_Token_Protection_Mechanism
Dictionary key name: authentication_token_protection_mechanism
authentication_type

TypedField subclass for VocabString fields.

XML Binding class name: Authentication_Type
Dictionary key name: authentication_type
structured_authentication_mechanism
XML Binding class name: Structured_Authentication_Mechanism
Dictionary key name: structured_authentication_mechanism
class cybox.objects.account_object.StructuredAuthenticationMechanism[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.account_object.StructuredAuthenticationMechanismType
description
XML Binding class name: Description
Dictionary key name: description

Version: 2.1.0.13

cybox.objects.address_object module
class cybox.objects.address_object.Address(address_value=None, category=None)[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.address_object.AddressObjectType
address_value
XML Binding class name: Address_Value
Dictionary key name: address_value
category
XML Binding class name: category
Dictionary key name: category
is_destination
XML Binding class name: is_destination
Dictionary key name: is_destination
is_source
XML Binding class name: is_source
Dictionary key name: is_source
is_spoofed
XML Binding class name: is_spoofed
Dictionary key name: is_spoofed
vlan_name
XML Binding class name: VLAN_Name
Dictionary key name: vlan_name
vlan_num
XML Binding class name: VLAN_Num
Dictionary key name: vlan_num
class cybox.objects.address_object.EmailAddress(addr_string=None)[source]

Bases: cybox.objects.address_object.Address

Convenience class for creating email addresses.

Note that this is not an actual CybOX type.

XML binding class: cybox.bindings.address_object.AddressObjectType
classmethod istypeof(obj)[source]

Version: 2.1.0.13

cybox.objects.api_object module
class cybox.objects.api_object.API[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.api_object.APIObjectType
address
XML Binding class name: Address
Dictionary key name: address
description
XML Binding class name: Description
Dictionary key name: description
function_name
XML Binding class name: Function_Name
Dictionary key name: function_name
normalized_function_name
XML Binding class name: Normalized_Function_Name
Dictionary key name: normalized_function_name
platform
XML Binding class name: Platform
Dictionary key name: platform

Version: 2.1.0.13

cybox.objects.archive_file_object module
class cybox.objects.archive_file_object.ArchiveFile[source]

Bases: cybox.objects.file_object.File

XML binding class: cybox.bindings.archive_file_object.ArchiveFileObjectType
archive_format
XML Binding class name: Archive_Format
Dictionary key name: archive_format
archived_file
(List of values permitted)
XML Binding class name: Archived_File
Dictionary key name: archived_file
comment
XML Binding class name: Comment
Dictionary key name: comment
decryption_key
XML Binding class name: Decryption_Key
Dictionary key name: decryption_key
encryption_algorithm
XML Binding class name: Encryption_Algorithm
Dictionary key name: encryption_algorithm
file_count
XML Binding class name: File_Count
Dictionary key name: file_count
version
XML Binding class name: Version
Dictionary key name: version

Version: 2.1.0.13

cybox.objects.artifact_object module
class cybox.objects.artifact_object.Artifact(data=None, type_=None)[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.artifact_object.ArtifactObjectType
content_type
XML Binding class name: content_type
Dictionary key name: content_type
content_type_version
XML Binding class name: content_type_version
Dictionary key name: content_type_version
classmethod from_dict(cls_dict)[source]
classmethod from_obj(cls_obj)[source]
hashes
XML Binding class name: Hashes
Dictionary key name: hashes
suspected_malicious
XML Binding class name: suspected_malicious
Dictionary key name: suspected_malicious
to_dict()[source]
to_obj(ns_info=None)[source]
type_
XML Binding class name: type_
Dictionary key name: type
class cybox.objects.artifact_object.Base64Encoding[source]

Bases: cybox.objects.artifact_object.Encoding

XML binding class: cybox.bindings.artifact_object.EncodingType
pack(data)[source]
unpack(packed_data)[source]
class cybox.objects.artifact_object.Bz2Compression[source]

Bases: cybox.objects.artifact_object.Compression

XML binding class: cybox.bindings.artifact_object.CompressionType
pack(data)[source]
unpack(packed_data)[source]
class cybox.objects.artifact_object.Compression(compression_mechanism=None)[source]

Bases: cybox.objects.artifact_object.Packaging

A Compression packaging layer

Currently only zlib and bz2 are supported. Also, compression_mechanism_ref is not currently supported.

XML binding class: cybox.bindings.artifact_object.CompressionType
compression_mechanism
XML Binding class name: compression_mechanism
Dictionary key name: compression_mechanism
compression_mechanism_ref
XML Binding class name: compression_mechanism_ref
Dictionary key name: compression_mechanism_ref
to_dict()[source]
class cybox.objects.artifact_object.Encoding[source]

Bases: cybox.objects.artifact_object.Packaging

An encoding packaging layer.

Currently only base64 with a standard alphabet is supported.

XML binding class: cybox.bindings.artifact_object.EncodingType
algorithm
XML Binding class name: algorithm
Dictionary key name: algorithm
to_dict()[source]
class cybox.objects.artifact_object.Encryption(encryption_mechanism=None, encryption_key=None)[source]

Bases: cybox.objects.artifact_object.Packaging

An encryption packaging layer.

XML binding class: cybox.bindings.artifact_object.EncryptionType
encryption_key
XML Binding class name: encryption_key
Dictionary key name: encryption_key
encryption_key_ref
XML Binding class name: encryption_key_ref
Dictionary key name: encryption_key_ref
encryption_mechanism
XML Binding class name: encryption_mechanism
Dictionary key name: encryption_mechanism
encryption_mechanism_ref
XML Binding class name: encryption_mechanism_ref
Dictionary key name: encryption_mechanism_ref
to_dict()[source]
class cybox.objects.artifact_object.Packaging[source]

Bases: mixbox.entities.Entity

An individual packaging layer.

XML binding class: cybox.bindings.artifact_object.PackagingType
pack(data)[source]

This should accept byte data and return byte data

unpack(packed_data)[source]

This should accept byte data and return byte data

class cybox.objects.artifact_object.PasswordProtectedZipEncryption(key=None)[source]

Bases: cybox.objects.artifact_object.Encryption

XML binding class: cybox.bindings.artifact_object.EncryptionType
unpack(packed_data)[source]
class cybox.objects.artifact_object.RawArtifact(value=None)[source]

Bases: cybox.common.properties.String

XML binding class: cybox.bindings.artifact_object.RawArtifactType
byte_order
XML Binding class name: byte_order
Dictionary key name: byte_order
class cybox.objects.artifact_object.XOREncryption(key=None)[source]

Bases: cybox.objects.artifact_object.Encryption

XML binding class: cybox.bindings.artifact_object.EncryptionType
pack(data)[source]
unpack(packed_data)[source]
class cybox.objects.artifact_object.ZlibCompression[source]

Bases: cybox.objects.artifact_object.Compression

XML binding class: cybox.bindings.artifact_object.CompressionType
pack(data)[source]
unpack(packed_data)[source]
cybox.objects.artifact_object.validate_artifact_type(instance, value)[source]

Version: 2.1.0.13

cybox.objects.as_object module
cybox.objects.as_object.AS

alias of AutonomousSystem | XML binding class: cybox.bindings.as_object.ASObjectType

class cybox.objects.as_object.AutonomousSystem[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.as_object.ASObjectType
handle
XML Binding class name: Handle
Dictionary key name: handle
name
XML Binding class name: Name
Dictionary key name: name
number
XML Binding class name: Number
Dictionary key name: number
regional_internet_registry
XML Binding class name: Regional_Internet_Registry
Dictionary key name: regional_internet_registry

Version: 2.1.0.13

cybox.objects.arp_cache_object module
class cybox.objects.arp_cache_object.ARPCache[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.arp_cache_object.ARPCacheObjectType
arp_cache_entry
(List of values permitted)
XML Binding class name: ARP_Cache_Entry
Dictionary key name: arp_cache_entry
class cybox.objects.arp_cache_object.ARPCacheEntry[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.arp_cache_object.ARPCacheEntryType
ip_address
XML Binding class name: IP_Address
Dictionary key name: ip_address
network_interface
XML Binding class name: Network_Interface
Dictionary key name: network_interface
physical_address
XML Binding class name: Physical_Address
Dictionary key name: physical_address
type_
XML Binding class name: Type
Dictionary key name: type

Version: 2.1.0.13

cybox.objects.code_object module
class cybox.objects.code_object.Code[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.code_object.CodeObjectType
code_language
XML Binding class name: Code_Language
Dictionary key name: code_language
code_segment
XML Binding class name: Code_Segment
Dictionary key name: code_segment
code_segment_xor
XML Binding class name: Code_Segment_XOR
Dictionary key name: code_segment_xor
description
XML Binding class name: Description
Dictionary key name: description
digital_signatures
XML Binding class name: Digital_Signatures
Dictionary key name: digital_signatures
discovery_method
XML Binding class name: Discovery_Method
Dictionary key name: discovery_method
extracted_features
XML Binding class name: Extracted_Features
Dictionary key name: extracted_features
processor_family
(List of values permitted)
XML Binding class name: Processor_Family
Dictionary key name: processor_family
purpose
XML Binding class name: Purpose
Dictionary key name: purpose
start_address
XML Binding class name: Start_Address
Dictionary key name: start_address
targeted_platforms
XML Binding class name: Targeted_Platforms
Dictionary key name: targeted_platforms
type_
XML Binding class name: Type
Dictionary key name: type
class cybox.objects.code_object.CodeSegmentXOR(value=None)[source]

Bases: cybox.common.properties.String

XML binding class: cybox.bindings.code_object.CodeSegmentXORType
is_plain()[source]
xor_pattern
XML Binding class name: xor_pattern
Dictionary key name: xor_pattern
class cybox.objects.code_object.TargetedPlatforms(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.code_object.TargetedPlatformsType
targeted_platform
(List of values permitted)
XML Binding class name: Targeted_Platform
Dictionary key name: targeted_platform

Version: 2.1.0.13

cybox.objects.device_object module
class cybox.objects.device_object.Device[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.device_object.DeviceObjectType
description
XML Binding class name: Description
Dictionary key name: description
device_type
XML Binding class name: Device_Type
Dictionary key name: device_type
firmware_version
XML Binding class name: Firmware_Version
Dictionary key name: firmware_version
manufacturer
XML Binding class name: Manufacturer
Dictionary key name: manufacturer
model
XML Binding class name: Model
Dictionary key name: model
serial_number
XML Binding class name: Serial_Number
Dictionary key name: serial_number

Version: 2.1.0.13

cybox.objects.disk_object module
class cybox.objects.disk_object.Disk[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.disk_object.DiskObjectType
disk_name
XML Binding class name: Disk_Name
Dictionary key name: disk_name
disk_size
XML Binding class name: Disk_Size
Dictionary key name: disk_size
free_space
XML Binding class name: Free_Space
Dictionary key name: free_space
partition_list
XML Binding class name: Partition_List
Dictionary key name: partition_list
type_
XML Binding class name: Type
Dictionary key name: type
class cybox.objects.disk_object.PartitionList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.disk_object.PartitionListType
partition
(List of values permitted)
XML Binding class name: Partition
Dictionary key name: partition

Version: 2.1.0.13

cybox.objects.disk_partition_object module
class cybox.objects.disk_partition_object.DiskPartition[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.disk_partition_object.DiskPartitionObjectType
created
XML Binding class name: Created
Dictionary key name: created
device_name
XML Binding class name: Device_Name
Dictionary key name: device_name
mount_point
XML Binding class name: Mount_Point
Dictionary key name: mount_point
partition_id
XML Binding class name: Partition_ID
Dictionary key name: partition_id
partition_length
XML Binding class name: Partition_Length
Dictionary key name: partition_length
partition_offset
XML Binding class name: Partition_Offset
Dictionary key name: partition_offset
space_left
XML Binding class name: Space_Left
Dictionary key name: space_left
space_used
XML Binding class name: Space_Used
Dictionary key name: space_used
total_space
XML Binding class name: Total_Space
Dictionary key name: total_space
type_
XML Binding class name: Type
Dictionary key name: type

Version: 2.1.0.13

cybox.objects.dns_cache_object module
class cybox.objects.dns_cache_object.DNSCache[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.dns_cache_object.DNSCacheObjectType
dns_cache_entry
(List of values permitted)
XML Binding class name: DNS_Cache_Entry
Dictionary key name: dns_cache_entry
class cybox.objects.dns_cache_object.DNSCacheEntry[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.dns_cache_object.DNSCacheEntryType
dns_entry
XML Binding class name: DNS_Entry
Dictionary key name: dns_entry
ttl
XML Binding class name: TTL
Dictionary key name: ttl

Version: 2.1.0.13

cybox.objects.dns_query_object module
class cybox.objects.dns_query_object.DNSQuery[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.dns_query_object.DNSQueryObjectType
additional_records
XML Binding class name: Additional_Records
Dictionary key name: additional_records
answer_resource_records
XML Binding class name: Answer_Resource_Records
Dictionary key name: answer_resource_records
authority_resource_records
XML Binding class name: Authority_Resource_Records
Dictionary key name: authority_resource_records
date_ran
XML Binding class name: Date_Ran
Dictionary key name: date_ran
question
XML Binding class name: Question
Dictionary key name: question
service_used
XML Binding class name: Service_Used
Dictionary key name: service_used
successful
XML Binding class name: successful
Dictionary key name: successful
transaction_id
XML Binding class name: Transaction_ID
Dictionary key name: transaction_id
class cybox.objects.dns_query_object.DNSQuestion[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.dns_query_object.DNSQuestionType
qclass
XML Binding class name: QClass
Dictionary key name: qclass
qname
XML Binding class name: QName
Dictionary key name: qname
qtype
XML Binding class name: QType
Dictionary key name: qtype
class cybox.objects.dns_query_object.DNSResourceRecords(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.dns_query_object.DNSResourceRecordsType
resource_record
(List of values permitted)
XML Binding class name: Resource_Record
Dictionary key name: resource_record

Version: 2.1.0.13

cybox.objects.dns_record_object module
class cybox.objects.dns_record_object.DNSRecord[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.dns_record_object.DNSRecordObjectType
address_class
XML Binding class name: Address_Class
Dictionary key name: address_class
data_length
XML Binding class name: Data_Length
Dictionary key name: data_length
description
XML Binding class name: Description
Dictionary key name: description
domain_name
XML Binding class name: Domain_Name
Dictionary key name: domain_name
entry_type
XML Binding class name: Entry_Type
Dictionary key name: entry_type
flags
XML Binding class name: Flags
Dictionary key name: flags
ip_address
XML Binding class name: IP_Address
Dictionary key name: ip_address
queried_date
XML Binding class name: Queried_Date
Dictionary key name: queried_date
record_data
XML Binding class name: Record_Data
Dictionary key name: record_data
record_name
XML Binding class name: Record_Name
Dictionary key name: record_name
record_type
XML Binding class name: Record_Type
Dictionary key name: record_type
ttl
XML Binding class name: TTL
Dictionary key name: ttl

Version: 2.1.0.13

cybox.objects.domain_name_object module
class cybox.objects.domain_name_object.DomainName[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.domain_name_object.DomainNameObjectType
type_
XML Binding class name: type_
Dictionary key name: type
value
XML Binding class name: Value
Dictionary key name: value

Version: 2.1.0.13

cybox.objects.email_message_object module
class cybox.objects.email_message_object.AttachmentReference(object_reference=None)[source]

Bases: cybox.objects.email_message_object._Reference, mixbox.entities.Entity

XML binding class: cybox.bindings.email_message_object.AttachmentReferenceType
class cybox.objects.email_message_object.Attachments(*args)[source]

Bases: cybox.objects.email_message_object._ReferenceList, mixbox.entities.EntityList

XML binding class: cybox.bindings.email_message_object.AttachmentsType
file
(List of values permitted)
XML Binding class name: File
Dictionary key name: file
class cybox.objects.email_message_object.EmailHeader[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.email_message_object.EmailHeaderType
bcc
XML Binding class name: BCC
Dictionary key name: bcc
boundary
XML Binding class name: Boundary
Dictionary key name: boundary
cc
XML Binding class name: CC
Dictionary key name: cc
content_type
XML Binding class name: Content_Type
Dictionary key name: content_type
date
XML Binding class name: Date
Dictionary key name: date
errors_to
XML Binding class name: Errors_To
Dictionary key name: errors_to
from_
XML Binding class name: From
Dictionary key name: from
in_reply_to
XML Binding class name: In_Reply_To
Dictionary key name: in_reply_to
message_id
XML Binding class name: Message_ID
Dictionary key name: message_id
mime_version
XML Binding class name: MIME_Version
Dictionary key name: mime_version
precedence
XML Binding class name: Precedence
Dictionary key name: precedence
received_lines
XML Binding class name: Received_Lines
Dictionary key name: received_lines
reply_to
XML Binding class name: Reply_To
Dictionary key name: reply_to
sender
XML Binding class name: Sender
Dictionary key name: sender
subject
XML Binding class name: Subject
Dictionary key name: subject
to
XML Binding class name: To
Dictionary key name: to
user_agent
XML Binding class name: User_Agent
Dictionary key name: user_agent
x_mailer
XML Binding class name: X_Mailer
Dictionary key name: x_mailer
x_originating_ip
XML Binding class name: X_Originating_IP
Dictionary key name: x_originating_ip
x_priority
XML Binding class name: X_Priority
Dictionary key name: x_priority
class cybox.objects.email_message_object.EmailMessage[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.email_message_object.EmailMessageObjectType
attachments
XML Binding class name: Attachments
Dictionary key name: attachments
email_server
XML Binding class name: Email_Server
Dictionary key name: email_server
header
XML Binding class name: Header
Dictionary key name: header
XML Binding class name: Links
Dictionary key name: links
raw_body
XML Binding class name: Raw_Body
Dictionary key name: raw_body
raw_header
XML Binding class name: Raw_Header
Dictionary key name: raw_header
class cybox.objects.email_message_object.EmailRecipients(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.email_message_object.EmailRecipientsType
recipient
(List of values permitted)
XML Binding class name: Recipient
Dictionary key name: recipient
class cybox.objects.email_message_object.LinkReference(object_reference=None)[source]

Bases: cybox.objects.email_message_object._Reference, mixbox.entities.Entity

XML binding class: cybox.bindings.email_message_object.LinkReferenceType

Bases: cybox.objects.email_message_object._ReferenceList, mixbox.entities.EntityList

XML binding class: cybox.bindings.email_message_object.LinksType
(List of values permitted)
XML Binding class name: Link
Dictionary key name: link
class cybox.objects.email_message_object.ReceivedLine[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.email_message_object.EmailReceivedLineType
by
XML Binding class name: By
Dictionary key name: by
for_
XML Binding class name: For
Dictionary key name: for
from_
XML Binding class name: From
Dictionary key name: from
id_
XML Binding class name: ID
Dictionary key name: id
timestamp
XML Binding class name: Timestamp
Dictionary key name: timestamp
via
XML Binding class name: Via
Dictionary key name: via
with_
XML Binding class name: With
Dictionary key name: with
class cybox.objects.email_message_object.ReceivedLineList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.email_message_object.EmailReceivedLineListType
received
(List of values permitted)
XML Binding class name: Received
Dictionary key name: received

Version: 2.1.0.13

cybox.objects.file_object module
class cybox.objects.file_object.EPJumpCode[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.file_object.EPJumpCodeType
depth
XML Binding class name: Depth
Dictionary key name: depth
opcodes
XML Binding class name: Opcodes
Dictionary key name: opcodes
class cybox.objects.file_object.EntryPointSignature[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.file_object.EntryPointSignatureType
name
XML Binding class name: Name
Dictionary key name: name
type_
XML Binding class name: Type
Dictionary key name: type
class cybox.objects.file_object.EntryPointSignatureList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.file_object.EntryPointSignatureListType
entry_point_signature
(List of values permitted)
XML Binding class name: Entry_Point_Signature
Dictionary key name: entry_point_signature
class cybox.objects.file_object.File[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.file_object.FileObjectType
accessed_time
XML Binding class name: Accessed_Time
Dictionary key name: accessed_time
add_hash(hash_)[source]
byte_runs
XML Binding class name: Byte_Runs
Dictionary key name: byte_runs
compression_comment
XML Binding class name: Compression_Comment
Dictionary key name: compression_comment
compression_method
XML Binding class name: Compression_Method
Dictionary key name: compression_method
compression_version
XML Binding class name: Compression_Version
Dictionary key name: compression_version
created_time
XML Binding class name: Created_Time
Dictionary key name: created_time
decryption_key
XML Binding class name: Decryption_Key
Dictionary key name: decryption_key
device_path
XML Binding class name: Device_Path
Dictionary key name: device_path
digital_signatures
XML Binding class name: Digital_Signatures
Dictionary key name: digital_signatures
encryption_algorithm
XML Binding class name: Encryption_Algorithm
Dictionary key name: encryption_algorithm
extracted_features
XML Binding class name: Extracted_Features
Dictionary key name: extracted_features
file_attributes_list
XML Binding class name: File_Attributes_List
Dictionary key name: file_attributes_list
file_extension
XML Binding class name: File_Extension
Dictionary key name: file_extension
file_format
XML Binding class name: File_Format
Dictionary key name: file_format
file_name
XML Binding class name: File_Name
Dictionary key name: file_name
file_path
XML Binding class name: File_Path
Dictionary key name: file_path
full_path
XML Binding class name: Full_Path
Dictionary key name: full_path
hashes
XML Binding class name: Hashes
Dictionary key name: hashes
is_masqueraded
XML Binding class name: is_masqueraded
Dictionary key name: is_masqueraded
is_packed
XML Binding class name: is_packed
Dictionary key name: is_packed
magic_number
XML Binding class name: Magic_Number
Dictionary key name: magic_number
modified_time
XML Binding class name: Modified_Time
Dictionary key name: modified_time
packer_list
XML Binding class name: Packer_List
Dictionary key name: packer_list
peak_entropy
XML Binding class name: Peak_Entropy
Dictionary key name: peak_entropy
permissions
XML Binding class name: Permissions
Dictionary key name: permissions
size_in_bytes
XML Binding class name: Size_In_Bytes
Dictionary key name: size_in_bytes
XML Binding class name: Sym_Links
Dictionary key name: sym_links
user_owner
XML Binding class name: User_Owner
Dictionary key name: user_owner
class cybox.objects.file_object.FileAttribute[source]

Bases: mixbox.entities.Entity

An abstract class for file attributes.

XML binding class: cybox.bindings.file_object.FileAttributeType
class cybox.objects.file_object.FilePath(value=None)[source]

Bases: cybox.common.properties.String

XML binding class: cybox.bindings.file_object.FilePathType
fully_qualified
XML Binding class name: fully_qualified
Dictionary key name: fully_qualified
is_plain()[source]
class cybox.objects.file_object.FilePermissions[source]

Bases: mixbox.entities.Entity

An abstract class for file permissions.

XML binding class: cybox.bindings.file_object.FilePermissionsType
class cybox.objects.file_object.Packer[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.file_object.PackerType
detected_entrypoint_signatures
XML Binding class name: Detected_Entrypoint_Signatures
Dictionary key name: detected_entrypoint_signatures
entry_point
XML Binding class name: Entry_Point
Dictionary key name: entry_point
ep_jump_codes
XML Binding class name: EP_Jump_Codes
Dictionary key name: ep_jump_codes
name
XML Binding class name: Name
Dictionary key name: name
signature
XML Binding class name: Signature
Dictionary key name: signature
type_
XML Binding class name: Type
Dictionary key name: type
version
XML Binding class name: Version
Dictionary key name: version
class cybox.objects.file_object.PackerList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.file_object.PackerListType
packer
(List of values permitted)
XML Binding class name: Packer
Dictionary key name: packer

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.file_object.SymLinksListType
(List of values permitted)
XML Binding class name: Sym_Link
Dictionary key name: sym_link

Version: 2.1.0.13

cybox.objects.gui_dialogbox_object module
class cybox.objects.gui_dialogbox_object.GUIDialogbox[source]

Bases: cybox.objects.gui_object.GUI

XML binding class: cybox.bindings.gui_dialogbox_object.GUIDialogboxObjectType
box_caption
XML Binding class name: Box_Caption
Dictionary key name: box_caption
box_text
XML Binding class name: Box_Text
Dictionary key name: box_text

Version: 2.1.0.13

cybox.objects.gui_object module
class cybox.objects.gui_object.GUI[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.gui_object.GUIObjectType
height
XML Binding class name: Height
Dictionary key name: height
width
XML Binding class name: Width
Dictionary key name: width

Version: 2.1.0.13

cybox.objects.gui_window_object module
class cybox.objects.gui_window_object.GUIWindow[source]

Bases: cybox.objects.gui_object.GUI

XML binding class: cybox.bindings.gui_window_object.GUIWindowObjectType
owner_window
XML Binding class name: Owner_Window
Dictionary key name: owner_window
parent_window
XML Binding class name: Parent_Window
Dictionary key name: parent_window
window_display_name
XML Binding class name: Window_Display_Name
Dictionary key name: window_display_name

Version: 2.1.0.13

cybox.objects.hostname_object module
class cybox.objects.hostname_object.Hostname[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.hostname_object.HostnameObjectType
hostname_value
XML Binding class name: Hostname_Value
Dictionary key name: hostname_value
is_domain_name
XML Binding class name: is_domain_name
Dictionary key name: is_domain_name
naming_system
(List of values permitted)
XML Binding class name: Naming_System
Dictionary key name: naming_system

Version: 2.1.0.13

cybox.objects.http_session_object module
class cybox.objects.http_session_object.HTTPClientRequest[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.http_session_object.HTTPClientRequestType
http_message_body
XML Binding class name: HTTP_Message_Body
Dictionary key name: http_message_body
http_request_header
XML Binding class name: HTTP_Request_Header
Dictionary key name: http_request_header
http_request_line
XML Binding class name: HTTP_Request_Line
Dictionary key name: http_request_line
class cybox.objects.http_session_object.HTTPMessage[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.http_session_object.HTTPMessageType
length
XML Binding class name: Length
Dictionary key name: length
message_body
XML Binding class name: Message_Body
Dictionary key name: message_body
class cybox.objects.http_session_object.HTTPRequestHeader[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.http_session_object.HTTPRequestHeaderType
parsed_header
XML Binding class name: Parsed_Header
Dictionary key name: parsed_header
raw_header
XML Binding class name: Raw_Header
Dictionary key name: raw_header
class cybox.objects.http_session_object.HTTPRequestHeaderFields[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.http_session_object.HTTPRequestHeaderFieldsType
accept
XML Binding class name: Accept
Dictionary key name: accept
accept_charset
XML Binding class name: Accept_Charset
Dictionary key name: accept_charset
accept_datetime
XML Binding class name: Accept_Datetime
Dictionary key name: accept_datetime
accept_encoding
XML Binding class name: Accept_Encoding
Dictionary key name: accept_encoding
accept_language
XML Binding class name: Accept_Language
Dictionary key name: accept_language
authorization
XML Binding class name: Authorization
Dictionary key name: authorization
cache_control
XML Binding class name: Cache_Control
Dictionary key name: cache_control
connection
XML Binding class name: Connection
Dictionary key name: connection
content_length
XML Binding class name: Content_Length
Dictionary key name: content_length
content_md5
XML Binding class name: Content_MD5
Dictionary key name: content_md5
content_type
XML Binding class name: Content_Type
Dictionary key name: content_type
cookie
XML Binding class name: Cookie
Dictionary key name: cookie
date
XML Binding class name: Date
Dictionary key name: date
dnt
XML Binding class name: DNT
Dictionary key name: dnt
expect
XML Binding class name: Expect
Dictionary key name: expect
from_
XML Binding class name: From
Dictionary key name: from
host
XML Binding class name: Host
Dictionary key name: host
if_match
XML Binding class name: If_Match
Dictionary key name: if_match
if_modified_since
XML Binding class name: If_Modified_Since
Dictionary key name: if_modified_since
if_none_match
XML Binding class name: If_None_Match
Dictionary key name: if_none_match
if_range
XML Binding class name: If_Range
Dictionary key name: if_range
if_unmodified_since
XML Binding class name: If_Unmodified_Since
Dictionary key name: if_unmodified_since
max_forwards
XML Binding class name: Max_Forwards
Dictionary key name: max_forwards
pragma
XML Binding class name: Pragma
Dictionary key name: pragma
proxy_authorization
XML Binding class name: Proxy_Authorization
Dictionary key name: proxy_authorization
range_
XML Binding class name: Range
Dictionary key name: range
referer
XML Binding class name: Referer
Dictionary key name: referer
te
XML Binding class name: TE
Dictionary key name: te
user_agent
XML Binding class name: User_Agent
Dictionary key name: user_agent
via
XML Binding class name: Via
Dictionary key name: via
warning
XML Binding class name: Warning
Dictionary key name: warning
x_att_deviceid
XML Binding class name: X_ATT_DeviceId
Dictionary key name: x_att_deviceid
x_forwarded_for
XML Binding class name: X_Forwarded_For
Dictionary key name: x_forwarded_for
x_forwarded_proto
XML Binding class name: X_Forwarded_Proto
Dictionary key name: x_forwarded_proto
x_requested_with
XML Binding class name: X_Requested_With
Dictionary key name: x_requested_with
x_wap_profile
XML Binding class name: X_Wap_Profile
Dictionary key name: x_wap_profile
class cybox.objects.http_session_object.HTTPRequestLine[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.http_session_object.HTTPRequestLineType
http_method
XML Binding class name: HTTP_Method
Dictionary key name: http_method
value
XML Binding class name: Value
Dictionary key name: value
version
XML Binding class name: Version
Dictionary key name: version
class cybox.objects.http_session_object.HTTPRequestResponse[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.http_session_object.HTTPRequestResponseType
http_client_request
XML Binding class name: HTTP_Client_Request
Dictionary key name: http_client_request
http_provisional_server_response
XML Binding class name: HTTP_Provisional_Server_Response
Dictionary key name: http_provisional_server_response
http_server_response
XML Binding class name: HTTP_Server_Response
Dictionary key name: http_server_response
ordinal_position
XML Binding class name: ordinal_position
Dictionary key name: ordinal_position
class cybox.objects.http_session_object.HTTPResponseHeader[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.http_session_object.HTTPResponseHeaderType
parsed_header
XML Binding class name: Parsed_Header
Dictionary key name: parsed_header
raw_header
XML Binding class name: Raw_Header
Dictionary key name: raw_header
class cybox.objects.http_session_object.HTTPResponseHeaderFields[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.http_session_object.HTTPResponseHeaderFieldsType
accept_ranges
XML Binding class name: Accept_Ranges
Dictionary key name: accept_ranges
access_control_allow_origin
XML Binding class name: Access_Control_Allow_Origin
Dictionary key name: access_control_allow_origin
age
XML Binding class name: Age
Dictionary key name: age
cache_control
XML Binding class name: Cache_Control
Dictionary key name: cache_control
connection
XML Binding class name: Connection
Dictionary key name: connection
content_disposition
XML Binding class name: Content_Disposition
Dictionary key name: content_disposition
content_encoding
XML Binding class name: Content_Encoding
Dictionary key name: content_encoding
content_language
XML Binding class name: Content_Language
Dictionary key name: content_language
content_length
XML Binding class name: Content_Length
Dictionary key name: content_length
content_location
XML Binding class name: Content_Location
Dictionary key name: content_location
content_md5
XML Binding class name: Content_MD5
Dictionary key name: content_md5
content_range
XML Binding class name: Content_Range
Dictionary key name: content_range
content_type
XML Binding class name: Content_Type
Dictionary key name: content_type
date
XML Binding class name: Date
Dictionary key name: date
etag
XML Binding class name: ETag
Dictionary key name: etag
expires
XML Binding class name: Expires
Dictionary key name: expires
last_modified
XML Binding class name: Last_Modified
Dictionary key name: last_modified
XML Binding class name: Link
Dictionary key name: link
location
XML Binding class name: Location
Dictionary key name: location
p3p
XML Binding class name: P3P
Dictionary key name: p3p
pragma
XML Binding class name: Pragma
Dictionary key name: pragma
proxy_authenticate
XML Binding class name: Proxy_Authenticate
Dictionary key name: proxy_authenticate
refresh
XML Binding class name: Refresh
Dictionary key name: refresh
retry_after
XML Binding class name: Retry_After
Dictionary key name: retry_after
server
XML Binding class name: Server
Dictionary key name: server
XML Binding class name: Set_Cookie
Dictionary key name: set_cookie
strict_transport_security
XML Binding class name: Strict_Transport_Security
Dictionary key name: strict_transport_security
trailer
XML Binding class name: Trailer
Dictionary key name: trailer
transfer_encoding
XML Binding class name: Transfer_Encoding
Dictionary key name: transfer_encoding
vary
XML Binding class name: Vary
Dictionary key name: vary
via
XML Binding class name: Via
Dictionary key name: via
warning
XML Binding class name: Warning
Dictionary key name: warning
www_authenticate
XML Binding class name: WWW_Authenticate
Dictionary key name: www_authenticate
x_content_type_options
XML Binding class name: X_Content_Type_Options
Dictionary key name: x_content_type_options
x_frame_options
XML Binding class name: X_Frame_Options
Dictionary key name: x_frame_options
x_powered_by
XML Binding class name: X_Powered_By
Dictionary key name: x_powered_by
x_ua_compatible
XML Binding class name: X_UA_Compatible
Dictionary key name: x_ua_compatible
x_xss_protection
XML Binding class name: X_XSS_Protection
Dictionary key name: x_xss_protection
class cybox.objects.http_session_object.HTTPServerResponse[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.http_session_object.HTTPServerResponseType
http_message_body
XML Binding class name: HTTP_Message_Body
Dictionary key name: http_message_body
http_response_header
XML Binding class name: HTTP_Response_Header
Dictionary key name: http_response_header
http_status_line
XML Binding class name: HTTP_Status_Line
Dictionary key name: http_status_line
class cybox.objects.http_session_object.HTTPSession[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.http_session_object.HTTPSessionObjectType
http_request_response
(List of values permitted)
XML Binding class name: HTTP_Request_Response
Dictionary key name: http_request_response
class cybox.objects.http_session_object.HTTPStatusLine[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.http_session_object.HTTPStatusLineType
reason_phrase
XML Binding class name: Reason_Phrase
Dictionary key name: reason_phrase
status_code
XML Binding class name: Status_Code
Dictionary key name: status_code
version
XML Binding class name: Version
Dictionary key name: version
class cybox.objects.http_session_object.HostField[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.http_session_object.HostFieldType
domain_name
XML Binding class name: Domain_Name
Dictionary key name: domain_name
port
XML Binding class name: Port
Dictionary key name: port

Version: 2.1.0.13

cybox.objects.image_file_object module
class cybox.objects.image_file_object.ImageFile[source]

Bases: cybox.objects.file_object.File

XML binding class: cybox.bindings.image_file_object.ImageFileObjectType
bits_per_pixel
XML Binding class name: Bits_Per_Pixel
Dictionary key name: bits_per_pixel
compression_algorithm
XML Binding class name: Compression_Algorithm
Dictionary key name: compression_algorithm
image_file_format
XML Binding class name: Image_File_Format
Dictionary key name: image_file_format
image_height
XML Binding class name: Image_Height
Dictionary key name: image_height
image_is_compressed
XML Binding class name: image_is_compressed
Dictionary key name: image_is_compressed
image_width
XML Binding class name: Image_Width
Dictionary key name: image_width

Version: 2.1.0.13

cybox.objects.library_object module
class cybox.objects.library_object.Library[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.library_object.LibraryObjectType
base_address
XML Binding class name: Base_Address
Dictionary key name: base_address
extracted_features
XML Binding class name: Extracted_Features
Dictionary key name: extracted_features
name
XML Binding class name: Name
Dictionary key name: name
path
XML Binding class name: Path
Dictionary key name: path
size
XML Binding class name: Size
Dictionary key name: size
type_
XML Binding class name: Type
Dictionary key name: type
version
XML Binding class name: Version
Dictionary key name: version

Version: 2.1.0.13

Version: 2.1.0.13

cybox.objects.linux_package_object module
class cybox.objects.linux_package_object.LinuxPackage[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.linux_package_object.LinuxPackageObjectType
architecture

TypedField subclass for VocabString fields.

XML Binding class name: Architecture
Dictionary key name: architecture
category
XML Binding class name: Category
Dictionary key name: category
description
XML Binding class name: Description
Dictionary key name: description
epoch
XML Binding class name: Epoch
Dictionary key name: epoch
evr
XML Binding class name: EVR
Dictionary key name: evr
name
XML Binding class name: Name
Dictionary key name: name
release
XML Binding class name: Release
Dictionary key name: release
vendor
XML Binding class name: Vendor
Dictionary key name: vendor
version
XML Binding class name: Version
Dictionary key name: version
class cybox.objects.linux_package_object.LinuxPackageArchitecture(value=None)[source]

Bases: cybox.common.vocabs.VocabString

XML binding class: cybox.bindings.cybox_common.ControlledVocabularyStringType

Version: 2.1.0.13

cybox.objects.memory_object module
class cybox.objects.memory_object.Memory[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.memory_object.MemoryObjectType
block_type
XML Binding class name: Block_Type
Dictionary key name: block_type
extracted_features
XML Binding class name: Extracted_Features
Dictionary key name: extracted_features
hashes
XML Binding class name: Hashes
Dictionary key name: hashes
is_injected
XML Binding class name: is_injected
Dictionary key name: is_injected
is_mapped
XML Binding class name: is_mapped
Dictionary key name: is_mapped
is_protected
XML Binding class name: is_protected
Dictionary key name: is_protected
is_volatile
XML Binding class name: is_volatile
Dictionary key name: is_volatile
memory_source
XML Binding class name: Memory_Source
Dictionary key name: memory_source
name
XML Binding class name: Name
Dictionary key name: name
region_end_address
XML Binding class name: Region_End_Address
Dictionary key name: region_end_address
region_size
XML Binding class name: Region_Size
Dictionary key name: region_size
region_start_address
XML Binding class name: Region_Start_Address
Dictionary key name: region_start_address

Version: 2.1.0.13

cybox.objects.mutex_object module
class cybox.objects.mutex_object.Mutex[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.mutex_object.MutexObjectType
name
XML Binding class name: Name
Dictionary key name: name
named
XML Binding class name: named
Dictionary key name: named

Version: 2.1.0.13

cybox.objects.network_connection_object module
class cybox.objects.network_connection_object.Layer7Connections[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_connection_object.Layer7ConnectionsType
dns_query
(List of values permitted)
XML Binding class name: DNS_Query
Dictionary key name: dns_query
http_session
XML Binding class name: HTTP_Session
Dictionary key name: http_session
class cybox.objects.network_connection_object.NetworkConnection[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.network_connection_object.NetworkConnectionObjectType
creation_time
XML Binding class name: Creation_Time
Dictionary key name: creation_time
destination_socket_address
XML Binding class name: Destination_Socket_Address
Dictionary key name: destination_socket_address
destination_tcp_state
XML Binding class name: Destination_TCP_State
Dictionary key name: destination_tcp_state
layer3_protocol
XML Binding class name: Layer3_Protocol
Dictionary key name: layer3_protocol
layer4_protocol
XML Binding class name: Layer4_Protocol
Dictionary key name: layer4_protocol
layer7_connections
XML Binding class name: Layer7_Connections
Dictionary key name: layer7_connections
layer7_protocol
XML Binding class name: Layer7_Protocol
Dictionary key name: layer7_protocol
source_socket_address
XML Binding class name: Source_Socket_Address
Dictionary key name: source_socket_address
source_tcp_state
XML Binding class name: Source_TCP_State
Dictionary key name: source_tcp_state
tls_used
XML Binding class name: tls_used
Dictionary key name: tls_used

Version: 2.1.0.13

cybox.objects.network_packet_object module
class cybox.objects.network_packet_object.ARP[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.ARPType
hardware_addr_size
XML Binding class name: Hardware_Addr_Size
Dictionary key name: hardware_addr_size
hardware_addr_type
XML Binding class name: Hardware_Addr_Type
Dictionary key name: hardware_addr_type
op_type
XML Binding class name: Op_Type
Dictionary key name: op_type
proto_addr_size
XML Binding class name: Proto_Addr_Size
Dictionary key name: proto_addr_size
proto_addr_type
XML Binding class name: Proto_Addr_Type
Dictionary key name: proto_addr_type
recip_hardware_addr
XML Binding class name: Recip_Hardware_Addr
Dictionary key name: recip_hardware_addr
recip_protocol_addr
XML Binding class name: Recip_Protocol_Addr
Dictionary key name: recip_protocol_addr
sender_hardware_addr
XML Binding class name: Sender_Hardware_Addr
Dictionary key name: sender_hardware_addr
sender_protocol_addr
XML Binding class name: Sender_Protocol_Addr
Dictionary key name: sender_protocol_addr
class cybox.objects.network_packet_object.AuthenticationHeader[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.AuthenticationHeaderType
authentication_data
XML Binding class name: Authentication_Data
Dictionary key name: authentication_data
header_ext_len
XML Binding class name: Header_Ext_Len
Dictionary key name: header_ext_len
next_header
XML Binding class name: Next_Header
Dictionary key name: next_header
security_parameters_index
XML Binding class name: Security_Parameters_Index
Dictionary key name: security_parameters_index
sequence_number
XML Binding class name: Sequence_Number
Dictionary key name: sequence_number
class cybox.objects.network_packet_object.DestinationOptions[source]

Bases: cybox.objects.network_packet_object._IPv6ExtHeader

XML binding class: cybox.bindings.network_packet_object.DestinationOptionsType
class cybox.objects.network_packet_object.EncapsulatingSecurityPayload[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.EncapsulatingSecurityPayloadType
authentication_data
XML Binding class name: Authentication_Data
Dictionary key name: authentication_data
next_header
XML Binding class name: Next_Header
Dictionary key name: next_header
padding
XML Binding class name: Padding
Dictionary key name: padding
padding_len
XML Binding class name: Padding_Len
Dictionary key name: padding_len
payload_data
XML Binding class name: Payload_Data
Dictionary key name: payload_data
security_parameters_index
XML Binding class name: Security_Parameters_Index
Dictionary key name: security_parameters_index
sequence_number
XML Binding class name: Sequence_Number
Dictionary key name: sequence_number
class cybox.objects.network_packet_object.EthernetHeader[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.EthernetHeaderType
checksum
XML Binding class name: Checksum
Dictionary key name: checksum
destination_mac_addr
XML Binding class name: Destination_MAC_Addr
Dictionary key name: destination_mac_addr
source_mac_addr
XML Binding class name: Source_MAC_Addr
Dictionary key name: source_mac_addr
type_or_length
XML Binding class name: Type_Or_Length
Dictionary key name: type_or_length
class cybox.objects.network_packet_object.EthernetInterface[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.EthernetInterfaceType
ethernet_header
XML Binding class name: Ethernet_Header
Dictionary key name: ethernet_header
class cybox.objects.network_packet_object.Fragment[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.FragmentType
fragment
XML Binding class name: Fragment
Dictionary key name: fragment
fragment_header
XML Binding class name: Fragment_Header
Dictionary key name: fragment_header
class cybox.objects.network_packet_object.FragmentHeader[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.FragmentHeaderType
fragment_offset
XML Binding class name: Fragment_Offset
Dictionary key name: fragment_offset
identification
XML Binding class name: Identification
Dictionary key name: identification
m_flag
XML Binding class name: M_Flag
Dictionary key name: m_flag
next_header
XML Binding class name: Next_Header
Dictionary key name: next_header
class cybox.objects.network_packet_object.FragmentationRequired[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.FragmentationRequiredType
fragmentation_required
XML Binding class name: Fragmentation_Required
Dictionary key name: fragmentation_required
next_hop_mtu
XML Binding class name: Next_Hop_MTU
Dictionary key name: next_hop_mtu
class cybox.objects.network_packet_object.HopByHopOptions[source]

Bases: cybox.objects.network_packet_object._IPv6ExtHeader

XML binding class: cybox.bindings.network_packet_object.HopByHopOptionsType
class cybox.objects.network_packet_object.ICMPv4AddressMaskReply[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.ICMPv4AddressMaskReplyType
address_mask
XML Binding class name: Address_Mask
Dictionary key name: address_mask
address_mask_reply
XML Binding class name: Address_Mask_Reply
Dictionary key name: address_mask_reply
class cybox.objects.network_packet_object.ICMPv4AddressMaskRequest[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.ICMPv4AddressMaskRequestType
address_mask
XML Binding class name: Address_Mask
Dictionary key name: address_mask
address_mask_request
XML Binding class name: Address_Mask_Request
Dictionary key name: address_mask_request
class cybox.objects.network_packet_object.ICMPv4DestinationUnreachable[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.ICMPv4DestinationUnreachableType
communication_administratively_prohibited
XML Binding class name: Communication_Administratively_Prohibited
Dictionary key name: communication_administratively_prohibited
destination_host_unknown
XML Binding class name: Destination_Host_Unknown
Dictionary key name: destination_host_unknown
destination_host_unreachable
XML Binding class name: Destination_Host_Unreachable
Dictionary key name: destination_host_unreachable
destination_network_unknown
XML Binding class name: Destination_Network_Unknown
Dictionary key name: destination_network_unknown
destination_network_unreachable
XML Binding class name: Destination_Network_Unreachable
Dictionary key name: destination_network_unreachable
destination_port_unreachable
XML Binding class name: Destination_Port_Unreachable
Dictionary key name: destination_port_unreachable
destination_protocol_unreachable
XML Binding class name: Destination_Protocol_Unreachable
Dictionary key name: destination_protocol_unreachable
fragmentation_required
XML Binding class name: Fragmentation_Required
Dictionary key name: fragmentation_required
host_administratively_prohibited
XML Binding class name: Host_Administratively_Prohibited
Dictionary key name: host_administratively_prohibited
host_precedence_violation
XML Binding class name: Host_Precedence_Violation
Dictionary key name: host_precedence_violation
host_unreachable_for_tos
XML Binding class name: Host_Unreachable_For_TOS
Dictionary key name: host_unreachable_for_tos
network_administratively_prohibited
XML Binding class name: Network_Administratively_Prohibited
Dictionary key name: network_administratively_prohibited
network_unreachable_for_tos
XML Binding class name: Network_Unreachable_For_TOS
Dictionary key name: network_unreachable_for_tos
precedence_cutoff_in_effect
XML Binding class name: Precedence_Cutoff_In_Effect
Dictionary key name: precedence_cutoff_in_effect
source_host_isolated
XML Binding class name: Source_Host_Isolated
Dictionary key name: source_host_isolated
source_route_failed
XML Binding class name: Source_Route_Failed
Dictionary key name: source_route_failed
class cybox.objects.network_packet_object.ICMPv4EchoReply[source]

Bases: cybox.objects.network_packet_object._ICMPEchoReply

XML binding class: cybox.bindings.network_packet_object.ICMPv4EchoReplyType
class cybox.objects.network_packet_object.ICMPv4EchoRequest[source]

Bases: cybox.objects.network_packet_object._ICMPEchoRequest

XML binding class: cybox.bindings.network_packet_object.ICMPv4EchoRequestType
class cybox.objects.network_packet_object.ICMPv4ErrorMessage[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.ICMPv4ErrorMessageType
destination_unreachable
XML Binding class name: Destination_Unreachable
Dictionary key name: destination_unreachable
error_msg_content
XML Binding class name: Error_Msg_Content
Dictionary key name: error_msg_content
redirect_message
XML Binding class name: Redirect_Message
Dictionary key name: redirect_message
source_quench
XML Binding class name: Source_Quench
Dictionary key name: source_quench
time_exceeded
XML Binding class name: Time_Exceeded
Dictionary key name: time_exceeded
class cybox.objects.network_packet_object.ICMPv4ErrorMessageContent[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.ICMPv4ErrorMessageContentType
first_eight_bytes
XML Binding class name: First_Eight_Bytes
Dictionary key name: first_eight_bytes
ip_header
XML Binding class name: IP_Header
Dictionary key name: ip_header
class cybox.objects.network_packet_object.ICMPv4Header[source]

Bases: cybox.objects.network_packet_object._ICMPHeader

XML binding class: cybox.bindings.network_packet_object.ICMPv4HeaderType
class cybox.objects.network_packet_object.ICMPv4InfoMessage[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.ICMPv4InfoMessageType
address_mask_reply
XML Binding class name: Address_Mask_Reply
Dictionary key name: address_mask_reply
address_mask_request
XML Binding class name: Address_Mask_Request
Dictionary key name: address_mask_request
echo_reply
XML Binding class name: Echo_Reply
Dictionary key name: echo_reply
echo_request
XML Binding class name: Echo_Request
Dictionary key name: echo_request
info_msg_content
XML Binding class name: Info_Msg_Content
Dictionary key name: info_msg_content
timestamp_reply
XML Binding class name: Timestamp_Reply
Dictionary key name: timestamp_reply
timestamp_request
XML Binding class name: Timestamp_Request
Dictionary key name: timestamp_request
class cybox.objects.network_packet_object.ICMPv4InfoMessageContent[source]

Bases: cybox.objects.network_packet_object._ICMPInfoMessageContent

XML binding class: cybox.bindings.network_packet_object.ICMPv4InfoMessageContentType
class cybox.objects.network_packet_object.ICMPv4Packet[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.ICMPv4PacketType
error_msg
XML Binding class name: Error_Msg
Dictionary key name: error_msg
icmpv4_header
XML Binding class name: ICMPv4_Header
Dictionary key name: icmpv4_header
info_msg
XML Binding class name: Info_Msg
Dictionary key name: info_msg
traceroute
XML Binding class name: Traceroute
Dictionary key name: traceroute
class cybox.objects.network_packet_object.ICMPv4RedirectMessage[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.ICMPv4RedirectMessageType
host_redirect
XML Binding class name: Host_Redirect
Dictionary key name: host_redirect
ip_address
XML Binding class name: IP_Address
Dictionary key name: ip_address
network_redirect
XML Binding class name: Network_Redirect
Dictionary key name: network_redirect
tos_host_redirect
XML Binding class name: ToS_Host_Redirect
Dictionary key name: tos_host_redirect
tos_network_redirect
XML Binding class name: ToS_Network_Redirect
Dictionary key name: tos_network_redirect
class cybox.objects.network_packet_object.ICMPv4SourceQuench[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.ICMPv4SourceQuenchType
source_quench
XML Binding class name: Source_Quench
Dictionary key name: source_quench
class cybox.objects.network_packet_object.ICMPv4TimeExceeded[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.ICMPv4TimeExceededType
frag_reassembly_time_exceeded
XML Binding class name: Frag_Reassembly_Time_Exceeded
Dictionary key name: frag_reassembly_time_exceeded
ttl_exceeded_in_transit
XML Binding class name: TTL_Exceeded_In_Transit
Dictionary key name: ttl_exceeded_in_transit
class cybox.objects.network_packet_object.ICMPv4TimestampReply[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.ICMPv4TimestampReplyType
originate_timestamp
XML Binding class name: Originate_Timestamp
Dictionary key name: originate_timestamp
receive_timestamp
XML Binding class name: Receive_Timestamp
Dictionary key name: receive_timestamp
timestamp_reply
XML Binding class name: Timestamp_Reply
Dictionary key name: timestamp_reply
transmit_timestamp
XML Binding class name: Transmit_Timestamp
Dictionary key name: transmit_timestamp
class cybox.objects.network_packet_object.ICMPv4TimestampRequest[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.ICMPv4TimestampRequestType
originate_timestamp
XML Binding class name: Originate_Timestamp
Dictionary key name: originate_timestamp
timestamp
XML Binding class name: Timestamp
Dictionary key name: timestamp
class cybox.objects.network_packet_object.ICMPv4Traceroute[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.ICMPv4TracerouteType
identifier
XML Binding class name: Identifier
Dictionary key name: identifier
outbound_hop_count
XML Binding class name: Outbound_Hop_Count
Dictionary key name: outbound_hop_count
outbound_packet_forward_success
XML Binding class name: Outbound_Packet_Forward_Success
Dictionary key name: outbound_packet_forward_success
outbound_packet_no_route
XML Binding class name: Outbound_Packet_no_Route
Dictionary key name: outbound_packet_no_route
XML Binding class name: Output_Link_MTU
Dictionary key name: output_link_mtu
XML Binding class name: Output_Link_Speed
Dictionary key name: output_link_speed
return_hop_count
XML Binding class name: Return_Hop_Count
Dictionary key name: return_hop_count
class cybox.objects.network_packet_object.ICMPv6DestinationUnreachable[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.ICMPv6DestinationUnreachableType
address_unreachable
XML Binding class name: Address_Unreachable
Dictionary key name: address_unreachable
beyond_scope
XML Binding class name: Beyond_Scope
Dictionary key name: beyond_scope
comm_prohibited
XML Binding class name: Comm_Prohibited
Dictionary key name: comm_prohibited
no_route
XML Binding class name: No_Route
Dictionary key name: no_route
port_unreachable
XML Binding class name: Port_Unreachable
Dictionary key name: port_unreachable
reject_route
XML Binding class name: Reject_Route
Dictionary key name: reject_route
src_addr_failed_policy
XML Binding class name: Src_Addr_Failed_Policy
Dictionary key name: src_addr_failed_policy
class cybox.objects.network_packet_object.ICMPv6EchoReply[source]

Bases: cybox.objects.network_packet_object._ICMPEchoReply

XML binding class: cybox.bindings.network_packet_object.ICMPv6EchoReplyType
class cybox.objects.network_packet_object.ICMPv6EchoRequest[source]

Bases: cybox.objects.network_packet_object._ICMPEchoRequest

XML binding class: cybox.bindings.network_packet_object.ICMPv6EchoRequestType
class cybox.objects.network_packet_object.ICMPv6ErrorMessage[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.ICMPv6ErrorMessageType
destination_unreachable
XML Binding class name: Destination_Unreachable
Dictionary key name: destination_unreachable
invoking_packet
XML Binding class name: Invoking_Packet
Dictionary key name: invoking_packet
packet_too_big
XML Binding class name: Packet_Too_Big
Dictionary key name: packet_too_big
parameter_problem
XML Binding class name: Parameter_Problem
Dictionary key name: parameter_problem
time_exceeded
XML Binding class name: Time_Exceeded
Dictionary key name: time_exceeded
class cybox.objects.network_packet_object.ICMPv6Header[source]

Bases: cybox.objects.network_packet_object._ICMPHeader

XML binding class: cybox.bindings.network_packet_object.ICMPv6HeaderType
class cybox.objects.network_packet_object.ICMPv6InfoMessage[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.ICMPv6InfoMessageType
echo_reply
XML Binding class name: Echo_Reply
Dictionary key name: echo_reply
echo_request
XML Binding class name: Echo_Request
Dictionary key name: echo_request
info_msg_content
XML Binding class name: Info_Msg_Content
Dictionary key name: info_msg_content
class cybox.objects.network_packet_object.ICMPv6InfoMessageContent[source]

Bases: cybox.objects.network_packet_object._ICMPInfoMessageContent

XML binding class: cybox.bindings.network_packet_object.ICMPv6InfoMessageContentType
class cybox.objects.network_packet_object.ICMPv6Packet[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.ICMPv6PacketType
error_msg
XML Binding class name: Error_Msg
Dictionary key name: error_msg
icmpv6_header
XML Binding class name: ICMPv6_Header
Dictionary key name: icmpv6_header
info_msg
XML Binding class name: Info_Msg
Dictionary key name: info_msg
class cybox.objects.network_packet_object.ICMPv6PacketTooBig[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.ICMPv6PacketTooBigType
mtu
XML Binding class name: MTU
Dictionary key name: mtu
packet_too_big
XML Binding class name: Packet_Too_Big
Dictionary key name: packet_too_big
class cybox.objects.network_packet_object.ICMPv6ParameterProblem[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.ICMPv6ParameterProblemType
erroneous_header_field
XML Binding class name: Erroneous_Header_Field
Dictionary key name: erroneous_header_field
pointer
XML Binding class name: Pointer
Dictionary key name: pointer
unrecognized_ipv6_option
XML Binding class name: Unrecognized_IPv6_Option
Dictionary key name: unrecognized_ipv6_option
unrecognized_next_header_type
XML Binding class name: Unrecognized_Next_Header_Type
Dictionary key name: unrecognized_next_header_type
class cybox.objects.network_packet_object.ICMPv6TimeExceeded[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.ICMPv6TimeExceededType
fragment_reassem_time_exceeded
XML Binding class name: Fragment_Reassem_Time_Exceeded
Dictionary key name: fragment_reassem_time_exceeded
hop_limit_exceeded
XML Binding class name: Hop_Limit_Exceeded
Dictionary key name: hop_limit_exceeded
class cybox.objects.network_packet_object.IPv4Flags[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.IPv4FlagsType
do_not_fragment
XML Binding class name: Do_Not_Fragment
Dictionary key name: do_not_fragment
more_fragments
XML Binding class name: More_Fragments
Dictionary key name: more_fragments
reserved
XML Binding class name: Reserved
Dictionary key name: reserved
class cybox.objects.network_packet_object.IPv4Header[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.IPv4HeaderType
checksum
XML Binding class name: Checksum
Dictionary key name: checksum
dest_ipv4_addr
XML Binding class name: Dest_IPv4_Addr
Dictionary key name: dest_ipv4_addr
dscp
XML Binding class name: DSCP
Dictionary key name: dscp
ecn
XML Binding class name: ECN
Dictionary key name: ecn
flags
XML Binding class name: Flags
Dictionary key name: flags
fragment_offset
XML Binding class name: Fragment_Offset
Dictionary key name: fragment_offset
header_length
XML Binding class name: Header_Length
Dictionary key name: header_length
identification
XML Binding class name: Identification
Dictionary key name: identification
ip_version
XML Binding class name: IP_Version
Dictionary key name: ip_version
option
(List of values permitted)
XML Binding class name: Option
Dictionary key name: option
protocol
XML Binding class name: Protocol
Dictionary key name: protocol
src_ipv4_addr
XML Binding class name: Src_IPv4_Addr
Dictionary key name: src_ipv4_addr
total_length
XML Binding class name: Total_Length
Dictionary key name: total_length
ttl
XML Binding class name: TTL
Dictionary key name: ttl
class cybox.objects.network_packet_object.IPv4Option[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.IPv4OptionType
class_
XML Binding class name: Class
Dictionary key name: class
copy_flag
XML Binding class name: Copy_Flag
Dictionary key name: copy_flag
option
XML Binding class name: Option
Dictionary key name: option
class cybox.objects.network_packet_object.IPv4Packet[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.IPv4PacketType
data
XML Binding class name: Data
Dictionary key name: data
ipv4_header
XML Binding class name: IPv4_Header
Dictionary key name: ipv4_header
class cybox.objects.network_packet_object.IPv6ExtHeader[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.IPv6ExtHeaderType
authentication_header
XML Binding class name: Authentication_Header
Dictionary key name: authentication_header
destination_options
(List of values permitted)
XML Binding class name: Destination_Options
Dictionary key name: destination_options
encapsulating_security_payload
XML Binding class name: Encapsulating_Security_Payload
Dictionary key name: encapsulating_security_payload
fragment
XML Binding class name: Fragment
Dictionary key name: fragment
hop_by_hop_options
XML Binding class name: Hop_by_Hop_Options
Dictionary key name: hop_by_hop_options
routing
XML Binding class name: Routing
Dictionary key name: routing
class cybox.objects.network_packet_object.IPv6Header[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.IPv6HeaderType
dest_ipv6_addr
XML Binding class name: Dest_IPv6_Addr
Dictionary key name: dest_ipv6_addr
flow_label
XML Binding class name: Flow_Label
Dictionary key name: flow_label
ip_version
XML Binding class name: IP_Version
Dictionary key name: ip_version
next_header
XML Binding class name: Next_Header
Dictionary key name: next_header
payload_length
XML Binding class name: Payload_Length
Dictionary key name: payload_length
src_ipv6_addr
XML Binding class name: Src_IPv6_Addr
Dictionary key name: src_ipv6_addr
traffic_class
XML Binding class name: Traffic_Class
Dictionary key name: traffic_class
ttl
XML Binding class name: TTL
Dictionary key name: ttl
class cybox.objects.network_packet_object.IPv6Option[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.IPv6OptionType
do_not_recogn_action
XML Binding class name: Do_Not_Recogn_Action
Dictionary key name: do_not_recogn_action
option_byte
XML Binding class name: Option_Byte
Dictionary key name: option_byte
packet_change
XML Binding class name: Packet_Change
Dictionary key name: packet_change
class cybox.objects.network_packet_object.IPv6Packet[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.IPv6PacketType
data
XML Binding class name: Data
Dictionary key name: data
ext_headers
(List of values permitted)
XML Binding class name: Ext_Headers
Dictionary key name: ext_headers
ipv6_header
XML Binding class name: IPv6_Header
Dictionary key name: ipv6_header
class cybox.objects.network_packet_object.InternetLayer[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.InternetLayerType
icmpv4
XML Binding class name: ICMPv4
Dictionary key name: icmpv4
icmpv6
XML Binding class name: ICMPv6
Dictionary key name: icmpv6
ipv4
XML Binding class name: IPv4
Dictionary key name: ipv4
ipv6
XML Binding class name: IPv6
Dictionary key name: ipv6
class cybox.objects.network_packet_object.LinkLayer[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.LinkLayerType
logical_protocols
XML Binding class name: Logical_Protocols
Dictionary key name: logical_protocols
physical_interface
XML Binding class name: Physical_Interface
Dictionary key name: physical_interface
class cybox.objects.network_packet_object.LogicalProtocol[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.LogicalProtocolType
arp_rarp
XML Binding class name: ARP_RARP
Dictionary key name: arp_rarp
ndp
XML Binding class name: NDP
Dictionary key name: ndp
class cybox.objects.network_packet_object.NDP[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.NDPType
icmpv6_header
XML Binding class name: ICMPv6_Header
Dictionary key name: icmpv6_header
neighbor_advertisement
XML Binding class name: Neighbor_Advertisement
Dictionary key name: neighbor_advertisement
neighbor_solicitation
XML Binding class name: Neighbor_Solicitation
Dictionary key name: neighbor_solicitation
redirect
XML Binding class name: Redirect
Dictionary key name: redirect
router_advertisement
XML Binding class name: Router_Advertisement
Dictionary key name: router_advertisement
router_solicitation
XML Binding class name: Router_Solicitation
Dictionary key name: router_solicitation
class cybox.objects.network_packet_object.NDPLinkAddr[source]

Bases: mixbox.entities.Entity

Abstract Type

XML binding class: cybox.bindings.network_packet_object.NDPLinkAddrType
length
XML Binding class name: Length
Dictionary key name: length
XML Binding class name: Link_Layer_MAC_Addr
Dictionary key name: link_layer_mac_addr
class cybox.objects.network_packet_object.NDPMTU[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.NDPMTUType
length
XML Binding class name: Length
Dictionary key name: length
mtu
XML Binding class name: MTU
Dictionary key name: mtu
class cybox.objects.network_packet_object.NDPPrefixInfo[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.NDPPrefixInfoType
addr_config_flag
XML Binding class name: addr_config_flag
Dictionary key name: addr_config_flag
length
XML Binding class name: Length
Dictionary key name: length
XML Binding class name: link_flag
Dictionary key name: link_flag
preferred_lifetime
XML Binding class name: Preferred_Lifetime
Dictionary key name: preferred_lifetime
prefix
XML Binding class name: Prefix
Dictionary key name: prefix
prefix_length
XML Binding class name: Prefix_Length
Dictionary key name: prefix_length
valid_lifetime
XML Binding class name: Valid_Lifetime
Dictionary key name: valid_lifetime
class cybox.objects.network_packet_object.NDPRedirectedHeader[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.NDPRedirectedHeaderType
ipheader_and_data
XML Binding class name: IPHeader_And_Data
Dictionary key name: ipheader_and_data
length
XML Binding class name: Length
Dictionary key name: length
class cybox.objects.network_packet_object.NeighborAdvertisement[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.NeighborAdvertisementType
options
XML Binding class name: Options
Dictionary key name: options
override_flag
XML Binding class name: override_flag
Dictionary key name: override_flag
router_flag
XML Binding class name: router_flag
Dictionary key name: router_flag
solicited_flag
XML Binding class name: solicited_flag
Dictionary key name: solicited_flag
target_ipv6_addr
XML Binding class name: Target_IPv6_Addr
Dictionary key name: target_ipv6_addr
class cybox.objects.network_packet_object.NeighborOptions[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.NeighborOptionsType
XML Binding class name: Target_Link_Addr
Dictionary key name: target_link_addr
class cybox.objects.network_packet_object.NeighborSolicitation[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.NeighborSolicitationType
options
XML Binding class name: Options
Dictionary key name: options
target_ipv6_addr
XML Binding class name: Target_IPv6_Addr
Dictionary key name: target_ipv6_addr
class cybox.objects.network_packet_object.NeighborSolicitationOptions[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.NeighborSolicitationOptionsType
XML Binding class name: Src_Link_Addr
Dictionary key name: src_link_addr
class cybox.objects.network_packet_object.NetworkPacket[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.network_packet_object.NetworkPacketObjectType
internet_layer
XML Binding class name: Internet_Layer
Dictionary key name: internet_layer
XML Binding class name: Link_Layer
Dictionary key name: link_layer
transport_layer
XML Binding class name: Transport_Layer
Dictionary key name: transport_layer
class cybox.objects.network_packet_object.OptionData[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.OptionDataType
option_data_len
XML Binding class name: Option_Data_Len
Dictionary key name: option_data_len
option_type
XML Binding class name: Option_Type
Dictionary key name: option_type
pad1
XML Binding class name: Pad1
Dictionary key name: pad1
padn
XML Binding class name: PadN
Dictionary key name: padn
class cybox.objects.network_packet_object.Pad1[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.Pad1Type
octet
XML Binding class name: Octet
Dictionary key name: octet
class cybox.objects.network_packet_object.PadN[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.PadNType
octet
XML Binding class name: Octet
Dictionary key name: octet
option_data
XML Binding class name: Option_Data
Dictionary key name: option_data
option_data_length
XML Binding class name: Option_Data_Length
Dictionary key name: option_data_length
class cybox.objects.network_packet_object.PhysicalInterface[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.PhysicalInterfaceType
ethernet
XML Binding class name: Ethernet
Dictionary key name: ethernet
class cybox.objects.network_packet_object.Prefix[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.PrefixType
ip_addr_prefix
XML Binding class name: IP_Addr_Prefix
Dictionary key name: ip_addr_prefix
ipv6_addr
XML Binding class name: IPv6_Addr
Dictionary key name: ipv6_addr
class cybox.objects.network_packet_object.Redirect[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.RedirectType
dest_ipv6_addr
XML Binding class name: Dest_IPv6_Addr
Dictionary key name: dest_ipv6_addr
options
XML Binding class name: Options
Dictionary key name: options
target_ipv6_addr
XML Binding class name: Target_IPv6_Addr
Dictionary key name: target_ipv6_addr
class cybox.objects.network_packet_object.RedirectOptions[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.RedirectOptionsType
redirected_header
XML Binding class name: Redirected_Header
Dictionary key name: redirected_header
XML Binding class name: Target_Link_Addr
Dictionary key name: target_link_addr
class cybox.objects.network_packet_object.RouterAdvertisement[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.RouterAdvertisementType
cur_hop_limit
XML Binding class name: Cur_Hop_Limit
Dictionary key name: cur_hop_limit
managed_address_config_flag
XML Binding class name: managed_address_config_flag
Dictionary key name: managed_address_config_flag
options
XML Binding class name: Options
Dictionary key name: options
other_config_flag
XML Binding class name: other_config_flag
Dictionary key name: other_config_flag
reachable_time
XML Binding class name: Reachable_Time
Dictionary key name: reachable_time
retrans_timer
XML Binding class name: Retrans_Timer
Dictionary key name: retrans_timer
router_lifetime
XML Binding class name: Router_Lifetime
Dictionary key name: router_lifetime
class cybox.objects.network_packet_object.RouterAdvertisementOptions[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.RouterAdvertisementOptionsType
mtu
XML Binding class name: MTU
Dictionary key name: mtu
prefix_info
XML Binding class name: Prefix_Info
Dictionary key name: prefix_info
XML Binding class name: Src_Link_Addr
Dictionary key name: src_link_addr
class cybox.objects.network_packet_object.RouterSolicitation[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.RouterSolicitationType
options
(List of values permitted)
XML Binding class name: Options
Dictionary key name: options
class cybox.objects.network_packet_object.RouterSolicitationOptions[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.RouterSolicitationOptionsType
XML Binding class name: Src_Link_Addr
Dictionary key name: src_link_addr
class cybox.objects.network_packet_object.Routing[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.RoutingType
header_ext_len
XML Binding class name: Header_Ext_Len
Dictionary key name: header_ext_len
next_header
XML Binding class name: Next_Header
Dictionary key name: next_header
routing_type
XML Binding class name: Routing_Type
Dictionary key name: routing_type
segments_left
XML Binding class name: Segments_Left
Dictionary key name: segments_left
type_specific_data
XML Binding class name: Type_Specific_Data
Dictionary key name: type_specific_data
class cybox.objects.network_packet_object.TCP[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.TCPType
data
XML Binding class name: Data
Dictionary key name: data
options
XML Binding class name: Options
Dictionary key name: options
tcp_header
XML Binding class name: TCP_Header
Dictionary key name: tcp_header
class cybox.objects.network_packet_object.TCPFlags[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.TCPFlagsType
ack
XML Binding class name: ack
Dictionary key name: ack
cwr
XML Binding class name: cwr
Dictionary key name: cwr
ece
XML Binding class name: ece
Dictionary key name: ece
fin
XML Binding class name: fin
Dictionary key name: fin
ns
XML Binding class name: ns
Dictionary key name: ns
psh
XML Binding class name: psh
Dictionary key name: psh
rst
XML Binding class name: rst
Dictionary key name: rst
syn
XML Binding class name: syn
Dictionary key name: syn
urg
XML Binding class name: urg
Dictionary key name: urg
class cybox.objects.network_packet_object.TCPHeader[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.TCPHeaderType
ack_num
XML Binding class name: ACK_Num
Dictionary key name: ack_num
checksum
XML Binding class name: Checksum
Dictionary key name: checksum
data_offset
XML Binding class name: Data_Offset
Dictionary key name: data_offset
dest_port
XML Binding class name: Dest_Port
Dictionary key name: dest_port
reserved
XML Binding class name: Reserved
Dictionary key name: reserved
seq_num
XML Binding class name: Seq_Num
Dictionary key name: seq_num
src_port
XML Binding class name: Src_Port
Dictionary key name: src_port
tcp_flags
XML Binding class name: TCP_Flags
Dictionary key name: tcp_flags
urg_ptr
XML Binding class name: Urg_Ptr
Dictionary key name: urg_ptr
window
XML Binding class name: Window
Dictionary key name: window
class cybox.objects.network_packet_object.TransportLayer[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.TransportLayerType
tcp
XML Binding class name: TCP
Dictionary key name: tcp
udp
XML Binding class name: UDP
Dictionary key name: udp
class cybox.objects.network_packet_object.TypeLength[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.TypeLengthType
internet_layer_type
XML Binding class name: Internet_Layer_Type
Dictionary key name: internet_layer_type
length
XML Binding class name: Length
Dictionary key name: length
class cybox.objects.network_packet_object.UDP[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.UDPType
data
XML Binding class name: Data
Dictionary key name: data
udp_header
XML Binding class name: UDP_Header
Dictionary key name: udp_header
class cybox.objects.network_packet_object.UDPHeader[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.UDPHeaderType
checksum
XML Binding class name: Checksum
Dictionary key name: checksum
destport
XML Binding class name: DestPort
Dictionary key name: destport
length
XML Binding class name: Length
Dictionary key name: length
srcport
XML Binding class name: SrcPort
Dictionary key name: srcport

Version: 2.1.0.13

cybox.objects.network_route_entry_object module
class cybox.objects.network_route_entry_object.NetworkRouteEntry[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.network_route_entry_object.NetworkRouteEntryObjectType
destination_address
XML Binding class name: Destination_Address
Dictionary key name: destination_address
gateway_address
XML Binding class name: Gateway_Address
Dictionary key name: gateway_address
interface
XML Binding class name: Interface
Dictionary key name: interface
is_autoconfigure_address
XML Binding class name: is_autoconfigure_address
Dictionary key name: is_autoconfigure_address
is_immortal
XML Binding class name: is_immortal
Dictionary key name: is_immortal
is_ipv6
XML Binding class name: is_ipv6
Dictionary key name: is_ipv6
is_loopback
XML Binding class name: is_loopback
Dictionary key name: is_loopback
is_publish
XML Binding class name: is_publish
Dictionary key name: is_publish
metric
XML Binding class name: Metric
Dictionary key name: metric
netmask
XML Binding class name: Netmask
Dictionary key name: netmask
origin
XML Binding class name: Origin
Dictionary key name: origin
preferred_lifetime
XML Binding class name: Preferred_Lifetime
Dictionary key name: preferred_lifetime
protocol
XML Binding class name: Protocol
Dictionary key name: protocol
route_age
XML Binding class name: Route_Age
Dictionary key name: route_age
type_
XML Binding class name: Type
Dictionary key name: type
valid_lifetime
XML Binding class name: Valid_Lifetime
Dictionary key name: valid_lifetime

Version: 2.1.0.13

cybox.objects.network_route_object module
class cybox.objects.network_route_object.NetRoute[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.network_route_object.NetRouteObjectType
description
XML Binding class name: Description
Dictionary key name: description
is_autoconfigure_address
XML Binding class name: is_autoconfigure_address
Dictionary key name: is_autoconfigure_address
is_immortal
XML Binding class name: is_immortal
Dictionary key name: is_immortal
is_ipv6
XML Binding class name: is_ipv6
Dictionary key name: is_ipv6
is_loopback
XML Binding class name: is_loopback
Dictionary key name: is_loopback
is_publish
XML Binding class name: is_publish
Dictionary key name: is_publish
network_route_entries
XML Binding class name: Network_Route_Entries
Dictionary key name: network_route_entries
preferred_lifetime
XML Binding class name: Preferred_Lifetime
Dictionary key name: preferred_lifetime
route_age
XML Binding class name: Route_Age
Dictionary key name: route_age
valid_lifetime
XML Binding class name: Valid_Lifetime
Dictionary key name: valid_lifetime
class cybox.objects.network_route_object.NetworkRouteEntries(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.network_route_object.NetworkRouteEntriesType
network_route_entry
(List of values permitted)
XML Binding class name: Network_Route_Entry
Dictionary key name: network_route_entry

Version: 2.1.0.13

cybox.objects.network_socket_object module
class cybox.objects.network_socket_object.NetworkSocket[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.network_socket_object.NetworkSocketObjectType
address_family
XML Binding class name: Address_Family
Dictionary key name: address_family
domain
XML Binding class name: Domain
Dictionary key name: domain
is_blocking
XML Binding class name: is_blocking
Dictionary key name: is_blocking
is_listening
XML Binding class name: is_listening
Dictionary key name: is_listening
local_address
XML Binding class name: Local_Address
Dictionary key name: local_address
options
XML Binding class name: Options
Dictionary key name: options
protocol
XML Binding class name: Protocol
Dictionary key name: protocol
remote_address
XML Binding class name: Remote_Address
Dictionary key name: remote_address
socket_descriptor
XML Binding class name: Socket_Descriptor
Dictionary key name: socket_descriptor
type_
XML Binding class name: Type
Dictionary key name: type
class cybox.objects.network_socket_object.SocketOptions[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_socket_object.SocketOptionsType
ip_multicast_if
XML Binding class name: IP_MULTICAST_IF
Dictionary key name: ip_multicast_if
ip_multicast_if2
XML Binding class name: IP_MULTICAST_IF2
Dictionary key name: ip_multicast_if2
ip_multicast_loop
XML Binding class name: IP_MULTICAST_LOOP
Dictionary key name: ip_multicast_loop
ip_tos
XML Binding class name: IP_TOS
Dictionary key name: ip_tos
so_broadcast
XML Binding class name: SO_BROADCAST
Dictionary key name: so_broadcast
so_conditional_accept
XML Binding class name: SO_CONDITIONAL_ACCEPT
Dictionary key name: so_conditional_accept
so_debug
XML Binding class name: SO_DEBUG
Dictionary key name: so_debug
so_dontlinger
XML Binding class name: SO_DONTLINGER
Dictionary key name: so_dontlinger
so_dontroute
XML Binding class name: SO_DONTROUTE
Dictionary key name: so_dontroute
so_group_priority
XML Binding class name: SO_GROUP_PRIORITY
Dictionary key name: so_group_priority
so_keepalive
XML Binding class name: SO_KEEPALIVE
Dictionary key name: so_keepalive
so_linger
XML Binding class name: SO_LINGER
Dictionary key name: so_linger
so_oobinline
XML Binding class name: SO_OOBINLINE
Dictionary key name: so_oobinline
so_rcvbuf
XML Binding class name: SO_RCVBUF
Dictionary key name: so_rcvbuf
so_rcvtimeo
XML Binding class name: SO_RCVTIMEO
Dictionary key name: so_rcvtimeo
so_reuseaddr
XML Binding class name: SO_REUSEADDR
Dictionary key name: so_reuseaddr
so_sndbuf
XML Binding class name: SO_SNDBUF
Dictionary key name: so_sndbuf
so_sndtimeo
XML Binding class name: SO_SNDTIMEO
Dictionary key name: so_sndtimeo
so_timeout
XML Binding class name: SO_TIMEOUT
Dictionary key name: so_timeout
so_update_accept_context
XML Binding class name: SO_UPDATE_ACCEPT_CONTEXT
Dictionary key name: so_update_accept_context
tcp_nodelay
XML Binding class name: TCP_NODELAY
Dictionary key name: tcp_nodelay

Version: 2.1.0.13

cybox.objects.network_subnet_object module
class cybox.objects.network_subnet_object.NetworkSubnet[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.network_subnet_object.NetworkSubnetObjectType
description
XML Binding class name: Description
Dictionary key name: description
name
XML Binding class name: Name
Dictionary key name: name
number_of_ip_addresses
XML Binding class name: Number_Of_IP_Addresses
Dictionary key name: number_of_ip_addresses
routes
XML Binding class name: Routes
Dictionary key name: routes
class cybox.objects.network_subnet_object.Routes(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.network_subnet_object.RoutesType
route
(List of values permitted)
XML Binding class name: Route
Dictionary key name: route

Version: 2.1.0.13

cybox.objects.pdf_file_object module
class cybox.objects.pdf_file_object.PDFDocumentInformationDictionary[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.pdf_file_object.PDFDocumentInformationDictionaryType
author
XML Binding class name: Author
Dictionary key name: author
creationdate
XML Binding class name: CreationDate
Dictionary key name: creationdate
creator
XML Binding class name: Creator
Dictionary key name: creator
keywords
XML Binding class name: Keywords
Dictionary key name: keywords
moddate
XML Binding class name: ModDate
Dictionary key name: moddate
producer
XML Binding class name: Producer
Dictionary key name: producer
subject
XML Binding class name: Subject
Dictionary key name: subject
title
XML Binding class name: Title
Dictionary key name: title
trapped
XML Binding class name: Trapped
Dictionary key name: trapped
class cybox.objects.pdf_file_object.PDFFile[source]

Bases: cybox.objects.file_object.File

XML binding class: cybox.bindings.pdf_file_object.PDFFileObjectType
metadata
XML Binding class name: Metadata
Dictionary key name: metadata
version
XML Binding class name: Version
Dictionary key name: version
class cybox.objects.pdf_file_object.PDFFileMetadata[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.pdf_file_object.PDFFileMetadataType
document_information_dictionary
XML Binding class name: Document_Information_Dictionary
Dictionary key name: document_information_dictionary
encrypted
XML Binding class name: encrypted
Dictionary key name: encrypted
keyword_counts
XML Binding class name: Keyword_Counts
Dictionary key name: keyword_counts
number_of_cross_reference_tables
XML Binding class name: Number_Of_Cross_Reference_Tables
Dictionary key name: number_of_cross_reference_tables
number_of_indirect_objects
XML Binding class name: Number_Of_Indirect_Objects
Dictionary key name: number_of_indirect_objects
number_of_trailers
XML Binding class name: Number_Of_Trailers
Dictionary key name: number_of_trailers
optimized
XML Binding class name: optimized
Dictionary key name: optimized
class cybox.objects.pdf_file_object.PDFKeywordCount[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.pdf_file_object.PDFKeywordCountType
non_obfuscated_count
XML Binding class name: Non_Obfuscated_Count
Dictionary key name: non_obfuscated_count
obfuscated_count
XML Binding class name: Obfuscated_Count
Dictionary key name: obfuscated_count
class cybox.objects.pdf_file_object.PDFKeywordCounts[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.pdf_file_object.PDFKeywordCountsType
aa_count
XML Binding class name: AA_Count
Dictionary key name: aa_count
ascii85decode_count
XML Binding class name: ASCII85Decode_Count
Dictionary key name: ascii85decode_count
asciihexdecode_count
XML Binding class name: ASCIIHexDecode_Count
Dictionary key name: asciihexdecode_count
ccittfaxdecode_count
XML Binding class name: CCITTFaxDecode_Count
Dictionary key name: ccittfaxdecode_count
dctdecode_count
XML Binding class name: DCTDecode_Count
Dictionary key name: dctdecode_count
encrypt_count
XML Binding class name: Encrypt_Count
Dictionary key name: encrypt_count
flatedecode_count
XML Binding class name: FlateDecode_Count
Dictionary key name: flatedecode_count
javascript_count
XML Binding class name: JavaScript_Count
Dictionary key name: javascript_count
jbig2decode_count
XML Binding class name: JBIG2Decode_Count
Dictionary key name: jbig2decode_count
js_count
XML Binding class name: JS_Count
Dictionary key name: js_count
launch_count
XML Binding class name: Launch_Count
Dictionary key name: launch_count
lzwdecode_count
XML Binding class name: LZWDecode_Count
Dictionary key name: lzwdecode_count
objstm_count
XML Binding class name: ObjStm_Count
Dictionary key name: objstm_count
openaction_count
XML Binding class name: OpenAction_Count
Dictionary key name: openaction_count
page_count
XML Binding class name: Page_Count
Dictionary key name: page_count
richmedia_count
XML Binding class name: RichMedia_Count
Dictionary key name: richmedia_count
runlengthdecode_count
XML Binding class name: RunLengthDecode_Count
Dictionary key name: runlengthdecode_count
xfa_count
XML Binding class name: XFA_Count
Dictionary key name: xfa_count

Version: 2.1.0.13

cybox.objects.pipe_object module
class cybox.objects.pipe_object.Pipe[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.pipe_object.PipeObjectType
name
XML Binding class name: Name
Dictionary key name: name
named
XML Binding class name: named
Dictionary key name: named

Version: 2.1.0.13

cybox.objects.port_object module
class cybox.objects.port_object.Port[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.port_object.PortObjectType
layer4_protocol
XML Binding class name: Layer4_Protocol
Dictionary key name: layer4_protocol
port_value
XML Binding class name: Port_Value
Dictionary key name: port_value

Version: 2.1.0.13

cybox.objects.process_object module
class cybox.objects.process_object.ArgumentList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.process_object.ArgumentListType
argument
(List of values permitted)
XML Binding class name: Argument
Dictionary key name: argument
class cybox.objects.process_object.ChildPIDList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.process_object.ChildPIDListType
child_pid
(List of values permitted)
XML Binding class name: Child_PID
Dictionary key name: child_pid
class cybox.objects.process_object.ImageInfo[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.process_object.ImageInfoType
command_line
XML Binding class name: Command_Line
Dictionary key name: command_line
current_directory
XML Binding class name: Current_Directory
Dictionary key name: current_directory
file_name
XML Binding class name: File_Name
Dictionary key name: file_name
path
XML Binding class name: Path
Dictionary key name: path
class cybox.objects.process_object.NetworkConnectionList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.process_object.NetworkConnectionListType
network_connection
(List of values permitted)
XML Binding class name: Network_Connection
Dictionary key name: network_connection
class cybox.objects.process_object.PortList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.process_object.PortListType
port
(List of values permitted)
XML Binding class name: Port
Dictionary key name: port
class cybox.objects.process_object.Process[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.process_object.ProcessObjectType
argument_list
XML Binding class name: Argument_List
Dictionary key name: argument_list
child_pid_list
XML Binding class name: Child_PID_List
Dictionary key name: child_pid_list
creation_time
XML Binding class name: Creation_Time
Dictionary key name: creation_time
environment_variable_list
XML Binding class name: Environment_Variable_List
Dictionary key name: environment_variable_list
extracted_features
XML Binding class name: Extracted_Features
Dictionary key name: extracted_features
image_info
XML Binding class name: Image_Info
Dictionary key name: image_info
is_hidden
XML Binding class name: is_hidden
Dictionary key name: is_hidden
kernel_time
XML Binding class name: Kernel_Time
Dictionary key name: kernel_time
name
XML Binding class name: Name
Dictionary key name: name
network_connection_list
XML Binding class name: Network_Connection_List
Dictionary key name: network_connection_list
parent_pid
XML Binding class name: Parent_PID
Dictionary key name: parent_pid
pid
XML Binding class name: PID
Dictionary key name: pid
port_list
XML Binding class name: Port_List
Dictionary key name: port_list
start_time
XML Binding class name: Start_Time
Dictionary key name: start_time
user_time
XML Binding class name: User_Time
Dictionary key name: user_time
username
XML Binding class name: Username
Dictionary key name: username

Version: 2.1.0.13

cybox.objects.product_object module
class cybox.objects.product_object.Product[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.product_object.ProductObjectType
device_details
XML Binding class name: Device_Details
Dictionary key name: device_details
edition
XML Binding class name: Edition
Dictionary key name: edition
language
XML Binding class name: Language
Dictionary key name: language
product
XML Binding class name: Product
Dictionary key name: product
update
XML Binding class name: Update
Dictionary key name: update
vendor
XML Binding class name: Vendor
Dictionary key name: vendor
version
XML Binding class name: Version
Dictionary key name: version

Version: 2.1.0.13

cybox.objects.semaphore_object module
class cybox.objects.semaphore_object.Semaphore[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.semaphore_object.SemaphoreObjectType
current_count
XML Binding class name: Current_Count
Dictionary key name: current_count
maximum_count
XML Binding class name: Maximum_Count
Dictionary key name: maximum_count
name
XML Binding class name: Name
Dictionary key name: name
named
XML Binding class name: named
Dictionary key name: named

Version: 2.1.0.13

cybox.objects.socket_address_object module
class cybox.objects.socket_address_object.SocketAddress[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.socket_address_object.SocketAddressObjectType
hostname
XML Binding class name: Hostname
Dictionary key name: hostname
ip_address
XML Binding class name: IP_Address
Dictionary key name: ip_address
port
XML Binding class name: Port
Dictionary key name: port

Version: 2.1.0.13

cybox.objects.sms_message_object module
class cybox.objects.sms_message_object.SMSMessage[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.sms_message_object.SMSMessageObjectType
bits_per_character
XML Binding class name: Bits_Per_Character
Dictionary key name: bits_per_character
body
XML Binding class name: Body
Dictionary key name: body
encoding
XML Binding class name: Encoding
Dictionary key name: encoding
is_premium
XML Binding class name: is_premium
Dictionary key name: is_premium
length
XML Binding class name: Length
Dictionary key name: length
recipient_phone_number
XML Binding class name: Recipient_Phone_Number
Dictionary key name: recipient_phone_number
sender_phone_number
XML Binding class name: Sender_Phone_Number
Dictionary key name: sender_phone_number
sent_datetime
XML Binding class name: Sent_DateTime
Dictionary key name: sent_datetime
size
XML Binding class name: Size
Dictionary key name: size
user_data_header
XML Binding class name: User_Data_Header
Dictionary key name: user_data_header

Version: 2.1.0.13

cybox.objects.system_object module
class cybox.objects.system_object.BIOSInfo[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.system_object.BIOSInfoType
bios_date
XML Binding class name: BIOS_Date
Dictionary key name: bios_date
bios_manufacturer
XML Binding class name: BIOS_Manufacturer
Dictionary key name: bios_manufacturer
bios_release_date
XML Binding class name: BIOS_Release_Date
Dictionary key name: bios_release_date
bios_serial_number
XML Binding class name: BIOS_Serial_Number
Dictionary key name: bios_serial_number
bios_version
XML Binding class name: BIOS_Version
Dictionary key name: bios_version
class cybox.objects.system_object.DHCPServerList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.system_object.DHCPServerListType
dhcp_server_address
(List of values permitted)
XML Binding class name: DHCP_Server_Address
Dictionary key name: dhcp_server_address
class cybox.objects.system_object.IPGatewayList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.system_object.IPGatewayListType
ip_gateway_address
(List of values permitted)
XML Binding class name: IP_Gateway_Address
Dictionary key name: ip_gateway_address
class cybox.objects.system_object.IPInfo[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.system_object.IPInfoType
ip_address
XML Binding class name: IP_Address
Dictionary key name: ip_address
subnet_mask
XML Binding class name: Subnet_Mask
Dictionary key name: subnet_mask
class cybox.objects.system_object.IPInfoList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.system_object.IPInfoListType
ip_info_list
(List of values permitted)
XML Binding class name: IP_Info_List
Dictionary key name: ip_info_list
class cybox.objects.system_object.NetworkInterface[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.system_object.NetworkInterfaceType
adapter
XML Binding class name: Adapter
Dictionary key name: adapter
description
XML Binding class name: Description
Dictionary key name: description
dhcp_lease_expires
XML Binding class name: DHCP_Lease_Expires
Dictionary key name: dhcp_lease_expires
dhcp_lease_obtained
XML Binding class name: DHCP_Lease_Obtained
Dictionary key name: dhcp_lease_obtained
dhcp_server_list
XML Binding class name: DHCP_Server_List
Dictionary key name: dhcp_server_list
ip_gateway_list
XML Binding class name: IP_Gateway_List
Dictionary key name: ip_gateway_list
ip_list
XML Binding class name: IP_List
Dictionary key name: ip_list
mac
XML Binding class name: MAC
Dictionary key name: mac
class cybox.objects.system_object.NetworkInterfaceList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.system_object.NetworkInterfaceListType
network_interface
(List of values permitted)
XML Binding class name: Network_Interface
Dictionary key name: network_interface
class cybox.objects.system_object.OS[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.system_object.OSType
bitness
XML Binding class name: Bitness
Dictionary key name: bitness
build_number
XML Binding class name: Build_Number
Dictionary key name: build_number
environment_variable_list
XML Binding class name: Environment_Variable_List
Dictionary key name: environment_variable_list
install_date
XML Binding class name: Install_Date
Dictionary key name: install_date
patch_level
XML Binding class name: Patch_Level
Dictionary key name: patch_level
platform
XML Binding class name: Platform
Dictionary key name: platform
class cybox.objects.system_object.System[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.system_object.SystemObjectType
available_physical_memory
XML Binding class name: Available_Physical_Memory
Dictionary key name: available_physical_memory
bios_info
XML Binding class name: BIOS_Info
Dictionary key name: bios_info
date
XML Binding class name: Date
Dictionary key name: date
hostname
XML Binding class name: Hostname
Dictionary key name: hostname
local_time
XML Binding class name: Local_Time
Dictionary key name: local_time
network_interface_list
XML Binding class name: Network_Interface_List
Dictionary key name: network_interface_list
os
XML Binding class name: OS
Dictionary key name: os
processor
XML Binding class name: Processor
Dictionary key name: processor
system_time
XML Binding class name: System_Time
Dictionary key name: system_time
timezone_dst
XML Binding class name: Timezone_DST
Dictionary key name: timezone_dst
timezone_standard
XML Binding class name: Timezone_Standard
Dictionary key name: timezone_standard
total_physical_memory
XML Binding class name: Total_Physical_Memory
Dictionary key name: total_physical_memory
uptime
XML Binding class name: Uptime
Dictionary key name: uptime
username
XML Binding class name: Username
Dictionary key name: username

Version: 2.1.0.13

cybox.objects.uri_object module
class cybox.objects.uri_object.URI(value=None, type_=None)[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.uri_object.URIObjectType
type_
XML Binding class name: type_
Dictionary key name: type
value
XML Binding class name: Value
Dictionary key name: value

Version: 2.1.0.13

cybox.objects.user_account_object module
class cybox.objects.user_account_object.Group[source]

Bases: mixbox.entities.Entity

An abstract class for account groups.

XML binding class: <undefined>
class cybox.objects.user_account_object.GroupList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.user_account_object.GroupListType
group
(List of values permitted)
XML Binding class name: Group
Dictionary key name: group
class cybox.objects.user_account_object.Privilege[source]

Bases: mixbox.entities.Entity

An abstract class for account privileges.

XML binding class: <undefined>
class cybox.objects.user_account_object.PrivilegeList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.user_account_object.PrivilegeListType
privilege
(List of values permitted)
XML Binding class name: Privilege
Dictionary key name: privilege
class cybox.objects.user_account_object.UserAccount[source]

Bases: cybox.objects.account_object.Account

XML binding class: cybox.bindings.user_account_object.UserAccountObjectType
full_name
XML Binding class name: Full_Name
Dictionary key name: full_name
group_list
XML Binding class name: Group_List
Dictionary key name: group_list
home_directory
XML Binding class name: Home_Directory
Dictionary key name: home_directory
last_login
XML Binding class name: Last_Login
Dictionary key name: last_login
password_required
XML Binding class name: password_required
Dictionary key name: password_required
privilege_list
XML Binding class name: Privilege_List
Dictionary key name: privilege_list
script_path
XML Binding class name: Script_Path
Dictionary key name: script_path
user_password_age
XML Binding class name: User_Password_Age
Dictionary key name: user_password_age
username
XML Binding class name: Username
Dictionary key name: username

Version: 2.1.0.13

cybox.objects.volume_object module
class cybox.objects.volume_object.FileSystemFlagList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.volume_object.FileSystemFlagListType
file_system_flag
(List of values permitted)
XML Binding class name: File_System_Flag
Dictionary key name: file_system_flag
class cybox.objects.volume_object.Volume[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.volume_object.VolumeObjectType
actual_available_allocation_units
XML Binding class name: Actual_Available_Allocation_Units
Dictionary key name: actual_available_allocation_units
bytes_per_sector
XML Binding class name: Bytes_Per_Sector
Dictionary key name: bytes_per_sector
creation_time
XML Binding class name: Creation_Time
Dictionary key name: creation_time
device_path
XML Binding class name: Device_Path
Dictionary key name: device_path
file_system_flag_list
XML Binding class name: File_System_Flag_List
Dictionary key name: file_system_flag_list
file_system_type
XML Binding class name: File_System_Type
Dictionary key name: file_system_type
is_mounted
XML Binding class name: is_mounted
Dictionary key name: is_mounted
name
XML Binding class name: Name
Dictionary key name: name
sectors_per_allocation_unit
XML Binding class name: Sectors_Per_Allocation_Unit
Dictionary key name: sectors_per_allocation_unit
serial_number
XML Binding class name: Serial_Number
Dictionary key name: serial_number
total_allocation_units
XML Binding class name: Total_Allocation_Units
Dictionary key name: total_allocation_units

Version: 2.1.0.13

cybox.objects.whois_object module
class cybox.objects.whois_object.WhoisContact[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.whois_object.WhoisContactType
address
XML Binding class name: Address
Dictionary key name: address
contact_id
XML Binding class name: Contact_ID
Dictionary key name: contact_id
contact_type
XML Binding class name: contact_type
Dictionary key name: contact_type
email_address
XML Binding class name: Email_Address
Dictionary key name: email_address
fax_number
XML Binding class name: Fax_Number
Dictionary key name: fax_number
name
XML Binding class name: Name
Dictionary key name: name
organization
XML Binding class name: Organization
Dictionary key name: organization
phone_number
XML Binding class name: Phone_Number
Dictionary key name: phone_number
class cybox.objects.whois_object.WhoisContacts(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.whois_object.WhoisContactsType
contact
(List of values permitted)
XML Binding class name: Contact
Dictionary key name: contact
class cybox.objects.whois_object.WhoisEntry[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.whois_object.WhoisObjectType
contact_info
XML Binding class name: Contact_Info
Dictionary key name: contact_info
creation_date
XML Binding class name: Creation_Date
Dictionary key name: creation_date
dnssec
XML Binding class name: DNSSEC
Dictionary key name: dnssec
domain_id
XML Binding class name: Domain_ID
Dictionary key name: domain_id
domain_name
XML Binding class name: Domain_Name
Dictionary key name: domain_name
expiration_date
XML Binding class name: Expiration_Date
Dictionary key name: expiration_date
ip_address
XML Binding class name: IP_Address
Dictionary key name: ip_address
lookup_date
XML Binding class name: Lookup_Date
Dictionary key name: lookup_date
nameservers
XML Binding class name: Nameservers
Dictionary key name: nameservers
regional_internet_registry
XML Binding class name: Regional_Internet_Registry
Dictionary key name: regional_internet_registry
registrants
XML Binding class name: Registrants
Dictionary key name: registrants
registrar_info
XML Binding class name: Registrar_Info
Dictionary key name: registrar_info
remarks
XML Binding class name: Remarks
Dictionary key name: remarks
server_name
XML Binding class name: Server_Name
Dictionary key name: server_name
sponsoring_registrar
XML Binding class name: Sponsoring_Registrar
Dictionary key name: sponsoring_registrar
status
XML Binding class name: Status
Dictionary key name: status
updated_date
XML Binding class name: Updated_Date
Dictionary key name: updated_date
class cybox.objects.whois_object.WhoisNameservers(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.whois_object.WhoisNameserversType
nameserver
(List of values permitted)
XML Binding class name: Nameserver
Dictionary key name: nameserver
class cybox.objects.whois_object.WhoisRegistrant[source]

Bases: cybox.objects.whois_object.WhoisContact

XML binding class: cybox.bindings.whois_object.WhoisRegistrantInfoType
registrant_id
XML Binding class name: Registrant_ID
Dictionary key name: registrant_id
class cybox.objects.whois_object.WhoisRegistrants(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.whois_object.WhoisRegistrantsType
registrant
(List of values permitted)
XML Binding class name: Registrant
Dictionary key name: registrant
class cybox.objects.whois_object.WhoisRegistrar[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.whois_object.WhoisRegistrarInfoType
address
XML Binding class name: Address
Dictionary key name: address
contacts
XML Binding class name: Contacts
Dictionary key name: contacts
email_address
XML Binding class name: Email_Address
Dictionary key name: email_address
name
XML Binding class name: Name
Dictionary key name: name
phone_number
XML Binding class name: Phone_Number
Dictionary key name: phone_number
referral_url
XML Binding class name: Referral_URL
Dictionary key name: referral_url
registrar_guid
XML Binding class name: Registrar_GUID
Dictionary key name: registrar_guid
registrar_id
XML Binding class name: Registrar_ID
Dictionary key name: registrar_id
whois_server
XML Binding class name: Whois_Server
Dictionary key name: whois_server
class cybox.objects.whois_object.WhoisStatus(value=None)[source]

Bases: cybox.common.properties.BaseProperty

XML binding class: cybox.bindings.whois_object.WhoisStatusType
class cybox.objects.whois_object.WhoisStatuses(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.whois_object.WhoisStatusesType
status
(List of values permitted)
XML Binding class name: Status
Dictionary key name: status

Version: 2.1.0.13

cybox.objects.win_computer_account_object module
class cybox.objects.win_computer_account_object.FullyQualifiedName[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_computer_account_object.FullyQualifiedNameType
full_name
XML Binding class name: Full_Name
Dictionary key name: full_name
netbeui_name
XML Binding class name: NetBEUI_Name
Dictionary key name: netbeui_name
class cybox.objects.win_computer_account_object.Kerberos[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_computer_account_object.KerberosType
delegation
XML Binding class name: Delegation
Dictionary key name: delegation
ticket
XML Binding class name: Ticket
Dictionary key name: ticket
class cybox.objects.win_computer_account_object.KerberosDelegation[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_computer_account_object.KerberosDelegationType
bitmask
XML Binding class name: Bitmask
Dictionary key name: bitmask
service
XML Binding class name: Service
Dictionary key name: service
class cybox.objects.win_computer_account_object.KerberosService[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_computer_account_object.KerberosServiceType
computer
XML Binding class name: Computer
Dictionary key name: computer
name
XML Binding class name: Name
Dictionary key name: name
port
XML Binding class name: Port
Dictionary key name: port
user
XML Binding class name: User
Dictionary key name: user
class cybox.objects.win_computer_account_object.WinComputerAccount[source]

Bases: cybox.objects.account_object.Account

XML binding class: cybox.bindings.win_computer_account_object.WindowsComputerAccountObjectType
fully_qualified_name
XML Binding class name: Fully_Qualified_Name
Dictionary key name: fully_qualified_name
kerberos
XML Binding class name: Kerberos
Dictionary key name: kerberos
security_id
XML Binding class name: Security_ID
Dictionary key name: security_id
type_
XML Binding class name: Type
Dictionary key name: type

Version: 2.1.0.13

cybox.objects.win_critical_section_object module
class cybox.objects.win_critical_section_object.WinCriticalSection[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.win_critical_section_object.WindowsCriticalSectionObjectType
address
XML Binding class name: Address
Dictionary key name: address
spin_count
XML Binding class name: Spin_Count
Dictionary key name: spin_count

Version: 2.1.0.13

cybox.objects.win_driver_object module
class cybox.objects.win_driver_object.DeviceObjectList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.win_driver_object.DeviceObjectListType
device_object_struct
(List of values permitted)
XML Binding class name: Device_Object_Struct
Dictionary key name: device_object_struct
class cybox.objects.win_driver_object.DeviceObjectStruct[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_driver_object.DeviceObjectStructType
attached_device_name
XML Binding class name: Attached_Device_Name
Dictionary key name: attached_device_name
attached_device_object
XML Binding class name: Attached_Device_Object
Dictionary key name: attached_device_object
attached_to_device_name
XML Binding class name: Attached_To_Device_Name
Dictionary key name: attached_to_device_name
attached_to_device_object
XML Binding class name: Attached_To_Device_Object
Dictionary key name: attached_to_device_object
attached_to_driver_name
XML Binding class name: Attached_To_Driver_Name
Dictionary key name: attached_to_driver_name
attached_to_driver_object
XML Binding class name: Attached_To_Driver_Object
Dictionary key name: attached_to_driver_object
device_name
XML Binding class name: Device_Name
Dictionary key name: device_name
device_object
XML Binding class name: Device_Object
Dictionary key name: device_object
class cybox.objects.win_driver_object.WinDriver[source]

Bases: cybox.objects.win_executable_file_object.WinExecutableFile

XML binding class: cybox.bindings.win_driver_object.WindowsDriverObjectType
device_object_list
XML Binding class name: Device_Object_List
Dictionary key name: device_object_list
driver_init
XML Binding class name: Driver_Init
Dictionary key name: driver_init
driver_name
XML Binding class name: Driver_Name
Dictionary key name: driver_name
driver_object_address
XML Binding class name: Driver_Object_Address
Dictionary key name: driver_object_address
driver_start_io
XML Binding class name: Driver_Start_IO
Dictionary key name: driver_start_io
driver_unload
XML Binding class name: Driver_Unload
Dictionary key name: driver_unload
image_base
XML Binding class name: Image_Base
Dictionary key name: image_base
image_size
XML Binding class name: Image_Size
Dictionary key name: image_size
irp_mj_cleanup
XML Binding class name: IRP_MJ_CLEANUP
Dictionary key name: irp_mj_cleanup
irp_mj_close
XML Binding class name: IRP_MJ_CLOSE
Dictionary key name: irp_mj_close
irp_mj_create
XML Binding class name: IRP_MJ_CREATE
Dictionary key name: irp_mj_create
irp_mj_create_mailslot
XML Binding class name: IRP_MJ_CREATE_MAILSLOT
Dictionary key name: irp_mj_create_mailslot
irp_mj_create_named_pipe
XML Binding class name: IRP_MJ_CREATE_NAMED_PIPE
Dictionary key name: irp_mj_create_named_pipe
irp_mj_device_change
XML Binding class name: IRP_MJ_DEVICE_CHANGE
Dictionary key name: irp_mj_device_change
irp_mj_device_control
XML Binding class name: IRP_MJ_DEVICE_CONTROL
Dictionary key name: irp_mj_device_control
irp_mj_directory_control
XML Binding class name: IRP_MJ_DIRECTORY_CONTROL
Dictionary key name: irp_mj_directory_control
irp_mj_file_system_control
XML Binding class name: IRP_MJ_FILE_SYSTEM_CONTROL
Dictionary key name: irp_mj_file_system_control
irp_mj_flush_buffers
XML Binding class name: IRP_MJ_FLUSH_BUFFERS
Dictionary key name: irp_mj_flush_buffers
irp_mj_internal_device_control
XML Binding class name: IRP_MJ_INTERNAL_DEVICE_CONTROL
Dictionary key name: irp_mj_internal_device_control
irp_mj_lock_control
XML Binding class name: IRP_MJ_LOCK_CONTROL
Dictionary key name: irp_mj_lock_control
irp_mj_pnp
XML Binding class name: IRP_MJ_PNP
Dictionary key name: irp_mj_pnp
irp_mj_power
XML Binding class name: IRP_MJ_POWER
Dictionary key name: irp_mj_power
irp_mj_query_ea
XML Binding class name: IRP_MJ_QUERY_EA
Dictionary key name: irp_mj_query_ea
irp_mj_query_information
XML Binding class name: IRP_MJ_QUERY_INFORMATION
Dictionary key name: irp_mj_query_information
irp_mj_query_quota
XML Binding class name: IRP_MJ_QUERY_QUOTA
Dictionary key name: irp_mj_query_quota
irp_mj_query_security
XML Binding class name: IRP_MJ_QUERY_SECURITY
Dictionary key name: irp_mj_query_security
irp_mj_query_volume_information
XML Binding class name: IRP_MJ_QUERY_VOLUME_INFORMATION
Dictionary key name: irp_mj_query_volume_information
irp_mj_read
XML Binding class name: IRP_MJ_READ
Dictionary key name: irp_mj_read
irp_mj_set_ea
XML Binding class name: IRP_MJ_SET_EA
Dictionary key name: irp_mj_set_ea
irp_mj_set_information
XML Binding class name: IRP_MJ_SET_INFORMATION
Dictionary key name: irp_mj_set_information
irp_mj_set_quota
XML Binding class name: IRP_MJ_SET_QUOTA
Dictionary key name: irp_mj_set_quota
irp_mj_set_security
XML Binding class name: IRP_MJ_SET_SECURITY
Dictionary key name: irp_mj_set_security
irp_mj_set_volume_information
XML Binding class name: IRP_MJ_SET_VOLUME_INFORMATION
Dictionary key name: irp_mj_set_volume_information
irp_mj_shutdown
XML Binding class name: IRP_MJ_SHUTDOWN
Dictionary key name: irp_mj_shutdown
irp_mj_system_control
XML Binding class name: IRP_MJ_SYSTEM_CONTROL
Dictionary key name: irp_mj_system_control
irp_mj_write
XML Binding class name: IRP_MJ_WRITE
Dictionary key name: irp_mj_write

Version: 2.1.0.13

cybox.objects.win_event_log_object module
class cybox.objects.win_event_log_object.UnformattedMessageList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.win_event_log_object.UnformattedMessageListType
unformatted_message
(List of values permitted)
XML Binding class name: Unformatted_Message
Dictionary key name: unformatted_message
class cybox.objects.win_event_log_object.WinEventLog[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.win_event_log_object.WindowsEventLogObjectType
blob
XML Binding class name: Blob
Dictionary key name: blob
category
XML Binding class name: Category
Dictionary key name: category
category_num
XML Binding class name: Category_Num
Dictionary key name: category_num
correlation_activity_id
XML Binding class name: Correlation_Activity_ID
Dictionary key name: correlation_activity_id
XML Binding class name: Correlation_Related_Activity_ID
Dictionary key name: correlation_related_activity_id
eid
XML Binding class name: EID
Dictionary key name: eid
execution_process_id
XML Binding class name: Execution_Process_ID
Dictionary key name: execution_process_id
execution_thread_id
XML Binding class name: Execution_Thread_ID
Dictionary key name: execution_thread_id
generation_time
XML Binding class name: Generation_Time
Dictionary key name: generation_time
index
XML Binding class name: Index
Dictionary key name: index
log
XML Binding class name: Log
Dictionary key name: log
machine
XML Binding class name: Machine
Dictionary key name: machine
message
XML Binding class name: Message
Dictionary key name: message
reserved
XML Binding class name: Reserved
Dictionary key name: reserved
source
XML Binding class name: Source
Dictionary key name: source
type_
XML Binding class name: Type
Dictionary key name: type
unformatted_message_list
XML Binding class name: Unformatted_Message_List
Dictionary key name: unformatted_message_list
user
XML Binding class name: User
Dictionary key name: user
write_time
XML Binding class name: Write_Time
Dictionary key name: write_time

Version: 2.1.0.13

cybox.objects.win_event_object module
class cybox.objects.win_event_object.WinEvent[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.win_event_object.WindowsEventObjectType
handle
XML Binding class name: Handle
Dictionary key name: handle
name
XML Binding class name: Name
Dictionary key name: name
type_
XML Binding class name: Type
Dictionary key name: type

Version: 2.1.0.13

cybox.objects.win_executable_file_object module
class cybox.objects.win_executable_file_object.DOSHeader[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_executable_file_object.DOSHeaderType
e_cblp
XML Binding class name: e_cblp
Dictionary key name: e_cblp
e_cp
XML Binding class name: e_cp
Dictionary key name: e_cp
e_cparhdr
XML Binding class name: e_cparhdr
Dictionary key name: e_cparhdr
e_crlc
XML Binding class name: e_crlc
Dictionary key name: e_crlc
e_cs
XML Binding class name: e_cs
Dictionary key name: e_cs
e_csum
XML Binding class name: e_csum
Dictionary key name: e_csum
e_ip
XML Binding class name: e_ip
Dictionary key name: e_ip
e_lfanew
XML Binding class name: e_lfanew
Dictionary key name: e_lfanew
e_lfarlc
XML Binding class name: e_lfarlc
Dictionary key name: e_lfarlc
e_magic
XML Binding class name: e_magic
Dictionary key name: e_magic
e_maxalloc
XML Binding class name: e_maxalloc
Dictionary key name: e_maxalloc
e_minalloc
XML Binding class name: e_minalloc
Dictionary key name: e_minalloc
e_oemid
XML Binding class name: e_oemid
Dictionary key name: e_oemid
e_oeminfo
XML Binding class name: e_oeminfo
Dictionary key name: e_oeminfo
e_ovro
XML Binding class name: e_ovro
Dictionary key name: e_ovro
e_sp
XML Binding class name: e_sp
Dictionary key name: e_sp
e_ss
XML Binding class name: e_ss
Dictionary key name: e_ss
hashes
XML Binding class name: Hashes
Dictionary key name: hashes
reserved2
XML Binding class name: reserved2
Dictionary key name: reserved2
class cybox.objects.win_executable_file_object.DataDirectory[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_executable_file_object.DataDirectoryType
architecture
XML Binding class name: Architecture
Dictionary key name: architecture
base_relocation_table
XML Binding class name: Base_Relocation_Table
Dictionary key name: base_relocation_table
bound_import
XML Binding class name: Bound_Import
Dictionary key name: bound_import
certificate_table
XML Binding class name: Certificate_Table
Dictionary key name: certificate_table
clr_runtime_header
XML Binding class name: CLR_Runtime_Header
Dictionary key name: clr_runtime_header
debug
XML Binding class name: Debug
Dictionary key name: debug
delay_import_descriptor
XML Binding class name: Delay_Import_Descriptor
Dictionary key name: delay_import_descriptor
exception_table
XML Binding class name: Exception_Table
Dictionary key name: exception_table
export_table
XML Binding class name: Export_Table
Dictionary key name: export_table
global_ptr
XML Binding class name: Global_Ptr
Dictionary key name: global_ptr
import_address_table
XML Binding class name: Import_Address_Table
Dictionary key name: import_address_table
import_table
XML Binding class name: Import_Table
Dictionary key name: import_table
load_config_table
XML Binding class name: Load_Config_Table
Dictionary key name: load_config_table
reserved
XML Binding class name: Reserved
Dictionary key name: reserved
resource_table
XML Binding class name: Resource_Table
Dictionary key name: resource_table
tls_table
XML Binding class name: Tls_Table
Dictionary key name: tls_table
class cybox.objects.win_executable_file_object.Entropy[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_executable_file_object.EntropyType
max
XML Binding class name: Max
Dictionary key name: max
min
XML Binding class name: Min
Dictionary key name: min
value
XML Binding class name: Value
Dictionary key name: value
class cybox.objects.win_executable_file_object.PEBuildInformation[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_executable_file_object.PEBuildInformationType
compiler_name
XML Binding class name: Compiler_Name
Dictionary key name: compiler_name
compiler_version
XML Binding class name: Compiler_Version
Dictionary key name: compiler_version
linker_name
XML Binding class name: Linker_Name
Dictionary key name: linker_name
linker_version
XML Binding class name: Linker_Version
Dictionary key name: linker_version
class cybox.objects.win_executable_file_object.PEChecksum[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_executable_file_object.PEChecksumType
pe_computed_api
XML Binding class name: PE_Computed_API
Dictionary key name: pe_computed_api
pe_file_api
XML Binding class name: PE_File_API
Dictionary key name: pe_file_api
pe_file_raw
XML Binding class name: PE_File_Raw
Dictionary key name: pe_file_raw
class cybox.objects.win_executable_file_object.PEDataDirectoryStruct[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_executable_file_object.PEDataDirectoryStructType
size
XML Binding class name: Size
Dictionary key name: size
virtual_address
XML Binding class name: Virtual_Address
Dictionary key name: virtual_address
class cybox.objects.win_executable_file_object.PEExportedFunction[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_executable_file_object.PEExportedFunctionType
entry_point
XML Binding class name: Entry_Point
Dictionary key name: entry_point
function_name
XML Binding class name: Function_Name
Dictionary key name: function_name
ordinal
XML Binding class name: Ordinal
Dictionary key name: ordinal
class cybox.objects.win_executable_file_object.PEExportedFunctions(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.win_executable_file_object.PEExportedFunctionsType
exported_function
(List of values permitted)
XML Binding class name: Exported_Function
Dictionary key name: exported_function
class cybox.objects.win_executable_file_object.PEExports[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_executable_file_object.PEExportsType
exported_functions
XML Binding class name: Exported_Functions
Dictionary key name: exported_functions
exports_time_stamp
XML Binding class name: Exports_Time_Stamp
Dictionary key name: exports_time_stamp
name
XML Binding class name: Name
Dictionary key name: name
number_of_addresses
XML Binding class name: Number_Of_Addresses
Dictionary key name: number_of_addresses
number_of_functions
XML Binding class name: Number_Of_Functions
Dictionary key name: number_of_functions
number_of_names
XML Binding class name: Number_Of_Names
Dictionary key name: number_of_names
class cybox.objects.win_executable_file_object.PEFileHeader[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_executable_file_object.PEFileHeaderType
characteristics
XML Binding class name: Characteristics
Dictionary key name: characteristics
hashes
XML Binding class name: Hashes
Dictionary key name: hashes
machine
XML Binding class name: Machine
Dictionary key name: machine
number_of_sections
XML Binding class name: Number_Of_Sections
Dictionary key name: number_of_sections
number_of_symbols
XML Binding class name: Number_Of_Symbols
Dictionary key name: number_of_symbols
pointer_to_symbol_table
XML Binding class name: Pointer_To_Symbol_Table
Dictionary key name: pointer_to_symbol_table
size_of_optional_header
XML Binding class name: Size_Of_Optional_Header
Dictionary key name: size_of_optional_header
time_date_stamp
XML Binding class name: Time_Date_Stamp
Dictionary key name: time_date_stamp
class cybox.objects.win_executable_file_object.PEHeaders[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_executable_file_object.PEHeadersType
dos_header
XML Binding class name: DOS_Header
Dictionary key name: dos_header
entropy
XML Binding class name: Entropy
Dictionary key name: entropy
file_header
XML Binding class name: File_Header
Dictionary key name: file_header
hashes
XML Binding class name: Hashes
Dictionary key name: hashes
optional_header
XML Binding class name: Optional_Header
Dictionary key name: optional_header
signature
XML Binding class name: Signature
Dictionary key name: signature
class cybox.objects.win_executable_file_object.PEImport[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_executable_file_object.PEImportType
delay_load
XML Binding class name: delay_load
Dictionary key name: delay_load
file_name
XML Binding class name: File_Name
Dictionary key name: file_name
imported_functions
XML Binding class name: Imported_Functions
Dictionary key name: imported_functions
initially_visible
XML Binding class name: initially_visible
Dictionary key name: initially_visible
virtual_address
XML Binding class name: Virtual_Address
Dictionary key name: virtual_address
class cybox.objects.win_executable_file_object.PEImportList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.win_executable_file_object.PEImportListType
import_
(List of values permitted)
XML Binding class name: Import
Dictionary key name: import
class cybox.objects.win_executable_file_object.PEImportedFunction[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_executable_file_object.PEImportedFunctionType
bound
XML Binding class name: Bound
Dictionary key name: bound
function_name
XML Binding class name: Function_Name
Dictionary key name: function_name
hint
XML Binding class name: Hint
Dictionary key name: hint
ordinal
XML Binding class name: Ordinal
Dictionary key name: ordinal
virtual_address
XML Binding class name: Virtual_Address
Dictionary key name: virtual_address
class cybox.objects.win_executable_file_object.PEImportedFunctions(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.win_executable_file_object.PEImportedFunctionsType
imported_function
(List of values permitted)
XML Binding class name: Imported_Function
Dictionary key name: imported_function
class cybox.objects.win_executable_file_object.PEOptionalHeader[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_executable_file_object.PEOptionalHeaderType
address_of_entry_point
XML Binding class name: Address_Of_Entry_Point
Dictionary key name: address_of_entry_point
base_of_code
XML Binding class name: Base_Of_Code
Dictionary key name: base_of_code
base_of_data
XML Binding class name: Base_Of_Data
Dictionary key name: base_of_data
checksum
XML Binding class name: Checksum
Dictionary key name: checksum
data_directory
XML Binding class name: Data_Directory
Dictionary key name: data_directory
dll_characteristics
XML Binding class name: DLL_Characteristics
Dictionary key name: dll_characteristics
file_alignment
XML Binding class name: File_Alignment
Dictionary key name: file_alignment
hashes
XML Binding class name: Hashes
Dictionary key name: hashes
image_base
XML Binding class name: Image_Base
Dictionary key name: image_base
loader_flags
XML Binding class name: Loader_Flags
Dictionary key name: loader_flags
magic
XML Binding class name: Magic
Dictionary key name: magic
major_image_version
XML Binding class name: Major_Image_Version
Dictionary key name: major_image_version
major_linker_version
XML Binding class name: Major_Linker_Version
Dictionary key name: major_linker_version
major_os_version
XML Binding class name: Major_OS_Version
Dictionary key name: major_os_version
major_subsystem_version
XML Binding class name: Major_Subsystem_Version
Dictionary key name: major_subsystem_version
minor_image_version
XML Binding class name: Minor_Image_Version
Dictionary key name: minor_image_version
minor_linker_version
XML Binding class name: Minor_Linker_Version
Dictionary key name: minor_linker_version
minor_os_version
XML Binding class name: Minor_OS_Version
Dictionary key name: minor_os_version
minor_subsystem_version
XML Binding class name: Minor_Subsystem_Version
Dictionary key name: minor_subsystem_version
number_of_rva_and_sizes
XML Binding class name: Number_Of_Rva_And_Sizes
Dictionary key name: number_of_rva_and_sizes
section_alignment
XML Binding class name: Section_Alignment
Dictionary key name: section_alignment
size_of_code
XML Binding class name: Size_Of_Code
Dictionary key name: size_of_code
size_of_headers
XML Binding class name: Size_Of_Headers
Dictionary key name: size_of_headers
size_of_heap_commit
XML Binding class name: Size_Of_Heap_Commit
Dictionary key name: size_of_heap_commit
size_of_heap_reserve
XML Binding class name: Size_Of_Heap_Reserve
Dictionary key name: size_of_heap_reserve
size_of_image
XML Binding class name: Size_Of_Image
Dictionary key name: size_of_image
size_of_initialized_data
XML Binding class name: Size_Of_Initialized_Data
Dictionary key name: size_of_initialized_data
size_of_stack_commit
XML Binding class name: Size_Of_Stack_Commit
Dictionary key name: size_of_stack_commit
size_of_stack_reserve
XML Binding class name: Size_Of_Stack_Reserve
Dictionary key name: size_of_stack_reserve
size_of_uninitialized_data
XML Binding class name: Size_Of_Uninitialized_Data
Dictionary key name: size_of_uninitialized_data
subsystem
XML Binding class name: Subsystem
Dictionary key name: subsystem
win32_version_value
XML Binding class name: Win32_Version_Value
Dictionary key name: win32_version_value
class cybox.objects.win_executable_file_object.PEResource[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_executable_file_object.PEResourceType
data
XML Binding class name: Data
Dictionary key name: data
hashes
XML Binding class name: Hashes
Dictionary key name: hashes
language
XML Binding class name: Language
Dictionary key name: language
name
XML Binding class name: Name
Dictionary key name: name
size
XML Binding class name: Size
Dictionary key name: size
sub_language
XML Binding class name: Sub_Language
Dictionary key name: sub_language
type_
XML Binding class name: Type
Dictionary key name: type
virtual_address
XML Binding class name: Virtual_Address
Dictionary key name: virtual_address
class cybox.objects.win_executable_file_object.PEResourceList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.win_executable_file_object.PEResourceListType
classmethod from_list(seq)[source]
resource
(List of values permitted)
XML Binding class name: Resource
Dictionary key name: resource
class cybox.objects.win_executable_file_object.PESection[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_executable_file_object.PESectionType
data_hashes
XML Binding class name: Data_Hashes
Dictionary key name: data_hashes
entropy
XML Binding class name: Entropy
Dictionary key name: entropy
header_hashes
XML Binding class name: Header_Hashes
Dictionary key name: header_hashes
section_header
XML Binding class name: Section_Header
Dictionary key name: section_header
class cybox.objects.win_executable_file_object.PESectionHeaderStruct[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_executable_file_object.PESectionHeaderStructType
characteristics
XML Binding class name: Characteristics
Dictionary key name: characteristics
name
XML Binding class name: Name
Dictionary key name: name
number_of_linenumbers
XML Binding class name: Number_Of_Linenumbers
Dictionary key name: number_of_linenumbers
number_of_relocations
XML Binding class name: Number_Of_Relocations
Dictionary key name: number_of_relocations
pointer_to_linenumbers
XML Binding class name: Pointer_To_Linenumbers
Dictionary key name: pointer_to_linenumbers
pointer_to_raw_data
XML Binding class name: Pointer_To_Raw_Data
Dictionary key name: pointer_to_raw_data
pointer_to_relocations
XML Binding class name: Pointer_To_Relocations
Dictionary key name: pointer_to_relocations
size_of_raw_data
XML Binding class name: Size_Of_Raw_Data
Dictionary key name: size_of_raw_data
virtual_address
XML Binding class name: Virtual_Address
Dictionary key name: virtual_address
virtual_size
XML Binding class name: Virtual_Size
Dictionary key name: virtual_size
class cybox.objects.win_executable_file_object.PESectionList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.win_executable_file_object.PESectionListType
section
(List of values permitted)
XML Binding class name: Section
Dictionary key name: section
class cybox.objects.win_executable_file_object.PEVersionInfoResource[source]

Bases: cybox.objects.win_executable_file_object.PEResource

XML binding class: cybox.bindings.win_executable_file_object.PEVersionInfoResourceType
comments
XML Binding class name: Comments
Dictionary key name: comments
companyname
XML Binding class name: CompanyName
Dictionary key name: companyname
filedescription
XML Binding class name: FileDescription
Dictionary key name: filedescription
fileversion
XML Binding class name: FileVersion
Dictionary key name: fileversion
internalname
XML Binding class name: InternalName
Dictionary key name: internalname
static keyword_test(pe_resource_dict)[source]
langid
XML Binding class name: LangID
Dictionary key name: langid
legalcopyright
XML Binding class name: LegalCopyright
Dictionary key name: legalcopyright
legaltrademarks
XML Binding class name: LegalTrademarks
Dictionary key name: legaltrademarks
originalfilename
XML Binding class name: OriginalFilename
Dictionary key name: originalfilename
privatebuild
XML Binding class name: PrivateBuild
Dictionary key name: privatebuild
productname
XML Binding class name: ProductName
Dictionary key name: productname
productversion
XML Binding class name: ProductVersion
Dictionary key name: productversion
specialbuild
XML Binding class name: SpecialBuild
Dictionary key name: specialbuild
class cybox.objects.win_executable_file_object.WinExecutableFile[source]

Bases: cybox.objects.win_file_object.WinFile

XML binding class: cybox.bindings.win_executable_file_object.WindowsExecutableFileObjectType
build_information
XML Binding class name: Build_Information
Dictionary key name: build_information
digital_signature
XML Binding class name: Digital_Signature
Dictionary key name: digital_signature
exports
XML Binding class name: Exports
Dictionary key name: exports
extraneous_bytes
XML Binding class name: Extraneous_Bytes
Dictionary key name: extraneous_bytes
headers
XML Binding class name: Headers
Dictionary key name: headers
imports
XML Binding class name: Imports
Dictionary key name: imports
pe_checksum
XML Binding class name: PE_Checksum
Dictionary key name: pe_checksum
resources
XML Binding class name: Resources
Dictionary key name: resources
sections
XML Binding class name: Sections
Dictionary key name: sections
type_
XML Binding class name: Type
Dictionary key name: type

Version: 2.1.0.13

cybox.objects.win_file_object module
class cybox.objects.win_file_object.Stream[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_file_object.StreamObjectType
hashes
(List of values permitted)
XML Binding class name: Hash
Dictionary key name: hashes
name
XML Binding class name: Name
Dictionary key name: name
size_in_bytes
XML Binding class name: Size_In_Bytes
Dictionary key name: size_in_bytes
class cybox.objects.win_file_object.StreamList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.win_file_object.StreamListType
stream
(List of values permitted)
XML Binding class name: Stream
Dictionary key name: stream
class cybox.objects.win_file_object.WinFile[source]

Bases: cybox.objects.file_object.File

XML binding class: cybox.bindings.win_file_object.WindowsFileObjectType
drive
XML Binding class name: Drive
Dictionary key name: drive
file_attributes_list
XML Binding class name: File_Attributes_List
Dictionary key name: file_attributes_list
filename_accessed_time
XML Binding class name: Filename_Accessed_Time
Dictionary key name: filename_accessed_time
filename_created_time
XML Binding class name: Filename_Created_Time
Dictionary key name: filename_created_time
filename_modified_time
XML Binding class name: Filename_Modified_Time
Dictionary key name: filename_modified_time
permissions
XML Binding class name: Permissions
Dictionary key name: permissions
security_id
XML Binding class name: Security_ID
Dictionary key name: security_id
security_type
XML Binding class name: Security_Type
Dictionary key name: security_type
stream_list
XML Binding class name: Stream_List
Dictionary key name: stream_list
class cybox.objects.win_file_object.WindowsFileAttribute(value=None)[source]

Bases: cybox.common.properties.String

XML binding class: cybox.bindings.win_file_object.WindowsFileAttributeType
class cybox.objects.win_file_object.WindowsFileAttributes(*args)[source]

Bases: cybox.objects.file_object.FileAttribute, mixbox.entities.EntityList

XML binding class: cybox.bindings.win_file_object.WindowsFileAttributesType
attribute
(List of values permitted)
XML Binding class name: Attribute
Dictionary key name: attribute
class cybox.objects.win_file_object.WindowsFilePermissions[source]

Bases: cybox.objects.file_object.FilePermissions

XML binding class: cybox.bindings.win_file_object.WindowsFilePermissionsType
full_control
XML Binding class name: Full_Control
Dictionary key name: full_control
modify
XML Binding class name: Modify
Dictionary key name: modify
read
XML Binding class name: Read
Dictionary key name: read
read_and_execute
XML Binding class name: Read_And_Execute
Dictionary key name: read_and_execute
write
XML Binding class name: Write
Dictionary key name: write

Version: 2.1.0.13

cybox.objects.win_filemapping_object module
class cybox.objects.win_filemapping_object.WinFilemapping[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.win_filemapping_object.WindowsFilemappingObjectType
actual_size
XML Binding class name: Actual_Size
Dictionary key name: actual_size
file_handle
XML Binding class name: File_Handle
Dictionary key name: file_handle
handle
XML Binding class name: Handle
Dictionary key name: handle
maximum_size
XML Binding class name: Maximum_Size
Dictionary key name: maximum_size
name
XML Binding class name: Name
Dictionary key name: name
page_protection_attribute
(List of values permitted)
XML Binding class name: Page_Protection_Attribute
Dictionary key name: page_protection_attribute
page_protection_value
XML Binding class name: Page_Protection_Value
Dictionary key name: page_protection_value
security_attributes
XML Binding class name: Security_Attributes
Dictionary key name: security_attributes

Version: 2.1.0.13

cybox.objects.win_handle_object module
class cybox.objects.win_handle_object.WinHandle[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.win_handle_object.WindowsHandleObjectType
access_mask
XML Binding class name: Access_Mask
Dictionary key name: access_mask
id_
XML Binding class name: ID
Dictionary key name: id
name
XML Binding class name: Name
Dictionary key name: name
object_address
XML Binding class name: Object_Address
Dictionary key name: object_address
pointer_count
XML Binding class name: Pointer_Count
Dictionary key name: pointer_count
type_
XML Binding class name: Type
Dictionary key name: type
class cybox.objects.win_handle_object.WinHandleList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.win_handle_object.WindowsHandleListType
handle
(List of values permitted)
XML Binding class name: Handle
Dictionary key name: handle

Version: 2.1.0.13

cybox.objects.win_hook_object module
class cybox.objects.win_hook_object.WinHook[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.win_hook_object.WindowsHookObjectType
handle
XML Binding class name: Handle
Dictionary key name: handle
hooking_function_name
XML Binding class name: Hooking_Function_Name
Dictionary key name: hooking_function_name
hooking_module
XML Binding class name: Hooking_Module
Dictionary key name: hooking_module
thread_id
XML Binding class name: Thread_ID
Dictionary key name: thread_id
type_
XML Binding class name: Type
Dictionary key name: type

Version: 2.1.0.13

cybox.objects.win_kernel_object module
class cybox.objects.win_kernel_object.IDTEntry[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_kernel_object.IDTEntryType
offset_high
XML Binding class name: Offset_High
Dictionary key name: offset_high
offset_low
XML Binding class name: Offset_Low
Dictionary key name: offset_low
offset_middle
XML Binding class name: Offset_Middle
Dictionary key name: offset_middle
selector
XML Binding class name: Selector
Dictionary key name: selector
type_attr
XML Binding class name: Type_Attr
Dictionary key name: type_attr
class cybox.objects.win_kernel_object.IDTEntryList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.win_kernel_object.IDTEntryListType
idt_entry
(List of values permitted)
XML Binding class name: IDT_Entry
Dictionary key name: idt_entry
class cybox.objects.win_kernel_object.SSDTEntry[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_kernel_object.SSDTEntryType
argument_table_base
XML Binding class name: Argument_Table_Base
Dictionary key name: argument_table_base
hooked
XML Binding class name: hooked
Dictionary key name: hooked
number_of_services
XML Binding class name: Number_Of_Services
Dictionary key name: number_of_services
service_counter_table_base
XML Binding class name: Service_Counter_Table_Base
Dictionary key name: service_counter_table_base
service_table_base
XML Binding class name: Service_Table_Base
Dictionary key name: service_table_base
class cybox.objects.win_kernel_object.SSDTEntryList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.win_kernel_object.SSDTEntryListType
ssdt_entry
(List of values permitted)
XML Binding class name: SSDT_Entry
Dictionary key name: ssdt_entry
class cybox.objects.win_kernel_object.WinKernel[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.win_kernel_object.WindowsKernelObjectType
idt
XML Binding class name: IDT
Dictionary key name: idt
ssdt
XML Binding class name: SSDT
Dictionary key name: ssdt

Version: 2.1.0.13

cybox.objects.win_kernel_hook_object module
class cybox.objects.win_kernel_hook_object.WinKernelHook[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.win_kernel_hook_object.WindowsKernelHookObjectType
digital_signature_hooked
XML Binding class name: Digital_Signature_Hooked
Dictionary key name: digital_signature_hooked
digital_signature_hooking
XML Binding class name: Digital_Signature_Hooking
Dictionary key name: digital_signature_hooking
hook_description
XML Binding class name: Hook_Description
Dictionary key name: hook_description
hooked_function
XML Binding class name: Hooked_Function
Dictionary key name: hooked_function
hooked_module
XML Binding class name: Hooked_Module
Dictionary key name: hooked_module
hooking_address
XML Binding class name: Hooking_Address
Dictionary key name: hooking_address
hooking_module
XML Binding class name: Hooking_Module
Dictionary key name: hooking_module
type_
XML Binding class name: Type
Dictionary key name: type

Version: 2.1.0.13

cybox.objects.win_mailslot_object module
class cybox.objects.win_mailslot_object.WinMailslot[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.win_mailslot_object.WindowsMailslotObjectType
handle
XML Binding class name: Handle
Dictionary key name: handle
max_message_size
XML Binding class name: Max_Message_Size
Dictionary key name: max_message_size
name
XML Binding class name: Name
Dictionary key name: name
read_timeout
XML Binding class name: Read_Timeout
Dictionary key name: read_timeout
security_attributes
XML Binding class name: Security_Attributes
Dictionary key name: security_attributes

Version: 2.1.0.13

cybox.objects.win_memory_page_region_object module
class cybox.objects.win_memory_page_region_object.WinMemoryPageRegion[source]

Bases: cybox.objects.memory_object.Memory

XML binding class: cybox.bindings.win_memory_page_region_object.WindowsMemoryPageRegionObjectType
allocation_base_address
XML Binding class name: Allocation_Base_Address
Dictionary key name: allocation_base_address
allocation_protect
XML Binding class name: Allocation_Protect
Dictionary key name: allocation_protect
block_type
XML Binding class name: Block_Type
Dictionary key name: block_type
extracted_features
XML Binding class name: Extracted_Features
Dictionary key name: extracted_features
hashes
XML Binding class name: Hashes
Dictionary key name: hashes
is_injected
XML Binding class name: is_injected
Dictionary key name: is_injected
is_mapped
XML Binding class name: is_mapped
Dictionary key name: is_mapped
is_protected
XML Binding class name: is_protected
Dictionary key name: is_protected
is_volatile
XML Binding class name: is_volatile
Dictionary key name: is_volatile
memory_source
XML Binding class name: Memory_Source
Dictionary key name: memory_source
name
XML Binding class name: Name
Dictionary key name: name
protect
XML Binding class name: Protect
Dictionary key name: protect
region_end_address
XML Binding class name: Region_End_Address
Dictionary key name: region_end_address
region_size
XML Binding class name: Region_Size
Dictionary key name: region_size
region_start_address
XML Binding class name: Region_Start_Address
Dictionary key name: region_start_address
state
XML Binding class name: State
Dictionary key name: state
type_
XML Binding class name: Type
Dictionary key name: type

Version: 2.1.0.13

cybox.objects.win_mutex_object module
class cybox.objects.win_mutex_object.WinMutex[source]

Bases: cybox.objects.mutex_object.Mutex

XML binding class: cybox.bindings.win_mutex_object.WindowsMutexObjectType
handle
XML Binding class name: Handle
Dictionary key name: handle
security_attributes
XML Binding class name: Security_Attributes
Dictionary key name: security_attributes

Version: 2.1.0.13

cybox.objects.win_network_route_entry_object module
class cybox.objects.win_network_route_entry_object.WinNetworkRouteEntry[source]

Bases: cybox.objects.network_route_entry_object.NetworkRouteEntry

XML binding class: cybox.bindings.win_network_route_entry_object.WindowsNetworkRouteEntryObjectType
nl_route_origin
XML Binding class name: NL_ROUTE_ORIGIN
Dictionary key name: nl_route_origin
nl_route_protocol
XML Binding class name: NL_ROUTE_PROTOCOL
Dictionary key name: nl_route_protocol

Version: 2.1.0.13

cybox.objects.win_network_share_object module
class cybox.objects.win_network_share_object.WinNetworkShare[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.win_network_share_object.WindowsNetworkShareObjectType
access_all
XML Binding class name: ACCESS_ALL
Dictionary key name: access_all
access_atrib
XML Binding class name: ACCESS_ATRIB
Dictionary key name: access_atrib
access_create
XML Binding class name: ACCESS_CREATE
Dictionary key name: access_create
access_delete
XML Binding class name: ACCESS_DELETE
Dictionary key name: access_delete
access_exec
XML Binding class name: ACCESS_EXEC
Dictionary key name: access_exec
access_perm
XML Binding class name: ACCESS_PERM
Dictionary key name: access_perm
access_read
XML Binding class name: ACCESS_READ
Dictionary key name: access_read
access_write
XML Binding class name: ACCESS_WRITE
Dictionary key name: access_write
current_uses
XML Binding class name: Current_Uses
Dictionary key name: current_uses
local_path
XML Binding class name: Local_Path
Dictionary key name: local_path
max_uses
XML Binding class name: Max_Uses
Dictionary key name: max_uses
netname
XML Binding class name: Netname
Dictionary key name: netname
type_
XML Binding class name: Type
Dictionary key name: type

Version: 2.1.0.13

cybox.objects.win_pipe_object module
class cybox.objects.win_pipe_object.WinPipe[source]

Bases: cybox.objects.pipe_object.Pipe

XML binding class: cybox.bindings.win_pipe_object.WindowsPipeObjectType
default_time_out
XML Binding class name: Default_Time_Out
Dictionary key name: default_time_out
handle
XML Binding class name: Handle
Dictionary key name: handle
in_buffer_size
XML Binding class name: In_Buffer_Size
Dictionary key name: in_buffer_size
max_instances
XML Binding class name: Max_Instances
Dictionary key name: max_instances
open_mode
XML Binding class name: Open_Mode
Dictionary key name: open_mode
out_buffer_size
XML Binding class name: Out_Buffer_Size
Dictionary key name: out_buffer_size
pipe_mode
XML Binding class name: Pipe_Mode
Dictionary key name: pipe_mode
security_attributes
XML Binding class name: Security_Attributes
Dictionary key name: security_attributes

Version: 2.1.0.13

cybox.objects.win_prefetch_object module
class cybox.objects.win_prefetch_object.AccessedDirectoryList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.win_prefetch_object.AccessedDirectoryListType
accessed_directory
(List of values permitted)
XML Binding class name: Accessed_Directory
Dictionary key name: accessed_directory
class cybox.objects.win_prefetch_object.AccessedFileList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.win_prefetch_object.AccessedFileListType
accessed_file
(List of values permitted)
XML Binding class name: Accessed_File
Dictionary key name: accessed_file
class cybox.objects.win_prefetch_object.Volume[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_prefetch_object.VolumeType
deviceitem
(List of values permitted)
XML Binding class name: DeviceItem
Dictionary key name: deviceitem
volumeitem
(List of values permitted)
XML Binding class name: VolumeItem
Dictionary key name: volumeitem
class cybox.objects.win_prefetch_object.WinPrefetch[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.win_prefetch_object.WindowsPrefetchObjectType
accessed_directory_list
XML Binding class name: Accessed_Directory_List
Dictionary key name: accessed_directory_list
accessed_file_list
XML Binding class name: Accessed_File_List
Dictionary key name: accessed_file_list
application_file_name
XML Binding class name: Application_File_Name
Dictionary key name: application_file_name
first_run
XML Binding class name: First_Run
Dictionary key name: first_run
last_run
XML Binding class name: Last_Run
Dictionary key name: last_run
prefetch_hash
XML Binding class name: Prefetch_Hash
Dictionary key name: prefetch_hash
times_executed
XML Binding class name: Times_Executed
Dictionary key name: times_executed
volume
XML Binding class name: Volume
Dictionary key name: volume

Version: 2.1.0.13

cybox.objects.win_process_object module
class cybox.objects.win_process_object.MemorySectionList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.win_process_object.MemorySectionListType
memory_section
(List of values permitted)
XML Binding class name: Memory_Section
Dictionary key name: memory_section
class cybox.objects.win_process_object.StartupInfo[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_process_object.StartupInfoType
dwfillattribute
XML Binding class name: dwFillAttribute
Dictionary key name: dwfillattribute
dwflags
XML Binding class name: dwFlags
Dictionary key name: dwflags
dwx
XML Binding class name: dwX
Dictionary key name: dwx
dwxcountchars
XML Binding class name: dwXCountChars
Dictionary key name: dwxcountchars
dwxsize
XML Binding class name: dwXSize
Dictionary key name: dwxsize
dwy
XML Binding class name: dwY
Dictionary key name: dwy
dwycountchars
XML Binding class name: dwYCountChars
Dictionary key name: dwycountchars
dwysize
XML Binding class name: dwYSize
Dictionary key name: dwysize
hstderror
XML Binding class name: hStdError
Dictionary key name: hstderror
hstdinput
XML Binding class name: hStdInput
Dictionary key name: hstdinput
hstdoutput
XML Binding class name: hStdOutput
Dictionary key name: hstdoutput
lpdesktop
XML Binding class name: lpDesktop
Dictionary key name: lpdesktop
lptitle
XML Binding class name: lpTitle
Dictionary key name: lptitle
wshowwindow
XML Binding class name: wShowWindow
Dictionary key name: wshowwindow
class cybox.objects.win_process_object.WinProcess[source]

Bases: cybox.objects.process_object.Process

XML binding class: cybox.bindings.win_process_object.WindowsProcessObjectType
aslr_enabled
XML Binding class name: aslr_enabled
Dictionary key name: aslr_enabled
dep_enabled
XML Binding class name: dep_enabled
Dictionary key name: dep_enabled
handle_list
XML Binding class name: Handle_List
Dictionary key name: handle_list
priority
XML Binding class name: Priority
Dictionary key name: priority
section_list
XML Binding class name: Section_List
Dictionary key name: section_list
security_id
XML Binding class name: Security_ID
Dictionary key name: security_id
security_type
XML Binding class name: Security_Type
Dictionary key name: security_type
startup_info
XML Binding class name: Startup_Info
Dictionary key name: startup_info
thread
(List of values permitted)
XML Binding class name: Thread
Dictionary key name: thread
window_title
XML Binding class name: Window_Title
Dictionary key name: window_title

Version: 2.1.0.13

cybox.objects.win_registry_key_object module
class cybox.objects.win_registry_key_object.RegistrySubkeys(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.win_registry_key_object.RegistrySubkeysType
subkey
(List of values permitted)
XML Binding class name: Subkey
Dictionary key name: subkey
class cybox.objects.win_registry_key_object.RegistryValue[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_registry_key_object.RegistryValueType
byte_runs
XML Binding class name: Byte_Runs
Dictionary key name: byte_runs
data
XML Binding class name: Data
Dictionary key name: data
datatype
XML Binding class name: Datatype
Dictionary key name: datatype
name
XML Binding class name: Name
Dictionary key name: name
class cybox.objects.win_registry_key_object.RegistryValues(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.win_registry_key_object.RegistryValuesType
value
(List of values permitted)
XML Binding class name: Value
Dictionary key name: value
class cybox.objects.win_registry_key_object.WinRegistryKey[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.win_registry_key_object.WindowsRegistryKeyObjectType
byte_runs
XML Binding class name: Byte_Runs
Dictionary key name: byte_runs
creator_username
XML Binding class name: Creator_Username
Dictionary key name: creator_username
handle_list
XML Binding class name: Handle_List
Dictionary key name: handle_list
hive
XML Binding class name: Hive
Dictionary key name: hive
key
XML Binding class name: Key
Dictionary key name: key
modified_time
XML Binding class name: Modified_Time
Dictionary key name: modified_time
number_subkeys
XML Binding class name: Number_Subkeys
Dictionary key name: number_subkeys
number_values
XML Binding class name: Number_Values
Dictionary key name: number_values
subkeys
XML Binding class name: Subkeys
Dictionary key name: subkeys
values
XML Binding class name: Values
Dictionary key name: values

Version: 2.1.0.13

cybox.objects.win_service_object module
class cybox.objects.win_service_object.ServiceDescriptionList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.win_service_object.ServiceDescriptionListType
description
(List of values permitted)
XML Binding class name: Description
Dictionary key name: description
class cybox.objects.win_service_object.WinService[source]

Bases: cybox.objects.win_process_object.WinProcess

XML binding class: cybox.bindings.win_service_object.WindowsServiceObjectType
description_list
XML Binding class name: Description_List
Dictionary key name: description_list
display_name
XML Binding class name: Display_Name
Dictionary key name: display_name
group_name
XML Binding class name: Group_Name
Dictionary key name: group_name
service_dll
XML Binding class name: Service_DLL
Dictionary key name: service_dll
service_dll_certificate_issuer
XML Binding class name: Service_DLL_Certificate_Issuer
Dictionary key name: service_dll_certificate_issuer
service_dll_certificate_subject
XML Binding class name: Service_DLL_Certificate_Subject
Dictionary key name: service_dll_certificate_subject
service_dll_hashes
XML Binding class name: Service_DLL_Hashes
Dictionary key name: service_dll_hashes
service_dll_signature_description
XML Binding class name: Service_DLL_Signature_Description
Dictionary key name: service_dll_signature_description
service_dll_signature_exists
XML Binding class name: service_dll_signature_exists
Dictionary key name: service_dll_signature_exists
service_dll_signature_verified
XML Binding class name: service_dll_signature_verified
Dictionary key name: service_dll_signature_verified
service_name
XML Binding class name: Service_Name
Dictionary key name: service_name
service_status
XML Binding class name: Service_Status
Dictionary key name: service_status
service_type
XML Binding class name: Service_Type
Dictionary key name: service_type
started_as
XML Binding class name: Started_As
Dictionary key name: started_as
startup_command_line
XML Binding class name: Startup_Command_Line
Dictionary key name: startup_command_line
startup_type
XML Binding class name: Startup_Type
Dictionary key name: startup_type

Version: 2.1.0.13

cybox.objects.win_semaphore_object module
class cybox.objects.win_semaphore_object.WinSemaphore[source]

Bases: cybox.objects.semaphore_object.Semaphore

XML binding class: cybox.bindings.win_semaphore_object.WindowsSemaphoreObjectType
handle
XML Binding class name: Handle
Dictionary key name: handle
security_attributes
XML Binding class name: Security_Attributes
Dictionary key name: security_attributes

Version: 2.1.0.13

cybox.objects.win_system_object module
class cybox.objects.win_system_object.GlobalFlag[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_system_object.GlobalFlagType
abbreviation
XML Binding class name: Abbreviation
Dictionary key name: abbreviation
destination
XML Binding class name: Destination
Dictionary key name: destination
hexadecimal_value
XML Binding class name: Hexadecimal_Value
Dictionary key name: hexadecimal_value
symbolic_name
XML Binding class name: Symbolic_Name
Dictionary key name: symbolic_name
class cybox.objects.win_system_object.GlobalFlagList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.win_system_object.GlobalFlagListType
global_flag
(List of values permitted)
XML Binding class name: Global_Flag
Dictionary key name: global_flag
class cybox.objects.win_system_object.WinSystem[source]

Bases: cybox.objects.system_object.System

XML binding class: cybox.bindings.win_system_object.WindowsSystemObjectType
domain
(List of values permitted)
XML Binding class name: Domain
Dictionary key name: domain
global_flag_list
XML Binding class name: Global_Flag_List
Dictionary key name: global_flag_list
netbios_name
XML Binding class name: NetBIOS_Name
Dictionary key name: netbios_name
open_handle_list
XML Binding class name: Open_Handle_List
Dictionary key name: open_handle_list
product_id
XML Binding class name: Product_ID
Dictionary key name: product_id
product_name
XML Binding class name: Product_Name
Dictionary key name: product_name
registered_organization
XML Binding class name: Registered_Organization
Dictionary key name: registered_organization
registered_owner
XML Binding class name: Registered_Owner
Dictionary key name: registered_owner
windows_directory
XML Binding class name: Windows_Directory
Dictionary key name: windows_directory
windows_system_directory
XML Binding class name: Windows_System_Directory
Dictionary key name: windows_system_directory
windows_temp_directory
XML Binding class name: Windows_Temp_Directory
Dictionary key name: windows_temp_directory

Version: 2.1.0.13

cybox.objects.win_system_restore_object module
class cybox.objects.win_system_restore_object.HiveList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.win_system_restore_object.HiveListType
hive
(List of values permitted)
XML Binding class name: Hive
Dictionary key name: hive
class cybox.objects.win_system_restore_object.WinSystemRestore[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.win_system_restore_object.WindowsSystemRestoreObjectType
acl_change_sid
XML Binding class name: ACL_Change_SID
Dictionary key name: acl_change_sid
acl_change_username
XML Binding class name: ACL_Change_Username
Dictionary key name: acl_change_username
backup_file_name
XML Binding class name: Backup_File_Name
Dictionary key name: backup_file_name
change_event
XML Binding class name: Change_Event
Dictionary key name: change_event
changelog_entry_flags
XML Binding class name: ChangeLog_Entry_Flags
Dictionary key name: changelog_entry_flags
changelog_entry_sequence_number
XML Binding class name: ChangeLog_Entry_Sequence_Number
Dictionary key name: changelog_entry_sequence_number
changelog_entry_type
XML Binding class name: ChangeLog_Entry_Type
Dictionary key name: changelog_entry_type
created
XML Binding class name: Created
Dictionary key name: created
file_attributes
XML Binding class name: File_Attributes
Dictionary key name: file_attributes
new_file_name
XML Binding class name: New_File_Name
Dictionary key name: new_file_name
original_file_name
XML Binding class name: Original_File_Name
Dictionary key name: original_file_name
original_short_file_name
XML Binding class name: Original_Short_File_Name
Dictionary key name: original_short_file_name
process_name
XML Binding class name: Process_Name
Dictionary key name: process_name
registry_hive_list
XML Binding class name: Registry_Hive_List
Dictionary key name: registry_hive_list
restore_point_description
XML Binding class name: Restore_Point_Description
Dictionary key name: restore_point_description
restore_point_full_path
XML Binding class name: Restore_Point_Full_Path
Dictionary key name: restore_point_full_path
restore_point_name
XML Binding class name: Restore_Point_Name
Dictionary key name: restore_point_name
restore_point_type
XML Binding class name: Restore_Point_Type
Dictionary key name: restore_point_type

Version: 2.1.0.13

cybox.objects.win_task_object module
class cybox.objects.win_task_object.IComHandlerAction[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_task_object.IComHandlerActionType
com_class_id
XML Binding class name: COM_Class_ID
Dictionary key name: com_class_id
com_data
XML Binding class name: COM_Data
Dictionary key name: com_data
class cybox.objects.win_task_object.IExecAction[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_task_object.IExecActionType
exec_arguments
XML Binding class name: Exec_Arguments
Dictionary key name: exec_arguments
exec_program_hashes
XML Binding class name: Exec_Program_Hashes
Dictionary key name: exec_program_hashes
exec_program_path
XML Binding class name: Exec_Program_Path
Dictionary key name: exec_program_path
exec_working_directory
XML Binding class name: Exec_Working_Directory
Dictionary key name: exec_working_directory
class cybox.objects.win_task_object.IShowMessageAction[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_task_object.IShowMessageActionType
show_message_body
XML Binding class name: Show_Message_Body
Dictionary key name: show_message_body
show_message_title
XML Binding class name: Show_Message_Title
Dictionary key name: show_message_title
class cybox.objects.win_task_object.TaskAction[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_task_object.TaskActionType
action_id
XML Binding class name: Action_ID
Dictionary key name: action_id
action_type
XML Binding class name: Action_Type
Dictionary key name: action_type
icomhandleraction
XML Binding class name: IComHandlerAction
Dictionary key name: icomhandleraction
iemailaction
XML Binding class name: IEmailAction
Dictionary key name: iemailaction
iexecaction
XML Binding class name: IExecAction
Dictionary key name: iexecaction
ishowmessageaction
XML Binding class name: IShowMessageAction
Dictionary key name: ishowmessageaction
class cybox.objects.win_task_object.TaskActionList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.win_task_object.TaskActionListType
action
(List of values permitted)
XML Binding class name: Action
Dictionary key name: action
class cybox.objects.win_task_object.Trigger[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_task_object.TriggerType
trigger_begin
XML Binding class name: Trigger_Begin
Dictionary key name: trigger_begin
trigger_delay
XML Binding class name: Trigger_Delay
Dictionary key name: trigger_delay
trigger_end
XML Binding class name: Trigger_End
Dictionary key name: trigger_end
trigger_frequency
XML Binding class name: Trigger_Frequency
Dictionary key name: trigger_frequency
trigger_max_run_time
XML Binding class name: Trigger_Max_Run_Time
Dictionary key name: trigger_max_run_time
trigger_session_change_type
XML Binding class name: Trigger_Session_Change_Type
Dictionary key name: trigger_session_change_type
trigger_type
XML Binding class name: Trigger_Type
Dictionary key name: trigger_type
class cybox.objects.win_task_object.TriggerList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.win_task_object.TriggerListType
trigger
(List of values permitted)
XML Binding class name: Trigger
Dictionary key name: trigger
class cybox.objects.win_task_object.WinTask[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.win_task_object.WindowsTaskObjectType
account_logon_type
XML Binding class name: Account_Logon_Type
Dictionary key name: account_logon_type
account_name
XML Binding class name: Account_Name
Dictionary key name: account_name
account_run_level
XML Binding class name: Account_Run_Level
Dictionary key name: account_run_level
action_list
XML Binding class name: Action_List
Dictionary key name: action_list
application_name
XML Binding class name: Application_Name
Dictionary key name: application_name
comment
XML Binding class name: Comment
Dictionary key name: comment
creation_date
XML Binding class name: Creation_Date
Dictionary key name: creation_date
creator
XML Binding class name: Creator
Dictionary key name: creator
exit_code
XML Binding class name: Exit_Code
Dictionary key name: exit_code
flags
XML Binding class name: Flags
Dictionary key name: flags
max_run_time
XML Binding class name: Max_Run_Time
Dictionary key name: max_run_time
most_recent_run_time
XML Binding class name: Most_Recent_Run_Time
Dictionary key name: most_recent_run_time
name
XML Binding class name: Name
Dictionary key name: name
next_run_time
XML Binding class name: Next_Run_Time
Dictionary key name: next_run_time
parameters
XML Binding class name: Parameters
Dictionary key name: parameters
priority
XML Binding class name: Priority
Dictionary key name: priority
status
XML Binding class name: Status
Dictionary key name: status
trigger_list
XML Binding class name: Trigger_List
Dictionary key name: trigger_list
work_item_data
XML Binding class name: Work_Item_Data
Dictionary key name: work_item_data
working_directory
XML Binding class name: Working_Directory
Dictionary key name: working_directory

Version: 2.1.0.13

cybox.objects.win_thread_object module
class cybox.objects.win_thread_object.WinThread[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.win_thread_object.WindowsThreadObjectType
context
XML Binding class name: Context
Dictionary key name: context
creation_flags
XML Binding class name: Creation_Flags
Dictionary key name: creation_flags
creation_time
XML Binding class name: Creation_Time
Dictionary key name: creation_time
handle
XML Binding class name: Handle
Dictionary key name: handle
parameter_address
XML Binding class name: Parameter_Address
Dictionary key name: parameter_address
priority
XML Binding class name: Priority
Dictionary key name: priority
running_status
XML Binding class name: Running_Status
Dictionary key name: running_status
security_attributes
XML Binding class name: Security_Attributes
Dictionary key name: security_attributes
stack_size
XML Binding class name: Stack_Size
Dictionary key name: stack_size
start_address
XML Binding class name: Start_Address
Dictionary key name: start_address
thread_id
XML Binding class name: Thread_ID
Dictionary key name: thread_id

Version: 2.1.0.13

cybox.objects.win_user_object module
class cybox.objects.win_user_object.WinGroup[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_user_account_object.WindowsGroupType
name
XML Binding class name: Name
Dictionary key name: name
class cybox.objects.win_user_object.WinGroupList(*args)[source]

Bases: cybox.objects.user_account_object.GroupList

XML binding class: cybox.bindings.user_account_object.GroupListType
group
(List of values permitted)
XML Binding class name: Group
Dictionary key name: group
class cybox.objects.win_user_object.WinPrivilege[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_user_account_object.WindowsPrivilegeType
user_right
XML Binding class name: User_Right
Dictionary key name: user_right
class cybox.objects.win_user_object.WinPrivilegeList(*args)[source]

Bases: cybox.objects.user_account_object.PrivilegeList

XML binding class: cybox.bindings.user_account_object.PrivilegeListType
privilege
(List of values permitted)
XML Binding class name: Privilege
Dictionary key name: privilege
class cybox.objects.win_user_object.WinUser[source]

Bases: cybox.objects.user_account_object.UserAccount

XML binding class: cybox.bindings.win_user_account_object.WindowsUserAccountObjectType
group_list
XML Binding class name: Group_List
Dictionary key name: group_list
privilege_list
XML Binding class name: Privilege_List
Dictionary key name: privilege_list
security_id
XML Binding class name: Security_ID
Dictionary key name: security_id
security_type
XML Binding class name: Security_Type
Dictionary key name: security_type

Version: 2.1.0.13

cybox.objects.win_volume_object module
class cybox.objects.win_volume_object.WinVolume[source]

Bases: cybox.objects.volume_object.Volume

XML binding class: cybox.bindings.win_volume_object.WindowsVolumeObjectType
attributes_list
XML Binding class name: Attributes_List
Dictionary key name: attributes_list
drive_letter
XML Binding class name: Drive_Letter
Dictionary key name: drive_letter
drive_type
XML Binding class name: Drive_Type
Dictionary key name: drive_type
class cybox.objects.win_volume_object.WindowsVolumeAttributesList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.win_volume_object.WindowsVolumeAttributesListType
attribute
(List of values permitted)
XML Binding class name: Attribute
Dictionary key name: attribute

Version: 2.1.0.13

cybox.objects.win_waitable_timer_object module
class cybox.objects.win_waitable_timer_object.WinWaitableTimer[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.win_waitable_timer_object.WindowsWaitableTimerObjectType
name
XML Binding class name: Name
Dictionary key name: name
security_attributes
XML Binding class name: Security_Attributes
Dictionary key name: security_attributes
type_
XML Binding class name: Type
Dictionary key name: type

Version: 2.1.0.13

cybox.objects.x509_certificate_object module
class cybox.objects.x509_certificate_object.RSAPublicKey[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.x509_certificate_object.RSAPublicKeyType
exponent
XML Binding class name: Exponent
Dictionary key name: exponent
modulus
XML Binding class name: Modulus
Dictionary key name: modulus
class cybox.objects.x509_certificate_object.SubjectPublicKey[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.x509_certificate_object.SubjectPublicKeyType
public_key_algorithm
XML Binding class name: Public_Key_Algorithm
Dictionary key name: public_key_algorithm
rsa_public_key
XML Binding class name: RSA_Public_Key
Dictionary key name: rsa_public_key
class cybox.objects.x509_certificate_object.Validity[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.x509_certificate_object.ValidityType
not_after
XML Binding class name: Not_After
Dictionary key name: not_after
not_before
XML Binding class name: Not_Before
Dictionary key name: not_before
class cybox.objects.x509_certificate_object.X509Cert[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.x509_certificate_object.X509CertificateContentsType
issuer
XML Binding class name: Issuer
Dictionary key name: issuer
non_standard_extensions
XML Binding class name: Non_Standard_Extensions
Dictionary key name: non_standard_extensions
serial_number
XML Binding class name: Serial_Number
Dictionary key name: serial_number
signature_algorithm
XML Binding class name: Signature_Algorithm
Dictionary key name: signature_algorithm
standard_extensions
XML Binding class name: Standard_Extensions
Dictionary key name: standard_extensions
subject
XML Binding class name: Subject
Dictionary key name: subject
subject_public_key
XML Binding class name: Subject_Public_Key
Dictionary key name: subject_public_key
validity
XML Binding class name: Validity
Dictionary key name: validity
version
XML Binding class name: Version
Dictionary key name: version
class cybox.objects.x509_certificate_object.X509Certificate[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.x509_certificate_object.X509CertificateObjectType
certificate
XML Binding class name: Certificate
Dictionary key name: certificate
certificate_signature
XML Binding class name: Certificate_Signature
Dictionary key name: certificate_signature
raw_certificate
XML Binding class name: Raw_Certificate
Dictionary key name: raw_certificate
class cybox.objects.x509_certificate_object.X509CertificateSignature[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.x509_certificate_object.X509CertificateSignatureType
signature
XML Binding class name: Signature
Dictionary key name: signature
signature_algorithm
XML Binding class name: Signature_Algorithm
Dictionary key name: signature_algorithm
class cybox.objects.x509_certificate_object.X509NonStandardExtensions[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.x509_certificate_object.X509NonStandardExtensionsType
netscape_certificate_type
XML Binding class name: Netscape_Certificate_Type
Dictionary key name: netscape_certificate_type
netscape_comment
XML Binding class name: Netscape_Comment
Dictionary key name: netscape_comment
old_authority_key_identifier
XML Binding class name: Old_Authority_Key_Identifier
Dictionary key name: old_authority_key_identifier
old_primary_key_attributes
XML Binding class name: Old_Primary_Key_Attributes
Dictionary key name: old_primary_key_attributes
class cybox.objects.x509_certificate_object.X509V3Extensions[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.x509_certificate_object.X509V3ExtensionsType
authority_key_identifier
XML Binding class name: Authority_Key_Identifier
Dictionary key name: authority_key_identifier
basic_constraints
XML Binding class name: Basic_Constraints
Dictionary key name: basic_constraints
certificate_policies
XML Binding class name: Certificate_Policies
Dictionary key name: certificate_policies
crl_distribution_points
XML Binding class name: CRL_Distribution_Points
Dictionary key name: crl_distribution_points
extended_key_usage
XML Binding class name: Extended_Key_Usage
Dictionary key name: extended_key_usage
inhibit_any_policy
XML Binding class name: Inhibit_Any_Policy
Dictionary key name: inhibit_any_policy
issuer_alternative_name
XML Binding class name: Issuer_Alternative_Name
Dictionary key name: issuer_alternative_name
key_usage
XML Binding class name: Key_Usage
Dictionary key name: key_usage
name_constraints
XML Binding class name: Name_Constraints
Dictionary key name: name_constraints
policy_constraints
XML Binding class name: Policy_Constraints
Dictionary key name: policy_constraints
policy_mappings
XML Binding class name: Policy_Mappings
Dictionary key name: policy_mappings
private_key_usage_period
XML Binding class name: Private_Key_Usage_Period
Dictionary key name: private_key_usage_period
subject_alternative_name
XML Binding class name: Subject_Alternative_Name
Dictionary key name: subject_alternative_name
subject_directory_attributes
XML Binding class name: Subject_Directory_Attributes
Dictionary key name: subject_directory_attributes
subject_key_identifier
XML Binding class name: Subject_Key_Identifier
Dictionary key name: subject_key_identifier
Module contents
exception cybox.objects.UnknownObjectType[source]

Bases: exceptions.Exception

cybox.objects.get_class_for_object_type(object_type)[source]

Version: 2.1.0.13

cybox.objects.account_object module

class cybox.objects.account_object.Account[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.account_object.AccountObjectType
authentication
(List of values permitted)
XML Binding class name: Authentication
Dictionary key name: authentication
creation_date
XML Binding class name: Creation_Date
Dictionary key name: creation_date
description
XML Binding class name: Description
Dictionary key name: description
disabled
XML Binding class name: disabled
Dictionary key name: disabled
domain
XML Binding class name: Domain
Dictionary key name: domain
last_accessed_time
XML Binding class name: Last_Accessed_Time
Dictionary key name: last_accessed_time
locked_out
XML Binding class name: locked_out
Dictionary key name: locked_out
modified_date
XML Binding class name: Modified_Date
Dictionary key name: modified_date
class cybox.objects.account_object.Authentication[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.account_object.AuthenticationType
authentication_data
XML Binding class name: Authentication_Data
Dictionary key name: authentication_data
authentication_token_protection_mechanism

TypedField subclass for VocabString fields.

XML Binding class name: Authentication_Token_Protection_Mechanism
Dictionary key name: authentication_token_protection_mechanism
authentication_type

TypedField subclass for VocabString fields.

XML Binding class name: Authentication_Type
Dictionary key name: authentication_type
structured_authentication_mechanism
XML Binding class name: Structured_Authentication_Mechanism
Dictionary key name: structured_authentication_mechanism
class cybox.objects.account_object.StructuredAuthenticationMechanism[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.account_object.StructuredAuthenticationMechanismType
description
XML Binding class name: Description
Dictionary key name: description

Version: 2.1.0.13

cybox.objects.address_object module

class cybox.objects.address_object.Address(address_value=None, category=None)[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.address_object.AddressObjectType
address_value
XML Binding class name: Address_Value
Dictionary key name: address_value
category
XML Binding class name: category
Dictionary key name: category
is_destination
XML Binding class name: is_destination
Dictionary key name: is_destination
is_source
XML Binding class name: is_source
Dictionary key name: is_source
is_spoofed
XML Binding class name: is_spoofed
Dictionary key name: is_spoofed
vlan_name
XML Binding class name: VLAN_Name
Dictionary key name: vlan_name
vlan_num
XML Binding class name: VLAN_Num
Dictionary key name: vlan_num
class cybox.objects.address_object.EmailAddress(addr_string=None)[source]

Bases: cybox.objects.address_object.Address

Convenience class for creating email addresses.

Note that this is not an actual CybOX type.

XML binding class: cybox.bindings.address_object.AddressObjectType
classmethod istypeof(obj)[source]

Version: 2.1.0.13

cybox.objects.api_object module

class cybox.objects.api_object.API[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.api_object.APIObjectType
address
XML Binding class name: Address
Dictionary key name: address
description
XML Binding class name: Description
Dictionary key name: description
function_name
XML Binding class name: Function_Name
Dictionary key name: function_name
normalized_function_name
XML Binding class name: Normalized_Function_Name
Dictionary key name: normalized_function_name
platform
XML Binding class name: Platform
Dictionary key name: platform

Version: 2.1.0.13

cybox.objects.archive_file_object module

class cybox.objects.archive_file_object.ArchiveFile[source]

Bases: cybox.objects.file_object.File

XML binding class: cybox.bindings.archive_file_object.ArchiveFileObjectType
archive_format
XML Binding class name: Archive_Format
Dictionary key name: archive_format
archived_file
(List of values permitted)
XML Binding class name: Archived_File
Dictionary key name: archived_file
comment
XML Binding class name: Comment
Dictionary key name: comment
decryption_key
XML Binding class name: Decryption_Key
Dictionary key name: decryption_key
encryption_algorithm
XML Binding class name: Encryption_Algorithm
Dictionary key name: encryption_algorithm
file_count
XML Binding class name: File_Count
Dictionary key name: file_count
version
XML Binding class name: Version
Dictionary key name: version

Version: 2.1.0.13

cybox.objects.arp_cache_object module

class cybox.objects.arp_cache_object.ARPCache[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.arp_cache_object.ARPCacheObjectType
arp_cache_entry
(List of values permitted)
XML Binding class name: ARP_Cache_Entry
Dictionary key name: arp_cache_entry
class cybox.objects.arp_cache_object.ARPCacheEntry[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.arp_cache_object.ARPCacheEntryType
ip_address
XML Binding class name: IP_Address
Dictionary key name: ip_address
network_interface
XML Binding class name: Network_Interface
Dictionary key name: network_interface
physical_address
XML Binding class name: Physical_Address
Dictionary key name: physical_address
type_
XML Binding class name: Type
Dictionary key name: type

Version: 2.1.0.13

cybox.objects.artifact_object module

class cybox.objects.artifact_object.Artifact(data=None, type_=None)[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.artifact_object.ArtifactObjectType
content_type
XML Binding class name: content_type
Dictionary key name: content_type
content_type_version
XML Binding class name: content_type_version
Dictionary key name: content_type_version
classmethod from_dict(cls_dict)[source]
classmethod from_obj(cls_obj)[source]
hashes
XML Binding class name: Hashes
Dictionary key name: hashes
suspected_malicious
XML Binding class name: suspected_malicious
Dictionary key name: suspected_malicious
to_dict()[source]
to_obj(ns_info=None)[source]
type_
XML Binding class name: type_
Dictionary key name: type
class cybox.objects.artifact_object.Base64Encoding[source]

Bases: cybox.objects.artifact_object.Encoding

XML binding class: cybox.bindings.artifact_object.EncodingType
pack(data)[source]
unpack(packed_data)[source]
class cybox.objects.artifact_object.Bz2Compression[source]

Bases: cybox.objects.artifact_object.Compression

XML binding class: cybox.bindings.artifact_object.CompressionType
pack(data)[source]
unpack(packed_data)[source]
class cybox.objects.artifact_object.Compression(compression_mechanism=None)[source]

Bases: cybox.objects.artifact_object.Packaging

A Compression packaging layer

Currently only zlib and bz2 are supported. Also, compression_mechanism_ref is not currently supported.

XML binding class: cybox.bindings.artifact_object.CompressionType
compression_mechanism
XML Binding class name: compression_mechanism
Dictionary key name: compression_mechanism
compression_mechanism_ref
XML Binding class name: compression_mechanism_ref
Dictionary key name: compression_mechanism_ref
to_dict()[source]
class cybox.objects.artifact_object.Encoding[source]

Bases: cybox.objects.artifact_object.Packaging

An encoding packaging layer.

Currently only base64 with a standard alphabet is supported.

XML binding class: cybox.bindings.artifact_object.EncodingType
algorithm
XML Binding class name: algorithm
Dictionary key name: algorithm
to_dict()[source]
class cybox.objects.artifact_object.Encryption(encryption_mechanism=None, encryption_key=None)[source]

Bases: cybox.objects.artifact_object.Packaging

An encryption packaging layer.

XML binding class: cybox.bindings.artifact_object.EncryptionType
encryption_key
XML Binding class name: encryption_key
Dictionary key name: encryption_key
encryption_key_ref
XML Binding class name: encryption_key_ref
Dictionary key name: encryption_key_ref
encryption_mechanism
XML Binding class name: encryption_mechanism
Dictionary key name: encryption_mechanism
encryption_mechanism_ref
XML Binding class name: encryption_mechanism_ref
Dictionary key name: encryption_mechanism_ref
to_dict()[source]
class cybox.objects.artifact_object.Packaging[source]

Bases: mixbox.entities.Entity

An individual packaging layer.

XML binding class: cybox.bindings.artifact_object.PackagingType
pack(data)[source]

This should accept byte data and return byte data

unpack(packed_data)[source]

This should accept byte data and return byte data

class cybox.objects.artifact_object.PasswordProtectedZipEncryption(key=None)[source]

Bases: cybox.objects.artifact_object.Encryption

XML binding class: cybox.bindings.artifact_object.EncryptionType
unpack(packed_data)[source]
class cybox.objects.artifact_object.RawArtifact(value=None)[source]

Bases: cybox.common.properties.String

XML binding class: cybox.bindings.artifact_object.RawArtifactType
byte_order
XML Binding class name: byte_order
Dictionary key name: byte_order
class cybox.objects.artifact_object.XOREncryption(key=None)[source]

Bases: cybox.objects.artifact_object.Encryption

XML binding class: cybox.bindings.artifact_object.EncryptionType
pack(data)[source]
unpack(packed_data)[source]
class cybox.objects.artifact_object.ZlibCompression[source]

Bases: cybox.objects.artifact_object.Compression

XML binding class: cybox.bindings.artifact_object.CompressionType
pack(data)[source]
unpack(packed_data)[source]
cybox.objects.artifact_object.validate_artifact_type(instance, value)[source]

Version: 2.1.0.13

cybox.objects.as_object module

cybox.objects.as_object.AS

alias of AutonomousSystem | XML binding class: cybox.bindings.as_object.ASObjectType

class cybox.objects.as_object.AutonomousSystem[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.as_object.ASObjectType
handle
XML Binding class name: Handle
Dictionary key name: handle
name
XML Binding class name: Name
Dictionary key name: name
number
XML Binding class name: Number
Dictionary key name: number
regional_internet_registry
XML Binding class name: Regional_Internet_Registry
Dictionary key name: regional_internet_registry

Version: 2.1.0.13

cybox.objects.code_object module

class cybox.objects.code_object.Code[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.code_object.CodeObjectType
code_language
XML Binding class name: Code_Language
Dictionary key name: code_language
code_segment
XML Binding class name: Code_Segment
Dictionary key name: code_segment
code_segment_xor
XML Binding class name: Code_Segment_XOR
Dictionary key name: code_segment_xor
description
XML Binding class name: Description
Dictionary key name: description
digital_signatures
XML Binding class name: Digital_Signatures
Dictionary key name: digital_signatures
discovery_method
XML Binding class name: Discovery_Method
Dictionary key name: discovery_method
extracted_features
XML Binding class name: Extracted_Features
Dictionary key name: extracted_features
processor_family
(List of values permitted)
XML Binding class name: Processor_Family
Dictionary key name: processor_family
purpose
XML Binding class name: Purpose
Dictionary key name: purpose
start_address
XML Binding class name: Start_Address
Dictionary key name: start_address
targeted_platforms
XML Binding class name: Targeted_Platforms
Dictionary key name: targeted_platforms
type_
XML Binding class name: Type
Dictionary key name: type
class cybox.objects.code_object.CodeSegmentXOR(value=None)[source]

Bases: cybox.common.properties.String

XML binding class: cybox.bindings.code_object.CodeSegmentXORType
is_plain()[source]
xor_pattern
XML Binding class name: xor_pattern
Dictionary key name: xor_pattern
class cybox.objects.code_object.TargetedPlatforms(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.code_object.TargetedPlatformsType
targeted_platform
(List of values permitted)
XML Binding class name: Targeted_Platform
Dictionary key name: targeted_platform

Version: 2.1.0.13

cybox.objects.device_object module

class cybox.objects.device_object.Device[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.device_object.DeviceObjectType
description
XML Binding class name: Description
Dictionary key name: description
device_type
XML Binding class name: Device_Type
Dictionary key name: device_type
firmware_version
XML Binding class name: Firmware_Version
Dictionary key name: firmware_version
manufacturer
XML Binding class name: Manufacturer
Dictionary key name: manufacturer
model
XML Binding class name: Model
Dictionary key name: model
serial_number
XML Binding class name: Serial_Number
Dictionary key name: serial_number

Version: 2.1.0.13

cybox.objects.disk_object module

class cybox.objects.disk_object.Disk[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.disk_object.DiskObjectType
disk_name
XML Binding class name: Disk_Name
Dictionary key name: disk_name
disk_size
XML Binding class name: Disk_Size
Dictionary key name: disk_size
free_space
XML Binding class name: Free_Space
Dictionary key name: free_space
partition_list
XML Binding class name: Partition_List
Dictionary key name: partition_list
type_
XML Binding class name: Type
Dictionary key name: type
class cybox.objects.disk_object.PartitionList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.disk_object.PartitionListType
partition
(List of values permitted)
XML Binding class name: Partition
Dictionary key name: partition

Version: 2.1.0.13

cybox.objects.disk_partition_object module

class cybox.objects.disk_partition_object.DiskPartition[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.disk_partition_object.DiskPartitionObjectType
created
XML Binding class name: Created
Dictionary key name: created
device_name
XML Binding class name: Device_Name
Dictionary key name: device_name
mount_point
XML Binding class name: Mount_Point
Dictionary key name: mount_point
partition_id
XML Binding class name: Partition_ID
Dictionary key name: partition_id
partition_length
XML Binding class name: Partition_Length
Dictionary key name: partition_length
partition_offset
XML Binding class name: Partition_Offset
Dictionary key name: partition_offset
space_left
XML Binding class name: Space_Left
Dictionary key name: space_left
space_used
XML Binding class name: Space_Used
Dictionary key name: space_used
total_space
XML Binding class name: Total_Space
Dictionary key name: total_space
type_
XML Binding class name: Type
Dictionary key name: type

Version: 2.1.0.13

cybox.objects.dns_cache_object module

class cybox.objects.dns_cache_object.DNSCache[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.dns_cache_object.DNSCacheObjectType
dns_cache_entry
(List of values permitted)
XML Binding class name: DNS_Cache_Entry
Dictionary key name: dns_cache_entry
class cybox.objects.dns_cache_object.DNSCacheEntry[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.dns_cache_object.DNSCacheEntryType
dns_entry
XML Binding class name: DNS_Entry
Dictionary key name: dns_entry
ttl
XML Binding class name: TTL
Dictionary key name: ttl

Version: 2.1.0.13

cybox.objects.dns_query_object module

class cybox.objects.dns_query_object.DNSQuery[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.dns_query_object.DNSQueryObjectType
additional_records
XML Binding class name: Additional_Records
Dictionary key name: additional_records
answer_resource_records
XML Binding class name: Answer_Resource_Records
Dictionary key name: answer_resource_records
authority_resource_records
XML Binding class name: Authority_Resource_Records
Dictionary key name: authority_resource_records
date_ran
XML Binding class name: Date_Ran
Dictionary key name: date_ran
question
XML Binding class name: Question
Dictionary key name: question
service_used
XML Binding class name: Service_Used
Dictionary key name: service_used
successful
XML Binding class name: successful
Dictionary key name: successful
transaction_id
XML Binding class name: Transaction_ID
Dictionary key name: transaction_id
class cybox.objects.dns_query_object.DNSQuestion[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.dns_query_object.DNSQuestionType
qclass
XML Binding class name: QClass
Dictionary key name: qclass
qname
XML Binding class name: QName
Dictionary key name: qname
qtype
XML Binding class name: QType
Dictionary key name: qtype
class cybox.objects.dns_query_object.DNSResourceRecords(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.dns_query_object.DNSResourceRecordsType
resource_record
(List of values permitted)
XML Binding class name: Resource_Record
Dictionary key name: resource_record

Version: 2.1.0.13

cybox.objects.dns_record_object module

class cybox.objects.dns_record_object.DNSRecord[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.dns_record_object.DNSRecordObjectType
address_class
XML Binding class name: Address_Class
Dictionary key name: address_class
data_length
XML Binding class name: Data_Length
Dictionary key name: data_length
description
XML Binding class name: Description
Dictionary key name: description
domain_name
XML Binding class name: Domain_Name
Dictionary key name: domain_name
entry_type
XML Binding class name: Entry_Type
Dictionary key name: entry_type
flags
XML Binding class name: Flags
Dictionary key name: flags
ip_address
XML Binding class name: IP_Address
Dictionary key name: ip_address
queried_date
XML Binding class name: Queried_Date
Dictionary key name: queried_date
record_data
XML Binding class name: Record_Data
Dictionary key name: record_data
record_name
XML Binding class name: Record_Name
Dictionary key name: record_name
record_type
XML Binding class name: Record_Type
Dictionary key name: record_type
ttl
XML Binding class name: TTL
Dictionary key name: ttl

Version: 2.1.0.13

cybox.objects.domain_name_object module

class cybox.objects.domain_name_object.DomainName[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.domain_name_object.DomainNameObjectType
type_
XML Binding class name: type_
Dictionary key name: type
value
XML Binding class name: Value
Dictionary key name: value

Version: 2.1.0.13

cybox.objects.email_message_object module

class cybox.objects.email_message_object.AttachmentReference(object_reference=None)[source]

Bases: cybox.objects.email_message_object._Reference, mixbox.entities.Entity

XML binding class: cybox.bindings.email_message_object.AttachmentReferenceType
class cybox.objects.email_message_object.Attachments(*args)[source]

Bases: cybox.objects.email_message_object._ReferenceList, mixbox.entities.EntityList

XML binding class: cybox.bindings.email_message_object.AttachmentsType
file
(List of values permitted)
XML Binding class name: File
Dictionary key name: file
class cybox.objects.email_message_object.EmailHeader[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.email_message_object.EmailHeaderType
bcc
XML Binding class name: BCC
Dictionary key name: bcc
boundary
XML Binding class name: Boundary
Dictionary key name: boundary
cc
XML Binding class name: CC
Dictionary key name: cc
content_type
XML Binding class name: Content_Type
Dictionary key name: content_type
date
XML Binding class name: Date
Dictionary key name: date
errors_to
XML Binding class name: Errors_To
Dictionary key name: errors_to
from_
XML Binding class name: From
Dictionary key name: from
in_reply_to
XML Binding class name: In_Reply_To
Dictionary key name: in_reply_to
message_id
XML Binding class name: Message_ID
Dictionary key name: message_id
mime_version
XML Binding class name: MIME_Version
Dictionary key name: mime_version
precedence
XML Binding class name: Precedence
Dictionary key name: precedence
received_lines
XML Binding class name: Received_Lines
Dictionary key name: received_lines
reply_to
XML Binding class name: Reply_To
Dictionary key name: reply_to
sender
XML Binding class name: Sender
Dictionary key name: sender
subject
XML Binding class name: Subject
Dictionary key name: subject
to
XML Binding class name: To
Dictionary key name: to
user_agent
XML Binding class name: User_Agent
Dictionary key name: user_agent
x_mailer
XML Binding class name: X_Mailer
Dictionary key name: x_mailer
x_originating_ip
XML Binding class name: X_Originating_IP
Dictionary key name: x_originating_ip
x_priority
XML Binding class name: X_Priority
Dictionary key name: x_priority
class cybox.objects.email_message_object.EmailMessage[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.email_message_object.EmailMessageObjectType
attachments
XML Binding class name: Attachments
Dictionary key name: attachments
email_server
XML Binding class name: Email_Server
Dictionary key name: email_server
header
XML Binding class name: Header
Dictionary key name: header
XML Binding class name: Links
Dictionary key name: links
raw_body
XML Binding class name: Raw_Body
Dictionary key name: raw_body
raw_header
XML Binding class name: Raw_Header
Dictionary key name: raw_header
class cybox.objects.email_message_object.EmailRecipients(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.email_message_object.EmailRecipientsType
recipient
(List of values permitted)
XML Binding class name: Recipient
Dictionary key name: recipient
class cybox.objects.email_message_object.LinkReference(object_reference=None)[source]

Bases: cybox.objects.email_message_object._Reference, mixbox.entities.Entity

XML binding class: cybox.bindings.email_message_object.LinkReferenceType

Bases: cybox.objects.email_message_object._ReferenceList, mixbox.entities.EntityList

XML binding class: cybox.bindings.email_message_object.LinksType
(List of values permitted)
XML Binding class name: Link
Dictionary key name: link
class cybox.objects.email_message_object.ReceivedLine[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.email_message_object.EmailReceivedLineType
by
XML Binding class name: By
Dictionary key name: by
for_
XML Binding class name: For
Dictionary key name: for
from_
XML Binding class name: From
Dictionary key name: from
id_
XML Binding class name: ID
Dictionary key name: id
timestamp
XML Binding class name: Timestamp
Dictionary key name: timestamp
via
XML Binding class name: Via
Dictionary key name: via
with_
XML Binding class name: With
Dictionary key name: with
class cybox.objects.email_message_object.ReceivedLineList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.email_message_object.EmailReceivedLineListType
received
(List of values permitted)
XML Binding class name: Received
Dictionary key name: received

Version: 2.1.0.13

cybox.objects.file_object module

class cybox.objects.file_object.EPJumpCode[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.file_object.EPJumpCodeType
depth
XML Binding class name: Depth
Dictionary key name: depth
opcodes
XML Binding class name: Opcodes
Dictionary key name: opcodes
class cybox.objects.file_object.EntryPointSignature[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.file_object.EntryPointSignatureType
name
XML Binding class name: Name
Dictionary key name: name
type_
XML Binding class name: Type
Dictionary key name: type
class cybox.objects.file_object.EntryPointSignatureList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.file_object.EntryPointSignatureListType
entry_point_signature
(List of values permitted)
XML Binding class name: Entry_Point_Signature
Dictionary key name: entry_point_signature
class cybox.objects.file_object.File[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.file_object.FileObjectType
accessed_time
XML Binding class name: Accessed_Time
Dictionary key name: accessed_time
add_hash(hash_)[source]
byte_runs
XML Binding class name: Byte_Runs
Dictionary key name: byte_runs
compression_comment
XML Binding class name: Compression_Comment
Dictionary key name: compression_comment
compression_method
XML Binding class name: Compression_Method
Dictionary key name: compression_method
compression_version
XML Binding class name: Compression_Version
Dictionary key name: compression_version
created_time
XML Binding class name: Created_Time
Dictionary key name: created_time
decryption_key
XML Binding class name: Decryption_Key
Dictionary key name: decryption_key
device_path
XML Binding class name: Device_Path
Dictionary key name: device_path
digital_signatures
XML Binding class name: Digital_Signatures
Dictionary key name: digital_signatures
encryption_algorithm
XML Binding class name: Encryption_Algorithm
Dictionary key name: encryption_algorithm
extracted_features
XML Binding class name: Extracted_Features
Dictionary key name: extracted_features
file_attributes_list
XML Binding class name: File_Attributes_List
Dictionary key name: file_attributes_list
file_extension
XML Binding class name: File_Extension
Dictionary key name: file_extension
file_format
XML Binding class name: File_Format
Dictionary key name: file_format
file_name
XML Binding class name: File_Name
Dictionary key name: file_name
file_path
XML Binding class name: File_Path
Dictionary key name: file_path
full_path
XML Binding class name: Full_Path
Dictionary key name: full_path
hashes
XML Binding class name: Hashes
Dictionary key name: hashes
is_masqueraded
XML Binding class name: is_masqueraded
Dictionary key name: is_masqueraded
is_packed
XML Binding class name: is_packed
Dictionary key name: is_packed
magic_number
XML Binding class name: Magic_Number
Dictionary key name: magic_number
modified_time
XML Binding class name: Modified_Time
Dictionary key name: modified_time
packer_list
XML Binding class name: Packer_List
Dictionary key name: packer_list
peak_entropy
XML Binding class name: Peak_Entropy
Dictionary key name: peak_entropy
permissions
XML Binding class name: Permissions
Dictionary key name: permissions
size_in_bytes
XML Binding class name: Size_In_Bytes
Dictionary key name: size_in_bytes
XML Binding class name: Sym_Links
Dictionary key name: sym_links
user_owner
XML Binding class name: User_Owner
Dictionary key name: user_owner
class cybox.objects.file_object.FileAttribute[source]

Bases: mixbox.entities.Entity

An abstract class for file attributes.

XML binding class: cybox.bindings.file_object.FileAttributeType
class cybox.objects.file_object.FilePath(value=None)[source]

Bases: cybox.common.properties.String

XML binding class: cybox.bindings.file_object.FilePathType
fully_qualified
XML Binding class name: fully_qualified
Dictionary key name: fully_qualified
is_plain()[source]
class cybox.objects.file_object.FilePermissions[source]

Bases: mixbox.entities.Entity

An abstract class for file permissions.

XML binding class: cybox.bindings.file_object.FilePermissionsType
class cybox.objects.file_object.Packer[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.file_object.PackerType
detected_entrypoint_signatures
XML Binding class name: Detected_Entrypoint_Signatures
Dictionary key name: detected_entrypoint_signatures
entry_point
XML Binding class name: Entry_Point
Dictionary key name: entry_point
ep_jump_codes
XML Binding class name: EP_Jump_Codes
Dictionary key name: ep_jump_codes
name
XML Binding class name: Name
Dictionary key name: name
signature
XML Binding class name: Signature
Dictionary key name: signature
type_
XML Binding class name: Type
Dictionary key name: type
version
XML Binding class name: Version
Dictionary key name: version
class cybox.objects.file_object.PackerList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.file_object.PackerListType
packer
(List of values permitted)
XML Binding class name: Packer
Dictionary key name: packer

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.file_object.SymLinksListType
(List of values permitted)
XML Binding class name: Sym_Link
Dictionary key name: sym_link

Version: 2.1.0.13

cybox.objects.gui_dialogbox_object module

class cybox.objects.gui_dialogbox_object.GUIDialogbox[source]

Bases: cybox.objects.gui_object.GUI

XML binding class: cybox.bindings.gui_dialogbox_object.GUIDialogboxObjectType
box_caption
XML Binding class name: Box_Caption
Dictionary key name: box_caption
box_text
XML Binding class name: Box_Text
Dictionary key name: box_text

Version: 2.1.0.13

cybox.objects.gui_object module

class cybox.objects.gui_object.GUI[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.gui_object.GUIObjectType
height
XML Binding class name: Height
Dictionary key name: height
width
XML Binding class name: Width
Dictionary key name: width

Version: 2.1.0.13

cybox.objects.gui_window_object module

class cybox.objects.gui_window_object.GUIWindow[source]

Bases: cybox.objects.gui_object.GUI

XML binding class: cybox.bindings.gui_window_object.GUIWindowObjectType
owner_window
XML Binding class name: Owner_Window
Dictionary key name: owner_window
parent_window
XML Binding class name: Parent_Window
Dictionary key name: parent_window
window_display_name
XML Binding class name: Window_Display_Name
Dictionary key name: window_display_name

Version: 2.1.0.13

cybox.objects.hostname_object module

class cybox.objects.hostname_object.Hostname[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.hostname_object.HostnameObjectType
hostname_value
XML Binding class name: Hostname_Value
Dictionary key name: hostname_value
is_domain_name
XML Binding class name: is_domain_name
Dictionary key name: is_domain_name
naming_system
(List of values permitted)
XML Binding class name: Naming_System
Dictionary key name: naming_system

Version: 2.1.0.13

cybox.objects.http_session_object module

class cybox.objects.http_session_object.HTTPClientRequest[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.http_session_object.HTTPClientRequestType
http_message_body
XML Binding class name: HTTP_Message_Body
Dictionary key name: http_message_body
http_request_header
XML Binding class name: HTTP_Request_Header
Dictionary key name: http_request_header
http_request_line
XML Binding class name: HTTP_Request_Line
Dictionary key name: http_request_line
class cybox.objects.http_session_object.HTTPMessage[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.http_session_object.HTTPMessageType
length
XML Binding class name: Length
Dictionary key name: length
message_body
XML Binding class name: Message_Body
Dictionary key name: message_body
class cybox.objects.http_session_object.HTTPRequestHeader[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.http_session_object.HTTPRequestHeaderType
parsed_header
XML Binding class name: Parsed_Header
Dictionary key name: parsed_header
raw_header
XML Binding class name: Raw_Header
Dictionary key name: raw_header
class cybox.objects.http_session_object.HTTPRequestHeaderFields[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.http_session_object.HTTPRequestHeaderFieldsType
accept
XML Binding class name: Accept
Dictionary key name: accept
accept_charset
XML Binding class name: Accept_Charset
Dictionary key name: accept_charset
accept_datetime
XML Binding class name: Accept_Datetime
Dictionary key name: accept_datetime
accept_encoding
XML Binding class name: Accept_Encoding
Dictionary key name: accept_encoding
accept_language
XML Binding class name: Accept_Language
Dictionary key name: accept_language
authorization
XML Binding class name: Authorization
Dictionary key name: authorization
cache_control
XML Binding class name: Cache_Control
Dictionary key name: cache_control
connection
XML Binding class name: Connection
Dictionary key name: connection
content_length
XML Binding class name: Content_Length
Dictionary key name: content_length
content_md5
XML Binding class name: Content_MD5
Dictionary key name: content_md5
content_type
XML Binding class name: Content_Type
Dictionary key name: content_type
cookie
XML Binding class name: Cookie
Dictionary key name: cookie
date
XML Binding class name: Date
Dictionary key name: date
dnt
XML Binding class name: DNT
Dictionary key name: dnt
expect
XML Binding class name: Expect
Dictionary key name: expect
from_
XML Binding class name: From
Dictionary key name: from
host
XML Binding class name: Host
Dictionary key name: host
if_match
XML Binding class name: If_Match
Dictionary key name: if_match
if_modified_since
XML Binding class name: If_Modified_Since
Dictionary key name: if_modified_since
if_none_match
XML Binding class name: If_None_Match
Dictionary key name: if_none_match
if_range
XML Binding class name: If_Range
Dictionary key name: if_range
if_unmodified_since
XML Binding class name: If_Unmodified_Since
Dictionary key name: if_unmodified_since
max_forwards
XML Binding class name: Max_Forwards
Dictionary key name: max_forwards
pragma
XML Binding class name: Pragma
Dictionary key name: pragma
proxy_authorization
XML Binding class name: Proxy_Authorization
Dictionary key name: proxy_authorization
range_
XML Binding class name: Range
Dictionary key name: range
referer
XML Binding class name: Referer
Dictionary key name: referer
te
XML Binding class name: TE
Dictionary key name: te
user_agent
XML Binding class name: User_Agent
Dictionary key name: user_agent
via
XML Binding class name: Via
Dictionary key name: via
warning
XML Binding class name: Warning
Dictionary key name: warning
x_att_deviceid
XML Binding class name: X_ATT_DeviceId
Dictionary key name: x_att_deviceid
x_forwarded_for
XML Binding class name: X_Forwarded_For
Dictionary key name: x_forwarded_for
x_forwarded_proto
XML Binding class name: X_Forwarded_Proto
Dictionary key name: x_forwarded_proto
x_requested_with
XML Binding class name: X_Requested_With
Dictionary key name: x_requested_with
x_wap_profile
XML Binding class name: X_Wap_Profile
Dictionary key name: x_wap_profile
class cybox.objects.http_session_object.HTTPRequestLine[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.http_session_object.HTTPRequestLineType
http_method
XML Binding class name: HTTP_Method
Dictionary key name: http_method
value
XML Binding class name: Value
Dictionary key name: value
version
XML Binding class name: Version
Dictionary key name: version
class cybox.objects.http_session_object.HTTPRequestResponse[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.http_session_object.HTTPRequestResponseType
http_client_request
XML Binding class name: HTTP_Client_Request
Dictionary key name: http_client_request
http_provisional_server_response
XML Binding class name: HTTP_Provisional_Server_Response
Dictionary key name: http_provisional_server_response
http_server_response
XML Binding class name: HTTP_Server_Response
Dictionary key name: http_server_response
ordinal_position
XML Binding class name: ordinal_position
Dictionary key name: ordinal_position
class cybox.objects.http_session_object.HTTPResponseHeader[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.http_session_object.HTTPResponseHeaderType
parsed_header
XML Binding class name: Parsed_Header
Dictionary key name: parsed_header
raw_header
XML Binding class name: Raw_Header
Dictionary key name: raw_header
class cybox.objects.http_session_object.HTTPResponseHeaderFields[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.http_session_object.HTTPResponseHeaderFieldsType
accept_ranges
XML Binding class name: Accept_Ranges
Dictionary key name: accept_ranges
access_control_allow_origin
XML Binding class name: Access_Control_Allow_Origin
Dictionary key name: access_control_allow_origin
age
XML Binding class name: Age
Dictionary key name: age
cache_control
XML Binding class name: Cache_Control
Dictionary key name: cache_control
connection
XML Binding class name: Connection
Dictionary key name: connection
content_disposition
XML Binding class name: Content_Disposition
Dictionary key name: content_disposition
content_encoding
XML Binding class name: Content_Encoding
Dictionary key name: content_encoding
content_language
XML Binding class name: Content_Language
Dictionary key name: content_language
content_length
XML Binding class name: Content_Length
Dictionary key name: content_length
content_location
XML Binding class name: Content_Location
Dictionary key name: content_location
content_md5
XML Binding class name: Content_MD5
Dictionary key name: content_md5
content_range
XML Binding class name: Content_Range
Dictionary key name: content_range
content_type
XML Binding class name: Content_Type
Dictionary key name: content_type
date
XML Binding class name: Date
Dictionary key name: date
etag
XML Binding class name: ETag
Dictionary key name: etag
expires
XML Binding class name: Expires
Dictionary key name: expires
last_modified
XML Binding class name: Last_Modified
Dictionary key name: last_modified
XML Binding class name: Link
Dictionary key name: link
location
XML Binding class name: Location
Dictionary key name: location
p3p
XML Binding class name: P3P
Dictionary key name: p3p
pragma
XML Binding class name: Pragma
Dictionary key name: pragma
proxy_authenticate
XML Binding class name: Proxy_Authenticate
Dictionary key name: proxy_authenticate
refresh
XML Binding class name: Refresh
Dictionary key name: refresh
retry_after
XML Binding class name: Retry_After
Dictionary key name: retry_after
server
XML Binding class name: Server
Dictionary key name: server
XML Binding class name: Set_Cookie
Dictionary key name: set_cookie
strict_transport_security
XML Binding class name: Strict_Transport_Security
Dictionary key name: strict_transport_security
trailer
XML Binding class name: Trailer
Dictionary key name: trailer
transfer_encoding
XML Binding class name: Transfer_Encoding
Dictionary key name: transfer_encoding
vary
XML Binding class name: Vary
Dictionary key name: vary
via
XML Binding class name: Via
Dictionary key name: via
warning
XML Binding class name: Warning
Dictionary key name: warning
www_authenticate
XML Binding class name: WWW_Authenticate
Dictionary key name: www_authenticate
x_content_type_options
XML Binding class name: X_Content_Type_Options
Dictionary key name: x_content_type_options
x_frame_options
XML Binding class name: X_Frame_Options
Dictionary key name: x_frame_options
x_powered_by
XML Binding class name: X_Powered_By
Dictionary key name: x_powered_by
x_ua_compatible
XML Binding class name: X_UA_Compatible
Dictionary key name: x_ua_compatible
x_xss_protection
XML Binding class name: X_XSS_Protection
Dictionary key name: x_xss_protection
class cybox.objects.http_session_object.HTTPServerResponse[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.http_session_object.HTTPServerResponseType
http_message_body
XML Binding class name: HTTP_Message_Body
Dictionary key name: http_message_body
http_response_header
XML Binding class name: HTTP_Response_Header
Dictionary key name: http_response_header
http_status_line
XML Binding class name: HTTP_Status_Line
Dictionary key name: http_status_line
class cybox.objects.http_session_object.HTTPSession[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.http_session_object.HTTPSessionObjectType
http_request_response
(List of values permitted)
XML Binding class name: HTTP_Request_Response
Dictionary key name: http_request_response
class cybox.objects.http_session_object.HTTPStatusLine[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.http_session_object.HTTPStatusLineType
reason_phrase
XML Binding class name: Reason_Phrase
Dictionary key name: reason_phrase
status_code
XML Binding class name: Status_Code
Dictionary key name: status_code
version
XML Binding class name: Version
Dictionary key name: version
class cybox.objects.http_session_object.HostField[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.http_session_object.HostFieldType
domain_name
XML Binding class name: Domain_Name
Dictionary key name: domain_name
port
XML Binding class name: Port
Dictionary key name: port

Version: 2.1.0.13

cybox.objects.image_file_object module

class cybox.objects.image_file_object.ImageFile[source]

Bases: cybox.objects.file_object.File

XML binding class: cybox.bindings.image_file_object.ImageFileObjectType
bits_per_pixel
XML Binding class name: Bits_Per_Pixel
Dictionary key name: bits_per_pixel
compression_algorithm
XML Binding class name: Compression_Algorithm
Dictionary key name: compression_algorithm
image_file_format
XML Binding class name: Image_File_Format
Dictionary key name: image_file_format
image_height
XML Binding class name: Image_Height
Dictionary key name: image_height
image_is_compressed
XML Binding class name: image_is_compressed
Dictionary key name: image_is_compressed
image_width
XML Binding class name: Image_Width
Dictionary key name: image_width

Version: 2.1.0.13

cybox.objects.library_object module

class cybox.objects.library_object.Library[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.library_object.LibraryObjectType
base_address
XML Binding class name: Base_Address
Dictionary key name: base_address
extracted_features
XML Binding class name: Extracted_Features
Dictionary key name: extracted_features
name
XML Binding class name: Name
Dictionary key name: name
path
XML Binding class name: Path
Dictionary key name: path
size
XML Binding class name: Size
Dictionary key name: size
type_
XML Binding class name: Type
Dictionary key name: type
version
XML Binding class name: Version
Dictionary key name: version

Version: 2.1.0.13

Version: 2.1.0.13

cybox.objects.linux_package_object module

class cybox.objects.linux_package_object.LinuxPackage[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.linux_package_object.LinuxPackageObjectType
architecture

TypedField subclass for VocabString fields.

XML Binding class name: Architecture
Dictionary key name: architecture
category
XML Binding class name: Category
Dictionary key name: category
description
XML Binding class name: Description
Dictionary key name: description
epoch
XML Binding class name: Epoch
Dictionary key name: epoch
evr
XML Binding class name: EVR
Dictionary key name: evr
name
XML Binding class name: Name
Dictionary key name: name
release
XML Binding class name: Release
Dictionary key name: release
vendor
XML Binding class name: Vendor
Dictionary key name: vendor
version
XML Binding class name: Version
Dictionary key name: version
class cybox.objects.linux_package_object.LinuxPackageArchitecture(value=None)[source]

Bases: cybox.common.vocabs.VocabString

XML binding class: cybox.bindings.cybox_common.ControlledVocabularyStringType

Version: 2.1.0.13

cybox.objects.memory_object module

class cybox.objects.memory_object.Memory[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.memory_object.MemoryObjectType
block_type
XML Binding class name: Block_Type
Dictionary key name: block_type
extracted_features
XML Binding class name: Extracted_Features
Dictionary key name: extracted_features
hashes
XML Binding class name: Hashes
Dictionary key name: hashes
is_injected
XML Binding class name: is_injected
Dictionary key name: is_injected
is_mapped
XML Binding class name: is_mapped
Dictionary key name: is_mapped
is_protected
XML Binding class name: is_protected
Dictionary key name: is_protected
is_volatile
XML Binding class name: is_volatile
Dictionary key name: is_volatile
memory_source
XML Binding class name: Memory_Source
Dictionary key name: memory_source
name
XML Binding class name: Name
Dictionary key name: name
region_end_address
XML Binding class name: Region_End_Address
Dictionary key name: region_end_address
region_size
XML Binding class name: Region_Size
Dictionary key name: region_size
region_start_address
XML Binding class name: Region_Start_Address
Dictionary key name: region_start_address

Version: 2.1.0.13

cybox.objects.mutex_object module

class cybox.objects.mutex_object.Mutex[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.mutex_object.MutexObjectType
name
XML Binding class name: Name
Dictionary key name: name
named
XML Binding class name: named
Dictionary key name: named

Version: 2.1.0.13

cybox.objects.network_connection_object module

class cybox.objects.network_connection_object.Layer7Connections[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_connection_object.Layer7ConnectionsType
dns_query
(List of values permitted)
XML Binding class name: DNS_Query
Dictionary key name: dns_query
http_session
XML Binding class name: HTTP_Session
Dictionary key name: http_session
class cybox.objects.network_connection_object.NetworkConnection[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.network_connection_object.NetworkConnectionObjectType
creation_time
XML Binding class name: Creation_Time
Dictionary key name: creation_time
destination_socket_address
XML Binding class name: Destination_Socket_Address
Dictionary key name: destination_socket_address
destination_tcp_state
XML Binding class name: Destination_TCP_State
Dictionary key name: destination_tcp_state
layer3_protocol
XML Binding class name: Layer3_Protocol
Dictionary key name: layer3_protocol
layer4_protocol
XML Binding class name: Layer4_Protocol
Dictionary key name: layer4_protocol
layer7_connections
XML Binding class name: Layer7_Connections
Dictionary key name: layer7_connections
layer7_protocol
XML Binding class name: Layer7_Protocol
Dictionary key name: layer7_protocol
source_socket_address
XML Binding class name: Source_Socket_Address
Dictionary key name: source_socket_address
source_tcp_state
XML Binding class name: Source_TCP_State
Dictionary key name: source_tcp_state
tls_used
XML Binding class name: tls_used
Dictionary key name: tls_used

Version: 2.1.0.13

cybox.objects.network_packet_object module

class cybox.objects.network_packet_object.ARP[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.ARPType
hardware_addr_size
XML Binding class name: Hardware_Addr_Size
Dictionary key name: hardware_addr_size
hardware_addr_type
XML Binding class name: Hardware_Addr_Type
Dictionary key name: hardware_addr_type
op_type
XML Binding class name: Op_Type
Dictionary key name: op_type
proto_addr_size
XML Binding class name: Proto_Addr_Size
Dictionary key name: proto_addr_size
proto_addr_type
XML Binding class name: Proto_Addr_Type
Dictionary key name: proto_addr_type
recip_hardware_addr
XML Binding class name: Recip_Hardware_Addr
Dictionary key name: recip_hardware_addr
recip_protocol_addr
XML Binding class name: Recip_Protocol_Addr
Dictionary key name: recip_protocol_addr
sender_hardware_addr
XML Binding class name: Sender_Hardware_Addr
Dictionary key name: sender_hardware_addr
sender_protocol_addr
XML Binding class name: Sender_Protocol_Addr
Dictionary key name: sender_protocol_addr
class cybox.objects.network_packet_object.AuthenticationHeader[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.AuthenticationHeaderType
authentication_data
XML Binding class name: Authentication_Data
Dictionary key name: authentication_data
header_ext_len
XML Binding class name: Header_Ext_Len
Dictionary key name: header_ext_len
next_header
XML Binding class name: Next_Header
Dictionary key name: next_header
security_parameters_index
XML Binding class name: Security_Parameters_Index
Dictionary key name: security_parameters_index
sequence_number
XML Binding class name: Sequence_Number
Dictionary key name: sequence_number
class cybox.objects.network_packet_object.DestinationOptions[source]

Bases: cybox.objects.network_packet_object._IPv6ExtHeader

XML binding class: cybox.bindings.network_packet_object.DestinationOptionsType
class cybox.objects.network_packet_object.EncapsulatingSecurityPayload[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.EncapsulatingSecurityPayloadType
authentication_data
XML Binding class name: Authentication_Data
Dictionary key name: authentication_data
next_header
XML Binding class name: Next_Header
Dictionary key name: next_header
padding
XML Binding class name: Padding
Dictionary key name: padding
padding_len
XML Binding class name: Padding_Len
Dictionary key name: padding_len
payload_data
XML Binding class name: Payload_Data
Dictionary key name: payload_data
security_parameters_index
XML Binding class name: Security_Parameters_Index
Dictionary key name: security_parameters_index
sequence_number
XML Binding class name: Sequence_Number
Dictionary key name: sequence_number
class cybox.objects.network_packet_object.EthernetHeader[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.EthernetHeaderType
checksum
XML Binding class name: Checksum
Dictionary key name: checksum
destination_mac_addr
XML Binding class name: Destination_MAC_Addr
Dictionary key name: destination_mac_addr
source_mac_addr
XML Binding class name: Source_MAC_Addr
Dictionary key name: source_mac_addr
type_or_length
XML Binding class name: Type_Or_Length
Dictionary key name: type_or_length
class cybox.objects.network_packet_object.EthernetInterface[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.EthernetInterfaceType
ethernet_header
XML Binding class name: Ethernet_Header
Dictionary key name: ethernet_header
class cybox.objects.network_packet_object.Fragment[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.FragmentType
fragment
XML Binding class name: Fragment
Dictionary key name: fragment
fragment_header
XML Binding class name: Fragment_Header
Dictionary key name: fragment_header
class cybox.objects.network_packet_object.FragmentHeader[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.FragmentHeaderType
fragment_offset
XML Binding class name: Fragment_Offset
Dictionary key name: fragment_offset
identification
XML Binding class name: Identification
Dictionary key name: identification
m_flag
XML Binding class name: M_Flag
Dictionary key name: m_flag
next_header
XML Binding class name: Next_Header
Dictionary key name: next_header
class cybox.objects.network_packet_object.FragmentationRequired[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.FragmentationRequiredType
fragmentation_required
XML Binding class name: Fragmentation_Required
Dictionary key name: fragmentation_required
next_hop_mtu
XML Binding class name: Next_Hop_MTU
Dictionary key name: next_hop_mtu
class cybox.objects.network_packet_object.HopByHopOptions[source]

Bases: cybox.objects.network_packet_object._IPv6ExtHeader

XML binding class: cybox.bindings.network_packet_object.HopByHopOptionsType
class cybox.objects.network_packet_object.ICMPv4AddressMaskReply[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.ICMPv4AddressMaskReplyType
address_mask
XML Binding class name: Address_Mask
Dictionary key name: address_mask
address_mask_reply
XML Binding class name: Address_Mask_Reply
Dictionary key name: address_mask_reply
class cybox.objects.network_packet_object.ICMPv4AddressMaskRequest[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.ICMPv4AddressMaskRequestType
address_mask
XML Binding class name: Address_Mask
Dictionary key name: address_mask
address_mask_request
XML Binding class name: Address_Mask_Request
Dictionary key name: address_mask_request
class cybox.objects.network_packet_object.ICMPv4DestinationUnreachable[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.ICMPv4DestinationUnreachableType
communication_administratively_prohibited
XML Binding class name: Communication_Administratively_Prohibited
Dictionary key name: communication_administratively_prohibited
destination_host_unknown
XML Binding class name: Destination_Host_Unknown
Dictionary key name: destination_host_unknown
destination_host_unreachable
XML Binding class name: Destination_Host_Unreachable
Dictionary key name: destination_host_unreachable
destination_network_unknown
XML Binding class name: Destination_Network_Unknown
Dictionary key name: destination_network_unknown
destination_network_unreachable
XML Binding class name: Destination_Network_Unreachable
Dictionary key name: destination_network_unreachable
destination_port_unreachable
XML Binding class name: Destination_Port_Unreachable
Dictionary key name: destination_port_unreachable
destination_protocol_unreachable
XML Binding class name: Destination_Protocol_Unreachable
Dictionary key name: destination_protocol_unreachable
fragmentation_required
XML Binding class name: Fragmentation_Required
Dictionary key name: fragmentation_required
host_administratively_prohibited
XML Binding class name: Host_Administratively_Prohibited
Dictionary key name: host_administratively_prohibited
host_precedence_violation
XML Binding class name: Host_Precedence_Violation
Dictionary key name: host_precedence_violation
host_unreachable_for_tos
XML Binding class name: Host_Unreachable_For_TOS
Dictionary key name: host_unreachable_for_tos
network_administratively_prohibited
XML Binding class name: Network_Administratively_Prohibited
Dictionary key name: network_administratively_prohibited
network_unreachable_for_tos
XML Binding class name: Network_Unreachable_For_TOS
Dictionary key name: network_unreachable_for_tos
precedence_cutoff_in_effect
XML Binding class name: Precedence_Cutoff_In_Effect
Dictionary key name: precedence_cutoff_in_effect
source_host_isolated
XML Binding class name: Source_Host_Isolated
Dictionary key name: source_host_isolated
source_route_failed
XML Binding class name: Source_Route_Failed
Dictionary key name: source_route_failed
class cybox.objects.network_packet_object.ICMPv4EchoReply[source]

Bases: cybox.objects.network_packet_object._ICMPEchoReply

XML binding class: cybox.bindings.network_packet_object.ICMPv4EchoReplyType
class cybox.objects.network_packet_object.ICMPv4EchoRequest[source]

Bases: cybox.objects.network_packet_object._ICMPEchoRequest

XML binding class: cybox.bindings.network_packet_object.ICMPv4EchoRequestType
class cybox.objects.network_packet_object.ICMPv4ErrorMessage[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.ICMPv4ErrorMessageType
destination_unreachable
XML Binding class name: Destination_Unreachable
Dictionary key name: destination_unreachable
error_msg_content
XML Binding class name: Error_Msg_Content
Dictionary key name: error_msg_content
redirect_message
XML Binding class name: Redirect_Message
Dictionary key name: redirect_message
source_quench
XML Binding class name: Source_Quench
Dictionary key name: source_quench
time_exceeded
XML Binding class name: Time_Exceeded
Dictionary key name: time_exceeded
class cybox.objects.network_packet_object.ICMPv4ErrorMessageContent[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.ICMPv4ErrorMessageContentType
first_eight_bytes
XML Binding class name: First_Eight_Bytes
Dictionary key name: first_eight_bytes
ip_header
XML Binding class name: IP_Header
Dictionary key name: ip_header
class cybox.objects.network_packet_object.ICMPv4Header[source]

Bases: cybox.objects.network_packet_object._ICMPHeader

XML binding class: cybox.bindings.network_packet_object.ICMPv4HeaderType
class cybox.objects.network_packet_object.ICMPv4InfoMessage[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.ICMPv4InfoMessageType
address_mask_reply
XML Binding class name: Address_Mask_Reply
Dictionary key name: address_mask_reply
address_mask_request
XML Binding class name: Address_Mask_Request
Dictionary key name: address_mask_request
echo_reply
XML Binding class name: Echo_Reply
Dictionary key name: echo_reply
echo_request
XML Binding class name: Echo_Request
Dictionary key name: echo_request
info_msg_content
XML Binding class name: Info_Msg_Content
Dictionary key name: info_msg_content
timestamp_reply
XML Binding class name: Timestamp_Reply
Dictionary key name: timestamp_reply
timestamp_request
XML Binding class name: Timestamp_Request
Dictionary key name: timestamp_request
class cybox.objects.network_packet_object.ICMPv4InfoMessageContent[source]

Bases: cybox.objects.network_packet_object._ICMPInfoMessageContent

XML binding class: cybox.bindings.network_packet_object.ICMPv4InfoMessageContentType
class cybox.objects.network_packet_object.ICMPv4Packet[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.ICMPv4PacketType
error_msg
XML Binding class name: Error_Msg
Dictionary key name: error_msg
icmpv4_header
XML Binding class name: ICMPv4_Header
Dictionary key name: icmpv4_header
info_msg
XML Binding class name: Info_Msg
Dictionary key name: info_msg
traceroute
XML Binding class name: Traceroute
Dictionary key name: traceroute
class cybox.objects.network_packet_object.ICMPv4RedirectMessage[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.ICMPv4RedirectMessageType
host_redirect
XML Binding class name: Host_Redirect
Dictionary key name: host_redirect
ip_address
XML Binding class name: IP_Address
Dictionary key name: ip_address
network_redirect
XML Binding class name: Network_Redirect
Dictionary key name: network_redirect
tos_host_redirect
XML Binding class name: ToS_Host_Redirect
Dictionary key name: tos_host_redirect
tos_network_redirect
XML Binding class name: ToS_Network_Redirect
Dictionary key name: tos_network_redirect
class cybox.objects.network_packet_object.ICMPv4SourceQuench[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.ICMPv4SourceQuenchType
source_quench
XML Binding class name: Source_Quench
Dictionary key name: source_quench
class cybox.objects.network_packet_object.ICMPv4TimeExceeded[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.ICMPv4TimeExceededType
frag_reassembly_time_exceeded
XML Binding class name: Frag_Reassembly_Time_Exceeded
Dictionary key name: frag_reassembly_time_exceeded
ttl_exceeded_in_transit
XML Binding class name: TTL_Exceeded_In_Transit
Dictionary key name: ttl_exceeded_in_transit
class cybox.objects.network_packet_object.ICMPv4TimestampReply[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.ICMPv4TimestampReplyType
originate_timestamp
XML Binding class name: Originate_Timestamp
Dictionary key name: originate_timestamp
receive_timestamp
XML Binding class name: Receive_Timestamp
Dictionary key name: receive_timestamp
timestamp_reply
XML Binding class name: Timestamp_Reply
Dictionary key name: timestamp_reply
transmit_timestamp
XML Binding class name: Transmit_Timestamp
Dictionary key name: transmit_timestamp
class cybox.objects.network_packet_object.ICMPv4TimestampRequest[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.ICMPv4TimestampRequestType
originate_timestamp
XML Binding class name: Originate_Timestamp
Dictionary key name: originate_timestamp
timestamp
XML Binding class name: Timestamp
Dictionary key name: timestamp
class cybox.objects.network_packet_object.ICMPv4Traceroute[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.ICMPv4TracerouteType
identifier
XML Binding class name: Identifier
Dictionary key name: identifier
outbound_hop_count
XML Binding class name: Outbound_Hop_Count
Dictionary key name: outbound_hop_count
outbound_packet_forward_success
XML Binding class name: Outbound_Packet_Forward_Success
Dictionary key name: outbound_packet_forward_success
outbound_packet_no_route
XML Binding class name: Outbound_Packet_no_Route
Dictionary key name: outbound_packet_no_route
XML Binding class name: Output_Link_MTU
Dictionary key name: output_link_mtu
XML Binding class name: Output_Link_Speed
Dictionary key name: output_link_speed
return_hop_count
XML Binding class name: Return_Hop_Count
Dictionary key name: return_hop_count
class cybox.objects.network_packet_object.ICMPv6DestinationUnreachable[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.ICMPv6DestinationUnreachableType
address_unreachable
XML Binding class name: Address_Unreachable
Dictionary key name: address_unreachable
beyond_scope
XML Binding class name: Beyond_Scope
Dictionary key name: beyond_scope
comm_prohibited
XML Binding class name: Comm_Prohibited
Dictionary key name: comm_prohibited
no_route
XML Binding class name: No_Route
Dictionary key name: no_route
port_unreachable
XML Binding class name: Port_Unreachable
Dictionary key name: port_unreachable
reject_route
XML Binding class name: Reject_Route
Dictionary key name: reject_route
src_addr_failed_policy
XML Binding class name: Src_Addr_Failed_Policy
Dictionary key name: src_addr_failed_policy
class cybox.objects.network_packet_object.ICMPv6EchoReply[source]

Bases: cybox.objects.network_packet_object._ICMPEchoReply

XML binding class: cybox.bindings.network_packet_object.ICMPv6EchoReplyType
class cybox.objects.network_packet_object.ICMPv6EchoRequest[source]

Bases: cybox.objects.network_packet_object._ICMPEchoRequest

XML binding class: cybox.bindings.network_packet_object.ICMPv6EchoRequestType
class cybox.objects.network_packet_object.ICMPv6ErrorMessage[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.ICMPv6ErrorMessageType
destination_unreachable
XML Binding class name: Destination_Unreachable
Dictionary key name: destination_unreachable
invoking_packet
XML Binding class name: Invoking_Packet
Dictionary key name: invoking_packet
packet_too_big
XML Binding class name: Packet_Too_Big
Dictionary key name: packet_too_big
parameter_problem
XML Binding class name: Parameter_Problem
Dictionary key name: parameter_problem
time_exceeded
XML Binding class name: Time_Exceeded
Dictionary key name: time_exceeded
class cybox.objects.network_packet_object.ICMPv6Header[source]

Bases: cybox.objects.network_packet_object._ICMPHeader

XML binding class: cybox.bindings.network_packet_object.ICMPv6HeaderType
class cybox.objects.network_packet_object.ICMPv6InfoMessage[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.ICMPv6InfoMessageType
echo_reply
XML Binding class name: Echo_Reply
Dictionary key name: echo_reply
echo_request
XML Binding class name: Echo_Request
Dictionary key name: echo_request
info_msg_content
XML Binding class name: Info_Msg_Content
Dictionary key name: info_msg_content
class cybox.objects.network_packet_object.ICMPv6InfoMessageContent[source]

Bases: cybox.objects.network_packet_object._ICMPInfoMessageContent

XML binding class: cybox.bindings.network_packet_object.ICMPv6InfoMessageContentType
class cybox.objects.network_packet_object.ICMPv6Packet[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.ICMPv6PacketType
error_msg
XML Binding class name: Error_Msg
Dictionary key name: error_msg
icmpv6_header
XML Binding class name: ICMPv6_Header
Dictionary key name: icmpv6_header
info_msg
XML Binding class name: Info_Msg
Dictionary key name: info_msg
class cybox.objects.network_packet_object.ICMPv6PacketTooBig[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.ICMPv6PacketTooBigType
mtu
XML Binding class name: MTU
Dictionary key name: mtu
packet_too_big
XML Binding class name: Packet_Too_Big
Dictionary key name: packet_too_big
class cybox.objects.network_packet_object.ICMPv6ParameterProblem[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.ICMPv6ParameterProblemType
erroneous_header_field
XML Binding class name: Erroneous_Header_Field
Dictionary key name: erroneous_header_field
pointer
XML Binding class name: Pointer
Dictionary key name: pointer
unrecognized_ipv6_option
XML Binding class name: Unrecognized_IPv6_Option
Dictionary key name: unrecognized_ipv6_option
unrecognized_next_header_type
XML Binding class name: Unrecognized_Next_Header_Type
Dictionary key name: unrecognized_next_header_type
class cybox.objects.network_packet_object.ICMPv6TimeExceeded[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.ICMPv6TimeExceededType
fragment_reassem_time_exceeded
XML Binding class name: Fragment_Reassem_Time_Exceeded
Dictionary key name: fragment_reassem_time_exceeded
hop_limit_exceeded
XML Binding class name: Hop_Limit_Exceeded
Dictionary key name: hop_limit_exceeded
class cybox.objects.network_packet_object.IPv4Flags[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.IPv4FlagsType
do_not_fragment
XML Binding class name: Do_Not_Fragment
Dictionary key name: do_not_fragment
more_fragments
XML Binding class name: More_Fragments
Dictionary key name: more_fragments
reserved
XML Binding class name: Reserved
Dictionary key name: reserved
class cybox.objects.network_packet_object.IPv4Header[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.IPv4HeaderType
checksum
XML Binding class name: Checksum
Dictionary key name: checksum
dest_ipv4_addr
XML Binding class name: Dest_IPv4_Addr
Dictionary key name: dest_ipv4_addr
dscp
XML Binding class name: DSCP
Dictionary key name: dscp
ecn
XML Binding class name: ECN
Dictionary key name: ecn
flags
XML Binding class name: Flags
Dictionary key name: flags
fragment_offset
XML Binding class name: Fragment_Offset
Dictionary key name: fragment_offset
header_length
XML Binding class name: Header_Length
Dictionary key name: header_length
identification
XML Binding class name: Identification
Dictionary key name: identification
ip_version
XML Binding class name: IP_Version
Dictionary key name: ip_version
option
(List of values permitted)
XML Binding class name: Option
Dictionary key name: option
protocol
XML Binding class name: Protocol
Dictionary key name: protocol
src_ipv4_addr
XML Binding class name: Src_IPv4_Addr
Dictionary key name: src_ipv4_addr
total_length
XML Binding class name: Total_Length
Dictionary key name: total_length
ttl
XML Binding class name: TTL
Dictionary key name: ttl
class cybox.objects.network_packet_object.IPv4Option[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.IPv4OptionType
class_
XML Binding class name: Class
Dictionary key name: class
copy_flag
XML Binding class name: Copy_Flag
Dictionary key name: copy_flag
option
XML Binding class name: Option
Dictionary key name: option
class cybox.objects.network_packet_object.IPv4Packet[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.IPv4PacketType
data
XML Binding class name: Data
Dictionary key name: data
ipv4_header
XML Binding class name: IPv4_Header
Dictionary key name: ipv4_header
class cybox.objects.network_packet_object.IPv6ExtHeader[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.IPv6ExtHeaderType
authentication_header
XML Binding class name: Authentication_Header
Dictionary key name: authentication_header
destination_options
(List of values permitted)
XML Binding class name: Destination_Options
Dictionary key name: destination_options
encapsulating_security_payload
XML Binding class name: Encapsulating_Security_Payload
Dictionary key name: encapsulating_security_payload
fragment
XML Binding class name: Fragment
Dictionary key name: fragment
hop_by_hop_options
XML Binding class name: Hop_by_Hop_Options
Dictionary key name: hop_by_hop_options
routing
XML Binding class name: Routing
Dictionary key name: routing
class cybox.objects.network_packet_object.IPv6Header[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.IPv6HeaderType
dest_ipv6_addr
XML Binding class name: Dest_IPv6_Addr
Dictionary key name: dest_ipv6_addr
flow_label
XML Binding class name: Flow_Label
Dictionary key name: flow_label
ip_version
XML Binding class name: IP_Version
Dictionary key name: ip_version
next_header
XML Binding class name: Next_Header
Dictionary key name: next_header
payload_length
XML Binding class name: Payload_Length
Dictionary key name: payload_length
src_ipv6_addr
XML Binding class name: Src_IPv6_Addr
Dictionary key name: src_ipv6_addr
traffic_class
XML Binding class name: Traffic_Class
Dictionary key name: traffic_class
ttl
XML Binding class name: TTL
Dictionary key name: ttl
class cybox.objects.network_packet_object.IPv6Option[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.IPv6OptionType
do_not_recogn_action
XML Binding class name: Do_Not_Recogn_Action
Dictionary key name: do_not_recogn_action
option_byte
XML Binding class name: Option_Byte
Dictionary key name: option_byte
packet_change
XML Binding class name: Packet_Change
Dictionary key name: packet_change
class cybox.objects.network_packet_object.IPv6Packet[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.IPv6PacketType
data
XML Binding class name: Data
Dictionary key name: data
ext_headers
(List of values permitted)
XML Binding class name: Ext_Headers
Dictionary key name: ext_headers
ipv6_header
XML Binding class name: IPv6_Header
Dictionary key name: ipv6_header
class cybox.objects.network_packet_object.InternetLayer[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.InternetLayerType
icmpv4
XML Binding class name: ICMPv4
Dictionary key name: icmpv4
icmpv6
XML Binding class name: ICMPv6
Dictionary key name: icmpv6
ipv4
XML Binding class name: IPv4
Dictionary key name: ipv4
ipv6
XML Binding class name: IPv6
Dictionary key name: ipv6
class cybox.objects.network_packet_object.LinkLayer[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.LinkLayerType
logical_protocols
XML Binding class name: Logical_Protocols
Dictionary key name: logical_protocols
physical_interface
XML Binding class name: Physical_Interface
Dictionary key name: physical_interface
class cybox.objects.network_packet_object.LogicalProtocol[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.LogicalProtocolType
arp_rarp
XML Binding class name: ARP_RARP
Dictionary key name: arp_rarp
ndp
XML Binding class name: NDP
Dictionary key name: ndp
class cybox.objects.network_packet_object.NDP[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.NDPType
icmpv6_header
XML Binding class name: ICMPv6_Header
Dictionary key name: icmpv6_header
neighbor_advertisement
XML Binding class name: Neighbor_Advertisement
Dictionary key name: neighbor_advertisement
neighbor_solicitation
XML Binding class name: Neighbor_Solicitation
Dictionary key name: neighbor_solicitation
redirect
XML Binding class name: Redirect
Dictionary key name: redirect
router_advertisement
XML Binding class name: Router_Advertisement
Dictionary key name: router_advertisement
router_solicitation
XML Binding class name: Router_Solicitation
Dictionary key name: router_solicitation
class cybox.objects.network_packet_object.NDPLinkAddr[source]

Bases: mixbox.entities.Entity

Abstract Type

XML binding class: cybox.bindings.network_packet_object.NDPLinkAddrType
length
XML Binding class name: Length
Dictionary key name: length
XML Binding class name: Link_Layer_MAC_Addr
Dictionary key name: link_layer_mac_addr
class cybox.objects.network_packet_object.NDPMTU[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.NDPMTUType
length
XML Binding class name: Length
Dictionary key name: length
mtu
XML Binding class name: MTU
Dictionary key name: mtu
class cybox.objects.network_packet_object.NDPPrefixInfo[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.NDPPrefixInfoType
addr_config_flag
XML Binding class name: addr_config_flag
Dictionary key name: addr_config_flag
length
XML Binding class name: Length
Dictionary key name: length
XML Binding class name: link_flag
Dictionary key name: link_flag
preferred_lifetime
XML Binding class name: Preferred_Lifetime
Dictionary key name: preferred_lifetime
prefix
XML Binding class name: Prefix
Dictionary key name: prefix
prefix_length
XML Binding class name: Prefix_Length
Dictionary key name: prefix_length
valid_lifetime
XML Binding class name: Valid_Lifetime
Dictionary key name: valid_lifetime
class cybox.objects.network_packet_object.NDPRedirectedHeader[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.NDPRedirectedHeaderType
ipheader_and_data
XML Binding class name: IPHeader_And_Data
Dictionary key name: ipheader_and_data
length
XML Binding class name: Length
Dictionary key name: length
class cybox.objects.network_packet_object.NeighborAdvertisement[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.NeighborAdvertisementType
options
XML Binding class name: Options
Dictionary key name: options
override_flag
XML Binding class name: override_flag
Dictionary key name: override_flag
router_flag
XML Binding class name: router_flag
Dictionary key name: router_flag
solicited_flag
XML Binding class name: solicited_flag
Dictionary key name: solicited_flag
target_ipv6_addr
XML Binding class name: Target_IPv6_Addr
Dictionary key name: target_ipv6_addr
class cybox.objects.network_packet_object.NeighborOptions[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.NeighborOptionsType
XML Binding class name: Target_Link_Addr
Dictionary key name: target_link_addr
class cybox.objects.network_packet_object.NeighborSolicitation[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.NeighborSolicitationType
options
XML Binding class name: Options
Dictionary key name: options
target_ipv6_addr
XML Binding class name: Target_IPv6_Addr
Dictionary key name: target_ipv6_addr
class cybox.objects.network_packet_object.NeighborSolicitationOptions[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.NeighborSolicitationOptionsType
XML Binding class name: Src_Link_Addr
Dictionary key name: src_link_addr
class cybox.objects.network_packet_object.NetworkPacket[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.network_packet_object.NetworkPacketObjectType
internet_layer
XML Binding class name: Internet_Layer
Dictionary key name: internet_layer
XML Binding class name: Link_Layer
Dictionary key name: link_layer
transport_layer
XML Binding class name: Transport_Layer
Dictionary key name: transport_layer
class cybox.objects.network_packet_object.OptionData[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.OptionDataType
option_data_len
XML Binding class name: Option_Data_Len
Dictionary key name: option_data_len
option_type
XML Binding class name: Option_Type
Dictionary key name: option_type
pad1
XML Binding class name: Pad1
Dictionary key name: pad1
padn
XML Binding class name: PadN
Dictionary key name: padn
class cybox.objects.network_packet_object.Pad1[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.Pad1Type
octet
XML Binding class name: Octet
Dictionary key name: octet
class cybox.objects.network_packet_object.PadN[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.PadNType
octet
XML Binding class name: Octet
Dictionary key name: octet
option_data
XML Binding class name: Option_Data
Dictionary key name: option_data
option_data_length
XML Binding class name: Option_Data_Length
Dictionary key name: option_data_length
class cybox.objects.network_packet_object.PhysicalInterface[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.PhysicalInterfaceType
ethernet
XML Binding class name: Ethernet
Dictionary key name: ethernet
class cybox.objects.network_packet_object.Prefix[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.PrefixType
ip_addr_prefix
XML Binding class name: IP_Addr_Prefix
Dictionary key name: ip_addr_prefix
ipv6_addr
XML Binding class name: IPv6_Addr
Dictionary key name: ipv6_addr
class cybox.objects.network_packet_object.Redirect[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.RedirectType
dest_ipv6_addr
XML Binding class name: Dest_IPv6_Addr
Dictionary key name: dest_ipv6_addr
options
XML Binding class name: Options
Dictionary key name: options
target_ipv6_addr
XML Binding class name: Target_IPv6_Addr
Dictionary key name: target_ipv6_addr
class cybox.objects.network_packet_object.RedirectOptions[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.RedirectOptionsType
redirected_header
XML Binding class name: Redirected_Header
Dictionary key name: redirected_header
XML Binding class name: Target_Link_Addr
Dictionary key name: target_link_addr
class cybox.objects.network_packet_object.RouterAdvertisement[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.RouterAdvertisementType
cur_hop_limit
XML Binding class name: Cur_Hop_Limit
Dictionary key name: cur_hop_limit
managed_address_config_flag
XML Binding class name: managed_address_config_flag
Dictionary key name: managed_address_config_flag
options
XML Binding class name: Options
Dictionary key name: options
other_config_flag
XML Binding class name: other_config_flag
Dictionary key name: other_config_flag
reachable_time
XML Binding class name: Reachable_Time
Dictionary key name: reachable_time
retrans_timer
XML Binding class name: Retrans_Timer
Dictionary key name: retrans_timer
router_lifetime
XML Binding class name: Router_Lifetime
Dictionary key name: router_lifetime
class cybox.objects.network_packet_object.RouterAdvertisementOptions[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.RouterAdvertisementOptionsType
mtu
XML Binding class name: MTU
Dictionary key name: mtu
prefix_info
XML Binding class name: Prefix_Info
Dictionary key name: prefix_info
XML Binding class name: Src_Link_Addr
Dictionary key name: src_link_addr
class cybox.objects.network_packet_object.RouterSolicitation[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.RouterSolicitationType
options
(List of values permitted)
XML Binding class name: Options
Dictionary key name: options
class cybox.objects.network_packet_object.RouterSolicitationOptions[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.RouterSolicitationOptionsType
XML Binding class name: Src_Link_Addr
Dictionary key name: src_link_addr
class cybox.objects.network_packet_object.Routing[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.RoutingType
header_ext_len
XML Binding class name: Header_Ext_Len
Dictionary key name: header_ext_len
next_header
XML Binding class name: Next_Header
Dictionary key name: next_header
routing_type
XML Binding class name: Routing_Type
Dictionary key name: routing_type
segments_left
XML Binding class name: Segments_Left
Dictionary key name: segments_left
type_specific_data
XML Binding class name: Type_Specific_Data
Dictionary key name: type_specific_data
class cybox.objects.network_packet_object.TCP[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.TCPType
data
XML Binding class name: Data
Dictionary key name: data
options
XML Binding class name: Options
Dictionary key name: options
tcp_header
XML Binding class name: TCP_Header
Dictionary key name: tcp_header
class cybox.objects.network_packet_object.TCPFlags[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.TCPFlagsType
ack
XML Binding class name: ack
Dictionary key name: ack
cwr
XML Binding class name: cwr
Dictionary key name: cwr
ece
XML Binding class name: ece
Dictionary key name: ece
fin
XML Binding class name: fin
Dictionary key name: fin
ns
XML Binding class name: ns
Dictionary key name: ns
psh
XML Binding class name: psh
Dictionary key name: psh
rst
XML Binding class name: rst
Dictionary key name: rst
syn
XML Binding class name: syn
Dictionary key name: syn
urg
XML Binding class name: urg
Dictionary key name: urg
class cybox.objects.network_packet_object.TCPHeader[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.TCPHeaderType
ack_num
XML Binding class name: ACK_Num
Dictionary key name: ack_num
checksum
XML Binding class name: Checksum
Dictionary key name: checksum
data_offset
XML Binding class name: Data_Offset
Dictionary key name: data_offset
dest_port
XML Binding class name: Dest_Port
Dictionary key name: dest_port
reserved
XML Binding class name: Reserved
Dictionary key name: reserved
seq_num
XML Binding class name: Seq_Num
Dictionary key name: seq_num
src_port
XML Binding class name: Src_Port
Dictionary key name: src_port
tcp_flags
XML Binding class name: TCP_Flags
Dictionary key name: tcp_flags
urg_ptr
XML Binding class name: Urg_Ptr
Dictionary key name: urg_ptr
window
XML Binding class name: Window
Dictionary key name: window
class cybox.objects.network_packet_object.TransportLayer[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.TransportLayerType
tcp
XML Binding class name: TCP
Dictionary key name: tcp
udp
XML Binding class name: UDP
Dictionary key name: udp
class cybox.objects.network_packet_object.TypeLength[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.TypeLengthType
internet_layer_type
XML Binding class name: Internet_Layer_Type
Dictionary key name: internet_layer_type
length
XML Binding class name: Length
Dictionary key name: length
class cybox.objects.network_packet_object.UDP[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.UDPType
data
XML Binding class name: Data
Dictionary key name: data
udp_header
XML Binding class name: UDP_Header
Dictionary key name: udp_header
class cybox.objects.network_packet_object.UDPHeader[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_packet_object.UDPHeaderType
checksum
XML Binding class name: Checksum
Dictionary key name: checksum
destport
XML Binding class name: DestPort
Dictionary key name: destport
length
XML Binding class name: Length
Dictionary key name: length
srcport
XML Binding class name: SrcPort
Dictionary key name: srcport

Version: 2.1.0.13

cybox.objects.network_route_entry_object module

class cybox.objects.network_route_entry_object.NetworkRouteEntry[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.network_route_entry_object.NetworkRouteEntryObjectType
destination_address
XML Binding class name: Destination_Address
Dictionary key name: destination_address
gateway_address
XML Binding class name: Gateway_Address
Dictionary key name: gateway_address
interface
XML Binding class name: Interface
Dictionary key name: interface
is_autoconfigure_address
XML Binding class name: is_autoconfigure_address
Dictionary key name: is_autoconfigure_address
is_immortal
XML Binding class name: is_immortal
Dictionary key name: is_immortal
is_ipv6
XML Binding class name: is_ipv6
Dictionary key name: is_ipv6
is_loopback
XML Binding class name: is_loopback
Dictionary key name: is_loopback
is_publish
XML Binding class name: is_publish
Dictionary key name: is_publish
metric
XML Binding class name: Metric
Dictionary key name: metric
netmask
XML Binding class name: Netmask
Dictionary key name: netmask
origin
XML Binding class name: Origin
Dictionary key name: origin
preferred_lifetime
XML Binding class name: Preferred_Lifetime
Dictionary key name: preferred_lifetime
protocol
XML Binding class name: Protocol
Dictionary key name: protocol
route_age
XML Binding class name: Route_Age
Dictionary key name: route_age
type_
XML Binding class name: Type
Dictionary key name: type
valid_lifetime
XML Binding class name: Valid_Lifetime
Dictionary key name: valid_lifetime

Version: 2.1.0.13

cybox.objects.network_route_object module

class cybox.objects.network_route_object.NetRoute[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.network_route_object.NetRouteObjectType
description
XML Binding class name: Description
Dictionary key name: description
is_autoconfigure_address
XML Binding class name: is_autoconfigure_address
Dictionary key name: is_autoconfigure_address
is_immortal
XML Binding class name: is_immortal
Dictionary key name: is_immortal
is_ipv6
XML Binding class name: is_ipv6
Dictionary key name: is_ipv6
is_loopback
XML Binding class name: is_loopback
Dictionary key name: is_loopback
is_publish
XML Binding class name: is_publish
Dictionary key name: is_publish
network_route_entries
XML Binding class name: Network_Route_Entries
Dictionary key name: network_route_entries
preferred_lifetime
XML Binding class name: Preferred_Lifetime
Dictionary key name: preferred_lifetime
route_age
XML Binding class name: Route_Age
Dictionary key name: route_age
valid_lifetime
XML Binding class name: Valid_Lifetime
Dictionary key name: valid_lifetime
class cybox.objects.network_route_object.NetworkRouteEntries(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.network_route_object.NetworkRouteEntriesType
network_route_entry
(List of values permitted)
XML Binding class name: Network_Route_Entry
Dictionary key name: network_route_entry

Version: 2.1.0.13

cybox.objects.network_socket_object module

class cybox.objects.network_socket_object.NetworkSocket[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.network_socket_object.NetworkSocketObjectType
address_family
XML Binding class name: Address_Family
Dictionary key name: address_family
domain
XML Binding class name: Domain
Dictionary key name: domain
is_blocking
XML Binding class name: is_blocking
Dictionary key name: is_blocking
is_listening
XML Binding class name: is_listening
Dictionary key name: is_listening
local_address
XML Binding class name: Local_Address
Dictionary key name: local_address
options
XML Binding class name: Options
Dictionary key name: options
protocol
XML Binding class name: Protocol
Dictionary key name: protocol
remote_address
XML Binding class name: Remote_Address
Dictionary key name: remote_address
socket_descriptor
XML Binding class name: Socket_Descriptor
Dictionary key name: socket_descriptor
type_
XML Binding class name: Type
Dictionary key name: type
class cybox.objects.network_socket_object.SocketOptions[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.network_socket_object.SocketOptionsType
ip_multicast_if
XML Binding class name: IP_MULTICAST_IF
Dictionary key name: ip_multicast_if
ip_multicast_if2
XML Binding class name: IP_MULTICAST_IF2
Dictionary key name: ip_multicast_if2
ip_multicast_loop
XML Binding class name: IP_MULTICAST_LOOP
Dictionary key name: ip_multicast_loop
ip_tos
XML Binding class name: IP_TOS
Dictionary key name: ip_tos
so_broadcast
XML Binding class name: SO_BROADCAST
Dictionary key name: so_broadcast
so_conditional_accept
XML Binding class name: SO_CONDITIONAL_ACCEPT
Dictionary key name: so_conditional_accept
so_debug
XML Binding class name: SO_DEBUG
Dictionary key name: so_debug
so_dontlinger
XML Binding class name: SO_DONTLINGER
Dictionary key name: so_dontlinger
so_dontroute
XML Binding class name: SO_DONTROUTE
Dictionary key name: so_dontroute
so_group_priority
XML Binding class name: SO_GROUP_PRIORITY
Dictionary key name: so_group_priority
so_keepalive
XML Binding class name: SO_KEEPALIVE
Dictionary key name: so_keepalive
so_linger
XML Binding class name: SO_LINGER
Dictionary key name: so_linger
so_oobinline
XML Binding class name: SO_OOBINLINE
Dictionary key name: so_oobinline
so_rcvbuf
XML Binding class name: SO_RCVBUF
Dictionary key name: so_rcvbuf
so_rcvtimeo
XML Binding class name: SO_RCVTIMEO
Dictionary key name: so_rcvtimeo
so_reuseaddr
XML Binding class name: SO_REUSEADDR
Dictionary key name: so_reuseaddr
so_sndbuf
XML Binding class name: SO_SNDBUF
Dictionary key name: so_sndbuf
so_sndtimeo
XML Binding class name: SO_SNDTIMEO
Dictionary key name: so_sndtimeo
so_timeout
XML Binding class name: SO_TIMEOUT
Dictionary key name: so_timeout
so_update_accept_context
XML Binding class name: SO_UPDATE_ACCEPT_CONTEXT
Dictionary key name: so_update_accept_context
tcp_nodelay
XML Binding class name: TCP_NODELAY
Dictionary key name: tcp_nodelay

Version: 2.1.0.13

cybox.objects.network_subnet_object module

class cybox.objects.network_subnet_object.NetworkSubnet[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.network_subnet_object.NetworkSubnetObjectType
description
XML Binding class name: Description
Dictionary key name: description
name
XML Binding class name: Name
Dictionary key name: name
number_of_ip_addresses
XML Binding class name: Number_Of_IP_Addresses
Dictionary key name: number_of_ip_addresses
routes
XML Binding class name: Routes
Dictionary key name: routes
class cybox.objects.network_subnet_object.Routes(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.network_subnet_object.RoutesType
route
(List of values permitted)
XML Binding class name: Route
Dictionary key name: route

Version: 2.1.0.13

cybox.objects.pdf_file_object module

class cybox.objects.pdf_file_object.PDFDocumentInformationDictionary[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.pdf_file_object.PDFDocumentInformationDictionaryType
author
XML Binding class name: Author
Dictionary key name: author
creationdate
XML Binding class name: CreationDate
Dictionary key name: creationdate
creator
XML Binding class name: Creator
Dictionary key name: creator
keywords
XML Binding class name: Keywords
Dictionary key name: keywords
moddate
XML Binding class name: ModDate
Dictionary key name: moddate
producer
XML Binding class name: Producer
Dictionary key name: producer
subject
XML Binding class name: Subject
Dictionary key name: subject
title
XML Binding class name: Title
Dictionary key name: title
trapped
XML Binding class name: Trapped
Dictionary key name: trapped
class cybox.objects.pdf_file_object.PDFFile[source]

Bases: cybox.objects.file_object.File

XML binding class: cybox.bindings.pdf_file_object.PDFFileObjectType
metadata
XML Binding class name: Metadata
Dictionary key name: metadata
version
XML Binding class name: Version
Dictionary key name: version
class cybox.objects.pdf_file_object.PDFFileMetadata[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.pdf_file_object.PDFFileMetadataType
document_information_dictionary
XML Binding class name: Document_Information_Dictionary
Dictionary key name: document_information_dictionary
encrypted
XML Binding class name: encrypted
Dictionary key name: encrypted
keyword_counts
XML Binding class name: Keyword_Counts
Dictionary key name: keyword_counts
number_of_cross_reference_tables
XML Binding class name: Number_Of_Cross_Reference_Tables
Dictionary key name: number_of_cross_reference_tables
number_of_indirect_objects
XML Binding class name: Number_Of_Indirect_Objects
Dictionary key name: number_of_indirect_objects
number_of_trailers
XML Binding class name: Number_Of_Trailers
Dictionary key name: number_of_trailers
optimized
XML Binding class name: optimized
Dictionary key name: optimized
class cybox.objects.pdf_file_object.PDFKeywordCount[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.pdf_file_object.PDFKeywordCountType
non_obfuscated_count
XML Binding class name: Non_Obfuscated_Count
Dictionary key name: non_obfuscated_count
obfuscated_count
XML Binding class name: Obfuscated_Count
Dictionary key name: obfuscated_count
class cybox.objects.pdf_file_object.PDFKeywordCounts[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.pdf_file_object.PDFKeywordCountsType
aa_count
XML Binding class name: AA_Count
Dictionary key name: aa_count
ascii85decode_count
XML Binding class name: ASCII85Decode_Count
Dictionary key name: ascii85decode_count
asciihexdecode_count
XML Binding class name: ASCIIHexDecode_Count
Dictionary key name: asciihexdecode_count
ccittfaxdecode_count
XML Binding class name: CCITTFaxDecode_Count
Dictionary key name: ccittfaxdecode_count
dctdecode_count
XML Binding class name: DCTDecode_Count
Dictionary key name: dctdecode_count
encrypt_count
XML Binding class name: Encrypt_Count
Dictionary key name: encrypt_count
flatedecode_count
XML Binding class name: FlateDecode_Count
Dictionary key name: flatedecode_count
javascript_count
XML Binding class name: JavaScript_Count
Dictionary key name: javascript_count
jbig2decode_count
XML Binding class name: JBIG2Decode_Count
Dictionary key name: jbig2decode_count
js_count
XML Binding class name: JS_Count
Dictionary key name: js_count
launch_count
XML Binding class name: Launch_Count
Dictionary key name: launch_count
lzwdecode_count
XML Binding class name: LZWDecode_Count
Dictionary key name: lzwdecode_count
objstm_count
XML Binding class name: ObjStm_Count
Dictionary key name: objstm_count
openaction_count
XML Binding class name: OpenAction_Count
Dictionary key name: openaction_count
page_count
XML Binding class name: Page_Count
Dictionary key name: page_count
richmedia_count
XML Binding class name: RichMedia_Count
Dictionary key name: richmedia_count
runlengthdecode_count
XML Binding class name: RunLengthDecode_Count
Dictionary key name: runlengthdecode_count
xfa_count
XML Binding class name: XFA_Count
Dictionary key name: xfa_count

Version: 2.1.0.13

cybox.objects.pipe_object module

class cybox.objects.pipe_object.Pipe[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.pipe_object.PipeObjectType
name
XML Binding class name: Name
Dictionary key name: name
named
XML Binding class name: named
Dictionary key name: named

Version: 2.1.0.13

cybox.objects.port_object module

class cybox.objects.port_object.Port[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.port_object.PortObjectType
layer4_protocol
XML Binding class name: Layer4_Protocol
Dictionary key name: layer4_protocol
port_value
XML Binding class name: Port_Value
Dictionary key name: port_value

Version: 2.1.0.13

cybox.objects.process_object module

class cybox.objects.process_object.ArgumentList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.process_object.ArgumentListType
argument
(List of values permitted)
XML Binding class name: Argument
Dictionary key name: argument
class cybox.objects.process_object.ChildPIDList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.process_object.ChildPIDListType
child_pid
(List of values permitted)
XML Binding class name: Child_PID
Dictionary key name: child_pid
class cybox.objects.process_object.ImageInfo[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.process_object.ImageInfoType
command_line
XML Binding class name: Command_Line
Dictionary key name: command_line
current_directory
XML Binding class name: Current_Directory
Dictionary key name: current_directory
file_name
XML Binding class name: File_Name
Dictionary key name: file_name
path
XML Binding class name: Path
Dictionary key name: path
class cybox.objects.process_object.NetworkConnectionList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.process_object.NetworkConnectionListType
network_connection
(List of values permitted)
XML Binding class name: Network_Connection
Dictionary key name: network_connection
class cybox.objects.process_object.PortList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.process_object.PortListType
port
(List of values permitted)
XML Binding class name: Port
Dictionary key name: port
class cybox.objects.process_object.Process[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.process_object.ProcessObjectType
argument_list
XML Binding class name: Argument_List
Dictionary key name: argument_list
child_pid_list
XML Binding class name: Child_PID_List
Dictionary key name: child_pid_list
creation_time
XML Binding class name: Creation_Time
Dictionary key name: creation_time
environment_variable_list
XML Binding class name: Environment_Variable_List
Dictionary key name: environment_variable_list
extracted_features
XML Binding class name: Extracted_Features
Dictionary key name: extracted_features
image_info
XML Binding class name: Image_Info
Dictionary key name: image_info
is_hidden
XML Binding class name: is_hidden
Dictionary key name: is_hidden
kernel_time
XML Binding class name: Kernel_Time
Dictionary key name: kernel_time
name
XML Binding class name: Name
Dictionary key name: name
network_connection_list
XML Binding class name: Network_Connection_List
Dictionary key name: network_connection_list
parent_pid
XML Binding class name: Parent_PID
Dictionary key name: parent_pid
pid
XML Binding class name: PID
Dictionary key name: pid
port_list
XML Binding class name: Port_List
Dictionary key name: port_list
start_time
XML Binding class name: Start_Time
Dictionary key name: start_time
user_time
XML Binding class name: User_Time
Dictionary key name: user_time
username
XML Binding class name: Username
Dictionary key name: username

Version: 2.1.0.13

cybox.objects.product_object module

class cybox.objects.product_object.Product[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.product_object.ProductObjectType
device_details
XML Binding class name: Device_Details
Dictionary key name: device_details
edition
XML Binding class name: Edition
Dictionary key name: edition
language
XML Binding class name: Language
Dictionary key name: language
product
XML Binding class name: Product
Dictionary key name: product
update
XML Binding class name: Update
Dictionary key name: update
vendor
XML Binding class name: Vendor
Dictionary key name: vendor
version
XML Binding class name: Version
Dictionary key name: version

Version: 2.1.0.13

cybox.objects.semaphore_object module

class cybox.objects.semaphore_object.Semaphore[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.semaphore_object.SemaphoreObjectType
current_count
XML Binding class name: Current_Count
Dictionary key name: current_count
maximum_count
XML Binding class name: Maximum_Count
Dictionary key name: maximum_count
name
XML Binding class name: Name
Dictionary key name: name
named
XML Binding class name: named
Dictionary key name: named

Version: 2.1.0.13

cybox.objects.sms_message_object module

class cybox.objects.sms_message_object.SMSMessage[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.sms_message_object.SMSMessageObjectType
bits_per_character
XML Binding class name: Bits_Per_Character
Dictionary key name: bits_per_character
body
XML Binding class name: Body
Dictionary key name: body
encoding
XML Binding class name: Encoding
Dictionary key name: encoding
is_premium
XML Binding class name: is_premium
Dictionary key name: is_premium
length
XML Binding class name: Length
Dictionary key name: length
recipient_phone_number
XML Binding class name: Recipient_Phone_Number
Dictionary key name: recipient_phone_number
sender_phone_number
XML Binding class name: Sender_Phone_Number
Dictionary key name: sender_phone_number
sent_datetime
XML Binding class name: Sent_DateTime
Dictionary key name: sent_datetime
size
XML Binding class name: Size
Dictionary key name: size
user_data_header
XML Binding class name: User_Data_Header
Dictionary key name: user_data_header

Version: 2.1.0.13

cybox.objects.socket_address_object module

class cybox.objects.socket_address_object.SocketAddress[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.socket_address_object.SocketAddressObjectType
hostname
XML Binding class name: Hostname
Dictionary key name: hostname
ip_address
XML Binding class name: IP_Address
Dictionary key name: ip_address
port
XML Binding class name: Port
Dictionary key name: port

Version: 2.1.0.13

cybox.objects.system_object module

class cybox.objects.system_object.BIOSInfo[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.system_object.BIOSInfoType
bios_date
XML Binding class name: BIOS_Date
Dictionary key name: bios_date
bios_manufacturer
XML Binding class name: BIOS_Manufacturer
Dictionary key name: bios_manufacturer
bios_release_date
XML Binding class name: BIOS_Release_Date
Dictionary key name: bios_release_date
bios_serial_number
XML Binding class name: BIOS_Serial_Number
Dictionary key name: bios_serial_number
bios_version
XML Binding class name: BIOS_Version
Dictionary key name: bios_version
class cybox.objects.system_object.DHCPServerList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.system_object.DHCPServerListType
dhcp_server_address
(List of values permitted)
XML Binding class name: DHCP_Server_Address
Dictionary key name: dhcp_server_address
class cybox.objects.system_object.IPGatewayList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.system_object.IPGatewayListType
ip_gateway_address
(List of values permitted)
XML Binding class name: IP_Gateway_Address
Dictionary key name: ip_gateway_address
class cybox.objects.system_object.IPInfo[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.system_object.IPInfoType
ip_address
XML Binding class name: IP_Address
Dictionary key name: ip_address
subnet_mask
XML Binding class name: Subnet_Mask
Dictionary key name: subnet_mask
class cybox.objects.system_object.IPInfoList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.system_object.IPInfoListType
ip_info_list
(List of values permitted)
XML Binding class name: IP_Info_List
Dictionary key name: ip_info_list
class cybox.objects.system_object.NetworkInterface[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.system_object.NetworkInterfaceType
adapter
XML Binding class name: Adapter
Dictionary key name: adapter
description
XML Binding class name: Description
Dictionary key name: description
dhcp_lease_expires
XML Binding class name: DHCP_Lease_Expires
Dictionary key name: dhcp_lease_expires
dhcp_lease_obtained
XML Binding class name: DHCP_Lease_Obtained
Dictionary key name: dhcp_lease_obtained
dhcp_server_list
XML Binding class name: DHCP_Server_List
Dictionary key name: dhcp_server_list
ip_gateway_list
XML Binding class name: IP_Gateway_List
Dictionary key name: ip_gateway_list
ip_list
XML Binding class name: IP_List
Dictionary key name: ip_list
mac
XML Binding class name: MAC
Dictionary key name: mac
class cybox.objects.system_object.NetworkInterfaceList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.system_object.NetworkInterfaceListType
network_interface
(List of values permitted)
XML Binding class name: Network_Interface
Dictionary key name: network_interface
class cybox.objects.system_object.OS[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.system_object.OSType
bitness
XML Binding class name: Bitness
Dictionary key name: bitness
build_number
XML Binding class name: Build_Number
Dictionary key name: build_number
environment_variable_list
XML Binding class name: Environment_Variable_List
Dictionary key name: environment_variable_list
install_date
XML Binding class name: Install_Date
Dictionary key name: install_date
patch_level
XML Binding class name: Patch_Level
Dictionary key name: patch_level
platform
XML Binding class name: Platform
Dictionary key name: platform
class cybox.objects.system_object.System[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.system_object.SystemObjectType
available_physical_memory
XML Binding class name: Available_Physical_Memory
Dictionary key name: available_physical_memory
bios_info
XML Binding class name: BIOS_Info
Dictionary key name: bios_info
date
XML Binding class name: Date
Dictionary key name: date
hostname
XML Binding class name: Hostname
Dictionary key name: hostname
local_time
XML Binding class name: Local_Time
Dictionary key name: local_time
network_interface_list
XML Binding class name: Network_Interface_List
Dictionary key name: network_interface_list
os
XML Binding class name: OS
Dictionary key name: os
processor
XML Binding class name: Processor
Dictionary key name: processor
system_time
XML Binding class name: System_Time
Dictionary key name: system_time
timezone_dst
XML Binding class name: Timezone_DST
Dictionary key name: timezone_dst
timezone_standard
XML Binding class name: Timezone_Standard
Dictionary key name: timezone_standard
total_physical_memory
XML Binding class name: Total_Physical_Memory
Dictionary key name: total_physical_memory
uptime
XML Binding class name: Uptime
Dictionary key name: uptime
username
XML Binding class name: Username
Dictionary key name: username

Version: 2.1.0.13

cybox.objects.uri_object module

class cybox.objects.uri_object.URI(value=None, type_=None)[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.uri_object.URIObjectType
type_
XML Binding class name: type_
Dictionary key name: type
value
XML Binding class name: Value
Dictionary key name: value

Version: 2.1.0.13

cybox.objects.user_account_object module

class cybox.objects.user_account_object.Group[source]

Bases: mixbox.entities.Entity

An abstract class for account groups.

XML binding class: <undefined>
class cybox.objects.user_account_object.GroupList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.user_account_object.GroupListType
group
(List of values permitted)
XML Binding class name: Group
Dictionary key name: group
class cybox.objects.user_account_object.Privilege[source]

Bases: mixbox.entities.Entity

An abstract class for account privileges.

XML binding class: <undefined>
class cybox.objects.user_account_object.PrivilegeList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.user_account_object.PrivilegeListType
privilege
(List of values permitted)
XML Binding class name: Privilege
Dictionary key name: privilege
class cybox.objects.user_account_object.UserAccount[source]

Bases: cybox.objects.account_object.Account

XML binding class: cybox.bindings.user_account_object.UserAccountObjectType
full_name
XML Binding class name: Full_Name
Dictionary key name: full_name
group_list
XML Binding class name: Group_List
Dictionary key name: group_list
home_directory
XML Binding class name: Home_Directory
Dictionary key name: home_directory
last_login
XML Binding class name: Last_Login
Dictionary key name: last_login
password_required
XML Binding class name: password_required
Dictionary key name: password_required
privilege_list
XML Binding class name: Privilege_List
Dictionary key name: privilege_list
script_path
XML Binding class name: Script_Path
Dictionary key name: script_path
user_password_age
XML Binding class name: User_Password_Age
Dictionary key name: user_password_age
username
XML Binding class name: Username
Dictionary key name: username

Version: 2.1.0.13

cybox.objects.volume_object module

class cybox.objects.volume_object.FileSystemFlagList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.volume_object.FileSystemFlagListType
file_system_flag
(List of values permitted)
XML Binding class name: File_System_Flag
Dictionary key name: file_system_flag
class cybox.objects.volume_object.Volume[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.volume_object.VolumeObjectType
actual_available_allocation_units
XML Binding class name: Actual_Available_Allocation_Units
Dictionary key name: actual_available_allocation_units
bytes_per_sector
XML Binding class name: Bytes_Per_Sector
Dictionary key name: bytes_per_sector
creation_time
XML Binding class name: Creation_Time
Dictionary key name: creation_time
device_path
XML Binding class name: Device_Path
Dictionary key name: device_path
file_system_flag_list
XML Binding class name: File_System_Flag_List
Dictionary key name: file_system_flag_list
file_system_type
XML Binding class name: File_System_Type
Dictionary key name: file_system_type
is_mounted
XML Binding class name: is_mounted
Dictionary key name: is_mounted
name
XML Binding class name: Name
Dictionary key name: name
sectors_per_allocation_unit
XML Binding class name: Sectors_Per_Allocation_Unit
Dictionary key name: sectors_per_allocation_unit
serial_number
XML Binding class name: Serial_Number
Dictionary key name: serial_number
total_allocation_units
XML Binding class name: Total_Allocation_Units
Dictionary key name: total_allocation_units

Version: 2.1.0.13

cybox.objects.whois_object module

class cybox.objects.whois_object.WhoisContact[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.whois_object.WhoisContactType
address
XML Binding class name: Address
Dictionary key name: address
contact_id
XML Binding class name: Contact_ID
Dictionary key name: contact_id
contact_type
XML Binding class name: contact_type
Dictionary key name: contact_type
email_address
XML Binding class name: Email_Address
Dictionary key name: email_address
fax_number
XML Binding class name: Fax_Number
Dictionary key name: fax_number
name
XML Binding class name: Name
Dictionary key name: name
organization
XML Binding class name: Organization
Dictionary key name: organization
phone_number
XML Binding class name: Phone_Number
Dictionary key name: phone_number
class cybox.objects.whois_object.WhoisContacts(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.whois_object.WhoisContactsType
contact
(List of values permitted)
XML Binding class name: Contact
Dictionary key name: contact
class cybox.objects.whois_object.WhoisEntry[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.whois_object.WhoisObjectType
contact_info
XML Binding class name: Contact_Info
Dictionary key name: contact_info
creation_date
XML Binding class name: Creation_Date
Dictionary key name: creation_date
dnssec
XML Binding class name: DNSSEC
Dictionary key name: dnssec
domain_id
XML Binding class name: Domain_ID
Dictionary key name: domain_id
domain_name
XML Binding class name: Domain_Name
Dictionary key name: domain_name
expiration_date
XML Binding class name: Expiration_Date
Dictionary key name: expiration_date
ip_address
XML Binding class name: IP_Address
Dictionary key name: ip_address
lookup_date
XML Binding class name: Lookup_Date
Dictionary key name: lookup_date
nameservers
XML Binding class name: Nameservers
Dictionary key name: nameservers
regional_internet_registry
XML Binding class name: Regional_Internet_Registry
Dictionary key name: regional_internet_registry
registrants
XML Binding class name: Registrants
Dictionary key name: registrants
registrar_info
XML Binding class name: Registrar_Info
Dictionary key name: registrar_info
remarks
XML Binding class name: Remarks
Dictionary key name: remarks
server_name
XML Binding class name: Server_Name
Dictionary key name: server_name
sponsoring_registrar
XML Binding class name: Sponsoring_Registrar
Dictionary key name: sponsoring_registrar
status
XML Binding class name: Status
Dictionary key name: status
updated_date
XML Binding class name: Updated_Date
Dictionary key name: updated_date
class cybox.objects.whois_object.WhoisNameservers(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.whois_object.WhoisNameserversType
nameserver
(List of values permitted)
XML Binding class name: Nameserver
Dictionary key name: nameserver
class cybox.objects.whois_object.WhoisRegistrant[source]

Bases: cybox.objects.whois_object.WhoisContact

XML binding class: cybox.bindings.whois_object.WhoisRegistrantInfoType
registrant_id
XML Binding class name: Registrant_ID
Dictionary key name: registrant_id
class cybox.objects.whois_object.WhoisRegistrants(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.whois_object.WhoisRegistrantsType
registrant
(List of values permitted)
XML Binding class name: Registrant
Dictionary key name: registrant
class cybox.objects.whois_object.WhoisRegistrar[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.whois_object.WhoisRegistrarInfoType
address
XML Binding class name: Address
Dictionary key name: address
contacts
XML Binding class name: Contacts
Dictionary key name: contacts
email_address
XML Binding class name: Email_Address
Dictionary key name: email_address
name
XML Binding class name: Name
Dictionary key name: name
phone_number
XML Binding class name: Phone_Number
Dictionary key name: phone_number
referral_url
XML Binding class name: Referral_URL
Dictionary key name: referral_url
registrar_guid
XML Binding class name: Registrar_GUID
Dictionary key name: registrar_guid
registrar_id
XML Binding class name: Registrar_ID
Dictionary key name: registrar_id
whois_server
XML Binding class name: Whois_Server
Dictionary key name: whois_server
class cybox.objects.whois_object.WhoisStatus(value=None)[source]

Bases: cybox.common.properties.BaseProperty

XML binding class: cybox.bindings.whois_object.WhoisStatusType
class cybox.objects.whois_object.WhoisStatuses(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.whois_object.WhoisStatusesType
status
(List of values permitted)
XML Binding class name: Status
Dictionary key name: status

Version: 2.1.0.13

cybox.objects.win_computer_account_object module

class cybox.objects.win_computer_account_object.FullyQualifiedName[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_computer_account_object.FullyQualifiedNameType
full_name
XML Binding class name: Full_Name
Dictionary key name: full_name
netbeui_name
XML Binding class name: NetBEUI_Name
Dictionary key name: netbeui_name
class cybox.objects.win_computer_account_object.Kerberos[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_computer_account_object.KerberosType
delegation
XML Binding class name: Delegation
Dictionary key name: delegation
ticket
XML Binding class name: Ticket
Dictionary key name: ticket
class cybox.objects.win_computer_account_object.KerberosDelegation[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_computer_account_object.KerberosDelegationType
bitmask
XML Binding class name: Bitmask
Dictionary key name: bitmask
service
XML Binding class name: Service
Dictionary key name: service
class cybox.objects.win_computer_account_object.KerberosService[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_computer_account_object.KerberosServiceType
computer
XML Binding class name: Computer
Dictionary key name: computer
name
XML Binding class name: Name
Dictionary key name: name
port
XML Binding class name: Port
Dictionary key name: port
user
XML Binding class name: User
Dictionary key name: user
class cybox.objects.win_computer_account_object.WinComputerAccount[source]

Bases: cybox.objects.account_object.Account

XML binding class: cybox.bindings.win_computer_account_object.WindowsComputerAccountObjectType
fully_qualified_name
XML Binding class name: Fully_Qualified_Name
Dictionary key name: fully_qualified_name
kerberos
XML Binding class name: Kerberos
Dictionary key name: kerberos
security_id
XML Binding class name: Security_ID
Dictionary key name: security_id
type_
XML Binding class name: Type
Dictionary key name: type

Version: 2.1.0.13

cybox.objects.win_critical_section_object module

class cybox.objects.win_critical_section_object.WinCriticalSection[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.win_critical_section_object.WindowsCriticalSectionObjectType
address
XML Binding class name: Address
Dictionary key name: address
spin_count
XML Binding class name: Spin_Count
Dictionary key name: spin_count

Version: 2.1.0.13

cybox.objects.win_driver_object module

class cybox.objects.win_driver_object.DeviceObjectList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.win_driver_object.DeviceObjectListType
device_object_struct
(List of values permitted)
XML Binding class name: Device_Object_Struct
Dictionary key name: device_object_struct
class cybox.objects.win_driver_object.DeviceObjectStruct[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_driver_object.DeviceObjectStructType
attached_device_name
XML Binding class name: Attached_Device_Name
Dictionary key name: attached_device_name
attached_device_object
XML Binding class name: Attached_Device_Object
Dictionary key name: attached_device_object
attached_to_device_name
XML Binding class name: Attached_To_Device_Name
Dictionary key name: attached_to_device_name
attached_to_device_object
XML Binding class name: Attached_To_Device_Object
Dictionary key name: attached_to_device_object
attached_to_driver_name
XML Binding class name: Attached_To_Driver_Name
Dictionary key name: attached_to_driver_name
attached_to_driver_object
XML Binding class name: Attached_To_Driver_Object
Dictionary key name: attached_to_driver_object
device_name
XML Binding class name: Device_Name
Dictionary key name: device_name
device_object
XML Binding class name: Device_Object
Dictionary key name: device_object
class cybox.objects.win_driver_object.WinDriver[source]

Bases: cybox.objects.win_executable_file_object.WinExecutableFile

XML binding class: cybox.bindings.win_driver_object.WindowsDriverObjectType
device_object_list
XML Binding class name: Device_Object_List
Dictionary key name: device_object_list
driver_init
XML Binding class name: Driver_Init
Dictionary key name: driver_init
driver_name
XML Binding class name: Driver_Name
Dictionary key name: driver_name
driver_object_address
XML Binding class name: Driver_Object_Address
Dictionary key name: driver_object_address
driver_start_io
XML Binding class name: Driver_Start_IO
Dictionary key name: driver_start_io
driver_unload
XML Binding class name: Driver_Unload
Dictionary key name: driver_unload
image_base
XML Binding class name: Image_Base
Dictionary key name: image_base
image_size
XML Binding class name: Image_Size
Dictionary key name: image_size
irp_mj_cleanup
XML Binding class name: IRP_MJ_CLEANUP
Dictionary key name: irp_mj_cleanup
irp_mj_close
XML Binding class name: IRP_MJ_CLOSE
Dictionary key name: irp_mj_close
irp_mj_create
XML Binding class name: IRP_MJ_CREATE
Dictionary key name: irp_mj_create
irp_mj_create_mailslot
XML Binding class name: IRP_MJ_CREATE_MAILSLOT
Dictionary key name: irp_mj_create_mailslot
irp_mj_create_named_pipe
XML Binding class name: IRP_MJ_CREATE_NAMED_PIPE
Dictionary key name: irp_mj_create_named_pipe
irp_mj_device_change
XML Binding class name: IRP_MJ_DEVICE_CHANGE
Dictionary key name: irp_mj_device_change
irp_mj_device_control
XML Binding class name: IRP_MJ_DEVICE_CONTROL
Dictionary key name: irp_mj_device_control
irp_mj_directory_control
XML Binding class name: IRP_MJ_DIRECTORY_CONTROL
Dictionary key name: irp_mj_directory_control
irp_mj_file_system_control
XML Binding class name: IRP_MJ_FILE_SYSTEM_CONTROL
Dictionary key name: irp_mj_file_system_control
irp_mj_flush_buffers
XML Binding class name: IRP_MJ_FLUSH_BUFFERS
Dictionary key name: irp_mj_flush_buffers
irp_mj_internal_device_control
XML Binding class name: IRP_MJ_INTERNAL_DEVICE_CONTROL
Dictionary key name: irp_mj_internal_device_control
irp_mj_lock_control
XML Binding class name: IRP_MJ_LOCK_CONTROL
Dictionary key name: irp_mj_lock_control
irp_mj_pnp
XML Binding class name: IRP_MJ_PNP
Dictionary key name: irp_mj_pnp
irp_mj_power
XML Binding class name: IRP_MJ_POWER
Dictionary key name: irp_mj_power
irp_mj_query_ea
XML Binding class name: IRP_MJ_QUERY_EA
Dictionary key name: irp_mj_query_ea
irp_mj_query_information
XML Binding class name: IRP_MJ_QUERY_INFORMATION
Dictionary key name: irp_mj_query_information
irp_mj_query_quota
XML Binding class name: IRP_MJ_QUERY_QUOTA
Dictionary key name: irp_mj_query_quota
irp_mj_query_security
XML Binding class name: IRP_MJ_QUERY_SECURITY
Dictionary key name: irp_mj_query_security
irp_mj_query_volume_information
XML Binding class name: IRP_MJ_QUERY_VOLUME_INFORMATION
Dictionary key name: irp_mj_query_volume_information
irp_mj_read
XML Binding class name: IRP_MJ_READ
Dictionary key name: irp_mj_read
irp_mj_set_ea
XML Binding class name: IRP_MJ_SET_EA
Dictionary key name: irp_mj_set_ea
irp_mj_set_information
XML Binding class name: IRP_MJ_SET_INFORMATION
Dictionary key name: irp_mj_set_information
irp_mj_set_quota
XML Binding class name: IRP_MJ_SET_QUOTA
Dictionary key name: irp_mj_set_quota
irp_mj_set_security
XML Binding class name: IRP_MJ_SET_SECURITY
Dictionary key name: irp_mj_set_security
irp_mj_set_volume_information
XML Binding class name: IRP_MJ_SET_VOLUME_INFORMATION
Dictionary key name: irp_mj_set_volume_information
irp_mj_shutdown
XML Binding class name: IRP_MJ_SHUTDOWN
Dictionary key name: irp_mj_shutdown
irp_mj_system_control
XML Binding class name: IRP_MJ_SYSTEM_CONTROL
Dictionary key name: irp_mj_system_control
irp_mj_write
XML Binding class name: IRP_MJ_WRITE
Dictionary key name: irp_mj_write

Version: 2.1.0.13

cybox.objects.win_event_log_object module

class cybox.objects.win_event_log_object.UnformattedMessageList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.win_event_log_object.UnformattedMessageListType
unformatted_message
(List of values permitted)
XML Binding class name: Unformatted_Message
Dictionary key name: unformatted_message
class cybox.objects.win_event_log_object.WinEventLog[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.win_event_log_object.WindowsEventLogObjectType
blob
XML Binding class name: Blob
Dictionary key name: blob
category
XML Binding class name: Category
Dictionary key name: category
category_num
XML Binding class name: Category_Num
Dictionary key name: category_num
correlation_activity_id
XML Binding class name: Correlation_Activity_ID
Dictionary key name: correlation_activity_id
XML Binding class name: Correlation_Related_Activity_ID
Dictionary key name: correlation_related_activity_id
eid
XML Binding class name: EID
Dictionary key name: eid
execution_process_id
XML Binding class name: Execution_Process_ID
Dictionary key name: execution_process_id
execution_thread_id
XML Binding class name: Execution_Thread_ID
Dictionary key name: execution_thread_id
generation_time
XML Binding class name: Generation_Time
Dictionary key name: generation_time
index
XML Binding class name: Index
Dictionary key name: index
log
XML Binding class name: Log
Dictionary key name: log
machine
XML Binding class name: Machine
Dictionary key name: machine
message
XML Binding class name: Message
Dictionary key name: message
reserved
XML Binding class name: Reserved
Dictionary key name: reserved
source
XML Binding class name: Source
Dictionary key name: source
type_
XML Binding class name: Type
Dictionary key name: type
unformatted_message_list
XML Binding class name: Unformatted_Message_List
Dictionary key name: unformatted_message_list
user
XML Binding class name: User
Dictionary key name: user
write_time
XML Binding class name: Write_Time
Dictionary key name: write_time

Version: 2.1.0.13

cybox.objects.win_event_object module

class cybox.objects.win_event_object.WinEvent[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.win_event_object.WindowsEventObjectType
handle
XML Binding class name: Handle
Dictionary key name: handle
name
XML Binding class name: Name
Dictionary key name: name
type_
XML Binding class name: Type
Dictionary key name: type

Version: 2.1.0.13

cybox.objects.win_executable_file_object module

class cybox.objects.win_executable_file_object.DOSHeader[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_executable_file_object.DOSHeaderType
e_cblp
XML Binding class name: e_cblp
Dictionary key name: e_cblp
e_cp
XML Binding class name: e_cp
Dictionary key name: e_cp
e_cparhdr
XML Binding class name: e_cparhdr
Dictionary key name: e_cparhdr
e_crlc
XML Binding class name: e_crlc
Dictionary key name: e_crlc
e_cs
XML Binding class name: e_cs
Dictionary key name: e_cs
e_csum
XML Binding class name: e_csum
Dictionary key name: e_csum
e_ip
XML Binding class name: e_ip
Dictionary key name: e_ip
e_lfanew
XML Binding class name: e_lfanew
Dictionary key name: e_lfanew
e_lfarlc
XML Binding class name: e_lfarlc
Dictionary key name: e_lfarlc
e_magic
XML Binding class name: e_magic
Dictionary key name: e_magic
e_maxalloc
XML Binding class name: e_maxalloc
Dictionary key name: e_maxalloc
e_minalloc
XML Binding class name: e_minalloc
Dictionary key name: e_minalloc
e_oemid
XML Binding class name: e_oemid
Dictionary key name: e_oemid
e_oeminfo
XML Binding class name: e_oeminfo
Dictionary key name: e_oeminfo
e_ovro
XML Binding class name: e_ovro
Dictionary key name: e_ovro
e_sp
XML Binding class name: e_sp
Dictionary key name: e_sp
e_ss
XML Binding class name: e_ss
Dictionary key name: e_ss
hashes
XML Binding class name: Hashes
Dictionary key name: hashes
reserved2
XML Binding class name: reserved2
Dictionary key name: reserved2
class cybox.objects.win_executable_file_object.DataDirectory[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_executable_file_object.DataDirectoryType
architecture
XML Binding class name: Architecture
Dictionary key name: architecture
base_relocation_table
XML Binding class name: Base_Relocation_Table
Dictionary key name: base_relocation_table
bound_import
XML Binding class name: Bound_Import
Dictionary key name: bound_import
certificate_table
XML Binding class name: Certificate_Table
Dictionary key name: certificate_table
clr_runtime_header
XML Binding class name: CLR_Runtime_Header
Dictionary key name: clr_runtime_header
debug
XML Binding class name: Debug
Dictionary key name: debug
delay_import_descriptor
XML Binding class name: Delay_Import_Descriptor
Dictionary key name: delay_import_descriptor
exception_table
XML Binding class name: Exception_Table
Dictionary key name: exception_table
export_table
XML Binding class name: Export_Table
Dictionary key name: export_table
global_ptr
XML Binding class name: Global_Ptr
Dictionary key name: global_ptr
import_address_table
XML Binding class name: Import_Address_Table
Dictionary key name: import_address_table
import_table
XML Binding class name: Import_Table
Dictionary key name: import_table
load_config_table
XML Binding class name: Load_Config_Table
Dictionary key name: load_config_table
reserved
XML Binding class name: Reserved
Dictionary key name: reserved
resource_table
XML Binding class name: Resource_Table
Dictionary key name: resource_table
tls_table
XML Binding class name: Tls_Table
Dictionary key name: tls_table
class cybox.objects.win_executable_file_object.Entropy[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_executable_file_object.EntropyType
max
XML Binding class name: Max
Dictionary key name: max
min
XML Binding class name: Min
Dictionary key name: min
value
XML Binding class name: Value
Dictionary key name: value
class cybox.objects.win_executable_file_object.PEBuildInformation[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_executable_file_object.PEBuildInformationType
compiler_name
XML Binding class name: Compiler_Name
Dictionary key name: compiler_name
compiler_version
XML Binding class name: Compiler_Version
Dictionary key name: compiler_version
linker_name
XML Binding class name: Linker_Name
Dictionary key name: linker_name
linker_version
XML Binding class name: Linker_Version
Dictionary key name: linker_version
class cybox.objects.win_executable_file_object.PEChecksum[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_executable_file_object.PEChecksumType
pe_computed_api
XML Binding class name: PE_Computed_API
Dictionary key name: pe_computed_api
pe_file_api
XML Binding class name: PE_File_API
Dictionary key name: pe_file_api
pe_file_raw
XML Binding class name: PE_File_Raw
Dictionary key name: pe_file_raw
class cybox.objects.win_executable_file_object.PEDataDirectoryStruct[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_executable_file_object.PEDataDirectoryStructType
size
XML Binding class name: Size
Dictionary key name: size
virtual_address
XML Binding class name: Virtual_Address
Dictionary key name: virtual_address
class cybox.objects.win_executable_file_object.PEExportedFunction[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_executable_file_object.PEExportedFunctionType
entry_point
XML Binding class name: Entry_Point
Dictionary key name: entry_point
function_name
XML Binding class name: Function_Name
Dictionary key name: function_name
ordinal
XML Binding class name: Ordinal
Dictionary key name: ordinal
class cybox.objects.win_executable_file_object.PEExportedFunctions(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.win_executable_file_object.PEExportedFunctionsType
exported_function
(List of values permitted)
XML Binding class name: Exported_Function
Dictionary key name: exported_function
class cybox.objects.win_executable_file_object.PEExports[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_executable_file_object.PEExportsType
exported_functions
XML Binding class name: Exported_Functions
Dictionary key name: exported_functions
exports_time_stamp
XML Binding class name: Exports_Time_Stamp
Dictionary key name: exports_time_stamp
name
XML Binding class name: Name
Dictionary key name: name
number_of_addresses
XML Binding class name: Number_Of_Addresses
Dictionary key name: number_of_addresses
number_of_functions
XML Binding class name: Number_Of_Functions
Dictionary key name: number_of_functions
number_of_names
XML Binding class name: Number_Of_Names
Dictionary key name: number_of_names
class cybox.objects.win_executable_file_object.PEFileHeader[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_executable_file_object.PEFileHeaderType
characteristics
XML Binding class name: Characteristics
Dictionary key name: characteristics
hashes
XML Binding class name: Hashes
Dictionary key name: hashes
machine
XML Binding class name: Machine
Dictionary key name: machine
number_of_sections
XML Binding class name: Number_Of_Sections
Dictionary key name: number_of_sections
number_of_symbols
XML Binding class name: Number_Of_Symbols
Dictionary key name: number_of_symbols
pointer_to_symbol_table
XML Binding class name: Pointer_To_Symbol_Table
Dictionary key name: pointer_to_symbol_table
size_of_optional_header
XML Binding class name: Size_Of_Optional_Header
Dictionary key name: size_of_optional_header
time_date_stamp
XML Binding class name: Time_Date_Stamp
Dictionary key name: time_date_stamp
class cybox.objects.win_executable_file_object.PEHeaders[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_executable_file_object.PEHeadersType
dos_header
XML Binding class name: DOS_Header
Dictionary key name: dos_header
entropy
XML Binding class name: Entropy
Dictionary key name: entropy
file_header
XML Binding class name: File_Header
Dictionary key name: file_header
hashes
XML Binding class name: Hashes
Dictionary key name: hashes
optional_header
XML Binding class name: Optional_Header
Dictionary key name: optional_header
signature
XML Binding class name: Signature
Dictionary key name: signature
class cybox.objects.win_executable_file_object.PEImport[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_executable_file_object.PEImportType
delay_load
XML Binding class name: delay_load
Dictionary key name: delay_load
file_name
XML Binding class name: File_Name
Dictionary key name: file_name
imported_functions
XML Binding class name: Imported_Functions
Dictionary key name: imported_functions
initially_visible
XML Binding class name: initially_visible
Dictionary key name: initially_visible
virtual_address
XML Binding class name: Virtual_Address
Dictionary key name: virtual_address
class cybox.objects.win_executable_file_object.PEImportList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.win_executable_file_object.PEImportListType
import_
(List of values permitted)
XML Binding class name: Import
Dictionary key name: import
class cybox.objects.win_executable_file_object.PEImportedFunction[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_executable_file_object.PEImportedFunctionType
bound
XML Binding class name: Bound
Dictionary key name: bound
function_name
XML Binding class name: Function_Name
Dictionary key name: function_name
hint
XML Binding class name: Hint
Dictionary key name: hint
ordinal
XML Binding class name: Ordinal
Dictionary key name: ordinal
virtual_address
XML Binding class name: Virtual_Address
Dictionary key name: virtual_address
class cybox.objects.win_executable_file_object.PEImportedFunctions(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.win_executable_file_object.PEImportedFunctionsType
imported_function
(List of values permitted)
XML Binding class name: Imported_Function
Dictionary key name: imported_function
class cybox.objects.win_executable_file_object.PEOptionalHeader[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_executable_file_object.PEOptionalHeaderType
address_of_entry_point
XML Binding class name: Address_Of_Entry_Point
Dictionary key name: address_of_entry_point
base_of_code
XML Binding class name: Base_Of_Code
Dictionary key name: base_of_code
base_of_data
XML Binding class name: Base_Of_Data
Dictionary key name: base_of_data
checksum
XML Binding class name: Checksum
Dictionary key name: checksum
data_directory
XML Binding class name: Data_Directory
Dictionary key name: data_directory
dll_characteristics
XML Binding class name: DLL_Characteristics
Dictionary key name: dll_characteristics
file_alignment
XML Binding class name: File_Alignment
Dictionary key name: file_alignment
hashes
XML Binding class name: Hashes
Dictionary key name: hashes
image_base
XML Binding class name: Image_Base
Dictionary key name: image_base
loader_flags
XML Binding class name: Loader_Flags
Dictionary key name: loader_flags
magic
XML Binding class name: Magic
Dictionary key name: magic
major_image_version
XML Binding class name: Major_Image_Version
Dictionary key name: major_image_version
major_linker_version
XML Binding class name: Major_Linker_Version
Dictionary key name: major_linker_version
major_os_version
XML Binding class name: Major_OS_Version
Dictionary key name: major_os_version
major_subsystem_version
XML Binding class name: Major_Subsystem_Version
Dictionary key name: major_subsystem_version
minor_image_version
XML Binding class name: Minor_Image_Version
Dictionary key name: minor_image_version
minor_linker_version
XML Binding class name: Minor_Linker_Version
Dictionary key name: minor_linker_version
minor_os_version
XML Binding class name: Minor_OS_Version
Dictionary key name: minor_os_version
minor_subsystem_version
XML Binding class name: Minor_Subsystem_Version
Dictionary key name: minor_subsystem_version
number_of_rva_and_sizes
XML Binding class name: Number_Of_Rva_And_Sizes
Dictionary key name: number_of_rva_and_sizes
section_alignment
XML Binding class name: Section_Alignment
Dictionary key name: section_alignment
size_of_code
XML Binding class name: Size_Of_Code
Dictionary key name: size_of_code
size_of_headers
XML Binding class name: Size_Of_Headers
Dictionary key name: size_of_headers
size_of_heap_commit
XML Binding class name: Size_Of_Heap_Commit
Dictionary key name: size_of_heap_commit
size_of_heap_reserve
XML Binding class name: Size_Of_Heap_Reserve
Dictionary key name: size_of_heap_reserve
size_of_image
XML Binding class name: Size_Of_Image
Dictionary key name: size_of_image
size_of_initialized_data
XML Binding class name: Size_Of_Initialized_Data
Dictionary key name: size_of_initialized_data
size_of_stack_commit
XML Binding class name: Size_Of_Stack_Commit
Dictionary key name: size_of_stack_commit
size_of_stack_reserve
XML Binding class name: Size_Of_Stack_Reserve
Dictionary key name: size_of_stack_reserve
size_of_uninitialized_data
XML Binding class name: Size_Of_Uninitialized_Data
Dictionary key name: size_of_uninitialized_data
subsystem
XML Binding class name: Subsystem
Dictionary key name: subsystem
win32_version_value
XML Binding class name: Win32_Version_Value
Dictionary key name: win32_version_value
class cybox.objects.win_executable_file_object.PEResource[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_executable_file_object.PEResourceType
data
XML Binding class name: Data
Dictionary key name: data
hashes
XML Binding class name: Hashes
Dictionary key name: hashes
language
XML Binding class name: Language
Dictionary key name: language
name
XML Binding class name: Name
Dictionary key name: name
size
XML Binding class name: Size
Dictionary key name: size
sub_language
XML Binding class name: Sub_Language
Dictionary key name: sub_language
type_
XML Binding class name: Type
Dictionary key name: type
virtual_address
XML Binding class name: Virtual_Address
Dictionary key name: virtual_address
class cybox.objects.win_executable_file_object.PEResourceList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.win_executable_file_object.PEResourceListType
classmethod from_list(seq)[source]
resource
(List of values permitted)
XML Binding class name: Resource
Dictionary key name: resource
class cybox.objects.win_executable_file_object.PESection[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_executable_file_object.PESectionType
data_hashes
XML Binding class name: Data_Hashes
Dictionary key name: data_hashes
entropy
XML Binding class name: Entropy
Dictionary key name: entropy
header_hashes
XML Binding class name: Header_Hashes
Dictionary key name: header_hashes
section_header
XML Binding class name: Section_Header
Dictionary key name: section_header
class cybox.objects.win_executable_file_object.PESectionHeaderStruct[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_executable_file_object.PESectionHeaderStructType
characteristics
XML Binding class name: Characteristics
Dictionary key name: characteristics
name
XML Binding class name: Name
Dictionary key name: name
number_of_linenumbers
XML Binding class name: Number_Of_Linenumbers
Dictionary key name: number_of_linenumbers
number_of_relocations
XML Binding class name: Number_Of_Relocations
Dictionary key name: number_of_relocations
pointer_to_linenumbers
XML Binding class name: Pointer_To_Linenumbers
Dictionary key name: pointer_to_linenumbers
pointer_to_raw_data
XML Binding class name: Pointer_To_Raw_Data
Dictionary key name: pointer_to_raw_data
pointer_to_relocations
XML Binding class name: Pointer_To_Relocations
Dictionary key name: pointer_to_relocations
size_of_raw_data
XML Binding class name: Size_Of_Raw_Data
Dictionary key name: size_of_raw_data
virtual_address
XML Binding class name: Virtual_Address
Dictionary key name: virtual_address
virtual_size
XML Binding class name: Virtual_Size
Dictionary key name: virtual_size
class cybox.objects.win_executable_file_object.PESectionList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.win_executable_file_object.PESectionListType
section
(List of values permitted)
XML Binding class name: Section
Dictionary key name: section
class cybox.objects.win_executable_file_object.PEVersionInfoResource[source]

Bases: cybox.objects.win_executable_file_object.PEResource

XML binding class: cybox.bindings.win_executable_file_object.PEVersionInfoResourceType
comments
XML Binding class name: Comments
Dictionary key name: comments
companyname
XML Binding class name: CompanyName
Dictionary key name: companyname
filedescription
XML Binding class name: FileDescription
Dictionary key name: filedescription
fileversion
XML Binding class name: FileVersion
Dictionary key name: fileversion
internalname
XML Binding class name: InternalName
Dictionary key name: internalname
static keyword_test(pe_resource_dict)[source]
langid
XML Binding class name: LangID
Dictionary key name: langid
legalcopyright
XML Binding class name: LegalCopyright
Dictionary key name: legalcopyright
legaltrademarks
XML Binding class name: LegalTrademarks
Dictionary key name: legaltrademarks
originalfilename
XML Binding class name: OriginalFilename
Dictionary key name: originalfilename
privatebuild
XML Binding class name: PrivateBuild
Dictionary key name: privatebuild
productname
XML Binding class name: ProductName
Dictionary key name: productname
productversion
XML Binding class name: ProductVersion
Dictionary key name: productversion
specialbuild
XML Binding class name: SpecialBuild
Dictionary key name: specialbuild
class cybox.objects.win_executable_file_object.WinExecutableFile[source]

Bases: cybox.objects.win_file_object.WinFile

XML binding class: cybox.bindings.win_executable_file_object.WindowsExecutableFileObjectType
build_information
XML Binding class name: Build_Information
Dictionary key name: build_information
digital_signature
XML Binding class name: Digital_Signature
Dictionary key name: digital_signature
exports
XML Binding class name: Exports
Dictionary key name: exports
extraneous_bytes
XML Binding class name: Extraneous_Bytes
Dictionary key name: extraneous_bytes
headers
XML Binding class name: Headers
Dictionary key name: headers
imports
XML Binding class name: Imports
Dictionary key name: imports
pe_checksum
XML Binding class name: PE_Checksum
Dictionary key name: pe_checksum
resources
XML Binding class name: Resources
Dictionary key name: resources
sections
XML Binding class name: Sections
Dictionary key name: sections
type_
XML Binding class name: Type
Dictionary key name: type

Version: 2.1.0.13

cybox.objects.win_file_object module

class cybox.objects.win_file_object.Stream[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_file_object.StreamObjectType
hashes
(List of values permitted)
XML Binding class name: Hash
Dictionary key name: hashes
name
XML Binding class name: Name
Dictionary key name: name
size_in_bytes
XML Binding class name: Size_In_Bytes
Dictionary key name: size_in_bytes
class cybox.objects.win_file_object.StreamList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.win_file_object.StreamListType
stream
(List of values permitted)
XML Binding class name: Stream
Dictionary key name: stream
class cybox.objects.win_file_object.WinFile[source]

Bases: cybox.objects.file_object.File

XML binding class: cybox.bindings.win_file_object.WindowsFileObjectType
drive
XML Binding class name: Drive
Dictionary key name: drive
file_attributes_list
XML Binding class name: File_Attributes_List
Dictionary key name: file_attributes_list
filename_accessed_time
XML Binding class name: Filename_Accessed_Time
Dictionary key name: filename_accessed_time
filename_created_time
XML Binding class name: Filename_Created_Time
Dictionary key name: filename_created_time
filename_modified_time
XML Binding class name: Filename_Modified_Time
Dictionary key name: filename_modified_time
permissions
XML Binding class name: Permissions
Dictionary key name: permissions
security_id
XML Binding class name: Security_ID
Dictionary key name: security_id
security_type
XML Binding class name: Security_Type
Dictionary key name: security_type
stream_list
XML Binding class name: Stream_List
Dictionary key name: stream_list
class cybox.objects.win_file_object.WindowsFileAttribute(value=None)[source]

Bases: cybox.common.properties.String

XML binding class: cybox.bindings.win_file_object.WindowsFileAttributeType
class cybox.objects.win_file_object.WindowsFileAttributes(*args)[source]

Bases: cybox.objects.file_object.FileAttribute, mixbox.entities.EntityList

XML binding class: cybox.bindings.win_file_object.WindowsFileAttributesType
attribute
(List of values permitted)
XML Binding class name: Attribute
Dictionary key name: attribute
class cybox.objects.win_file_object.WindowsFilePermissions[source]

Bases: cybox.objects.file_object.FilePermissions

XML binding class: cybox.bindings.win_file_object.WindowsFilePermissionsType
full_control
XML Binding class name: Full_Control
Dictionary key name: full_control
modify
XML Binding class name: Modify
Dictionary key name: modify
read
XML Binding class name: Read
Dictionary key name: read
read_and_execute
XML Binding class name: Read_And_Execute
Dictionary key name: read_and_execute
write
XML Binding class name: Write
Dictionary key name: write

Version: 2.1.0.13

cybox.objects.win_filemapping_object module

class cybox.objects.win_filemapping_object.WinFilemapping[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.win_filemapping_object.WindowsFilemappingObjectType
actual_size
XML Binding class name: Actual_Size
Dictionary key name: actual_size
file_handle
XML Binding class name: File_Handle
Dictionary key name: file_handle
handle
XML Binding class name: Handle
Dictionary key name: handle
maximum_size
XML Binding class name: Maximum_Size
Dictionary key name: maximum_size
name
XML Binding class name: Name
Dictionary key name: name
page_protection_attribute
(List of values permitted)
XML Binding class name: Page_Protection_Attribute
Dictionary key name: page_protection_attribute
page_protection_value
XML Binding class name: Page_Protection_Value
Dictionary key name: page_protection_value
security_attributes
XML Binding class name: Security_Attributes
Dictionary key name: security_attributes

Version: 2.1.0.13

cybox.objects.win_handle_object module

class cybox.objects.win_handle_object.WinHandle[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.win_handle_object.WindowsHandleObjectType
access_mask
XML Binding class name: Access_Mask
Dictionary key name: access_mask
id_
XML Binding class name: ID
Dictionary key name: id
name
XML Binding class name: Name
Dictionary key name: name
object_address
XML Binding class name: Object_Address
Dictionary key name: object_address
pointer_count
XML Binding class name: Pointer_Count
Dictionary key name: pointer_count
type_
XML Binding class name: Type
Dictionary key name: type
class cybox.objects.win_handle_object.WinHandleList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.win_handle_object.WindowsHandleListType
handle
(List of values permitted)
XML Binding class name: Handle
Dictionary key name: handle

Version: 2.1.0.13

cybox.objects.win_hook_object module

class cybox.objects.win_hook_object.WinHook[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.win_hook_object.WindowsHookObjectType
handle
XML Binding class name: Handle
Dictionary key name: handle
hooking_function_name
XML Binding class name: Hooking_Function_Name
Dictionary key name: hooking_function_name
hooking_module
XML Binding class name: Hooking_Module
Dictionary key name: hooking_module
thread_id
XML Binding class name: Thread_ID
Dictionary key name: thread_id
type_
XML Binding class name: Type
Dictionary key name: type

Version: 2.1.0.13

cybox.objects.win_kernel_hook_object module

class cybox.objects.win_kernel_hook_object.WinKernelHook[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.win_kernel_hook_object.WindowsKernelHookObjectType
digital_signature_hooked
XML Binding class name: Digital_Signature_Hooked
Dictionary key name: digital_signature_hooked
digital_signature_hooking
XML Binding class name: Digital_Signature_Hooking
Dictionary key name: digital_signature_hooking
hook_description
XML Binding class name: Hook_Description
Dictionary key name: hook_description
hooked_function
XML Binding class name: Hooked_Function
Dictionary key name: hooked_function
hooked_module
XML Binding class name: Hooked_Module
Dictionary key name: hooked_module
hooking_address
XML Binding class name: Hooking_Address
Dictionary key name: hooking_address
hooking_module
XML Binding class name: Hooking_Module
Dictionary key name: hooking_module
type_
XML Binding class name: Type
Dictionary key name: type

Version: 2.1.0.13

cybox.objects.win_kernel_object module

class cybox.objects.win_kernel_object.IDTEntry[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_kernel_object.IDTEntryType
offset_high
XML Binding class name: Offset_High
Dictionary key name: offset_high
offset_low
XML Binding class name: Offset_Low
Dictionary key name: offset_low
offset_middle
XML Binding class name: Offset_Middle
Dictionary key name: offset_middle
selector
XML Binding class name: Selector
Dictionary key name: selector
type_attr
XML Binding class name: Type_Attr
Dictionary key name: type_attr
class cybox.objects.win_kernel_object.IDTEntryList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.win_kernel_object.IDTEntryListType
idt_entry
(List of values permitted)
XML Binding class name: IDT_Entry
Dictionary key name: idt_entry
class cybox.objects.win_kernel_object.SSDTEntry[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_kernel_object.SSDTEntryType
argument_table_base
XML Binding class name: Argument_Table_Base
Dictionary key name: argument_table_base
hooked
XML Binding class name: hooked
Dictionary key name: hooked
number_of_services
XML Binding class name: Number_Of_Services
Dictionary key name: number_of_services
service_counter_table_base
XML Binding class name: Service_Counter_Table_Base
Dictionary key name: service_counter_table_base
service_table_base
XML Binding class name: Service_Table_Base
Dictionary key name: service_table_base
class cybox.objects.win_kernel_object.SSDTEntryList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.win_kernel_object.SSDTEntryListType
ssdt_entry
(List of values permitted)
XML Binding class name: SSDT_Entry
Dictionary key name: ssdt_entry
class cybox.objects.win_kernel_object.WinKernel[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.win_kernel_object.WindowsKernelObjectType
idt
XML Binding class name: IDT
Dictionary key name: idt
ssdt
XML Binding class name: SSDT
Dictionary key name: ssdt

Version: 2.1.0.13

cybox.objects.win_mailslot_object module

class cybox.objects.win_mailslot_object.WinMailslot[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.win_mailslot_object.WindowsMailslotObjectType
handle
XML Binding class name: Handle
Dictionary key name: handle
max_message_size
XML Binding class name: Max_Message_Size
Dictionary key name: max_message_size
name
XML Binding class name: Name
Dictionary key name: name
read_timeout
XML Binding class name: Read_Timeout
Dictionary key name: read_timeout
security_attributes
XML Binding class name: Security_Attributes
Dictionary key name: security_attributes

Version: 2.1.0.13

cybox.objects.win_memory_page_region_object module

class cybox.objects.win_memory_page_region_object.WinMemoryPageRegion[source]

Bases: cybox.objects.memory_object.Memory

XML binding class: cybox.bindings.win_memory_page_region_object.WindowsMemoryPageRegionObjectType
allocation_base_address
XML Binding class name: Allocation_Base_Address
Dictionary key name: allocation_base_address
allocation_protect
XML Binding class name: Allocation_Protect
Dictionary key name: allocation_protect
block_type
XML Binding class name: Block_Type
Dictionary key name: block_type
extracted_features
XML Binding class name: Extracted_Features
Dictionary key name: extracted_features
hashes
XML Binding class name: Hashes
Dictionary key name: hashes
is_injected
XML Binding class name: is_injected
Dictionary key name: is_injected
is_mapped
XML Binding class name: is_mapped
Dictionary key name: is_mapped
is_protected
XML Binding class name: is_protected
Dictionary key name: is_protected
is_volatile
XML Binding class name: is_volatile
Dictionary key name: is_volatile
memory_source
XML Binding class name: Memory_Source
Dictionary key name: memory_source
name
XML Binding class name: Name
Dictionary key name: name
protect
XML Binding class name: Protect
Dictionary key name: protect
region_end_address
XML Binding class name: Region_End_Address
Dictionary key name: region_end_address
region_size
XML Binding class name: Region_Size
Dictionary key name: region_size
region_start_address
XML Binding class name: Region_Start_Address
Dictionary key name: region_start_address
state
XML Binding class name: State
Dictionary key name: state
type_
XML Binding class name: Type
Dictionary key name: type

Version: 2.1.0.13

cybox.objects.win_mutex_object module

class cybox.objects.win_mutex_object.WinMutex[source]

Bases: cybox.objects.mutex_object.Mutex

XML binding class: cybox.bindings.win_mutex_object.WindowsMutexObjectType
handle
XML Binding class name: Handle
Dictionary key name: handle
security_attributes
XML Binding class name: Security_Attributes
Dictionary key name: security_attributes

Version: 2.1.0.13

cybox.objects.win_network_route_entry_object module

class cybox.objects.win_network_route_entry_object.WinNetworkRouteEntry[source]

Bases: cybox.objects.network_route_entry_object.NetworkRouteEntry

XML binding class: cybox.bindings.win_network_route_entry_object.WindowsNetworkRouteEntryObjectType
nl_route_origin
XML Binding class name: NL_ROUTE_ORIGIN
Dictionary key name: nl_route_origin
nl_route_protocol
XML Binding class name: NL_ROUTE_PROTOCOL
Dictionary key name: nl_route_protocol

Version: 2.1.0.13

cybox.objects.win_network_share_object module

class cybox.objects.win_network_share_object.WinNetworkShare[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.win_network_share_object.WindowsNetworkShareObjectType
access_all
XML Binding class name: ACCESS_ALL
Dictionary key name: access_all
access_atrib
XML Binding class name: ACCESS_ATRIB
Dictionary key name: access_atrib
access_create
XML Binding class name: ACCESS_CREATE
Dictionary key name: access_create
access_delete
XML Binding class name: ACCESS_DELETE
Dictionary key name: access_delete
access_exec
XML Binding class name: ACCESS_EXEC
Dictionary key name: access_exec
access_perm
XML Binding class name: ACCESS_PERM
Dictionary key name: access_perm
access_read
XML Binding class name: ACCESS_READ
Dictionary key name: access_read
access_write
XML Binding class name: ACCESS_WRITE
Dictionary key name: access_write
current_uses
XML Binding class name: Current_Uses
Dictionary key name: current_uses
local_path
XML Binding class name: Local_Path
Dictionary key name: local_path
max_uses
XML Binding class name: Max_Uses
Dictionary key name: max_uses
netname
XML Binding class name: Netname
Dictionary key name: netname
type_
XML Binding class name: Type
Dictionary key name: type

Version: 2.1.0.13

cybox.objects.win_pipe_object module

class cybox.objects.win_pipe_object.WinPipe[source]

Bases: cybox.objects.pipe_object.Pipe

XML binding class: cybox.bindings.win_pipe_object.WindowsPipeObjectType
default_time_out
XML Binding class name: Default_Time_Out
Dictionary key name: default_time_out
handle
XML Binding class name: Handle
Dictionary key name: handle
in_buffer_size
XML Binding class name: In_Buffer_Size
Dictionary key name: in_buffer_size
max_instances
XML Binding class name: Max_Instances
Dictionary key name: max_instances
open_mode
XML Binding class name: Open_Mode
Dictionary key name: open_mode
out_buffer_size
XML Binding class name: Out_Buffer_Size
Dictionary key name: out_buffer_size
pipe_mode
XML Binding class name: Pipe_Mode
Dictionary key name: pipe_mode
security_attributes
XML Binding class name: Security_Attributes
Dictionary key name: security_attributes

Version: 2.1.0.13

cybox.objects.win_prefetch_object module

class cybox.objects.win_prefetch_object.AccessedDirectoryList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.win_prefetch_object.AccessedDirectoryListType
accessed_directory
(List of values permitted)
XML Binding class name: Accessed_Directory
Dictionary key name: accessed_directory
class cybox.objects.win_prefetch_object.AccessedFileList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.win_prefetch_object.AccessedFileListType
accessed_file
(List of values permitted)
XML Binding class name: Accessed_File
Dictionary key name: accessed_file
class cybox.objects.win_prefetch_object.Volume[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_prefetch_object.VolumeType
deviceitem
(List of values permitted)
XML Binding class name: DeviceItem
Dictionary key name: deviceitem
volumeitem
(List of values permitted)
XML Binding class name: VolumeItem
Dictionary key name: volumeitem
class cybox.objects.win_prefetch_object.WinPrefetch[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.win_prefetch_object.WindowsPrefetchObjectType
accessed_directory_list
XML Binding class name: Accessed_Directory_List
Dictionary key name: accessed_directory_list
accessed_file_list
XML Binding class name: Accessed_File_List
Dictionary key name: accessed_file_list
application_file_name
XML Binding class name: Application_File_Name
Dictionary key name: application_file_name
first_run
XML Binding class name: First_Run
Dictionary key name: first_run
last_run
XML Binding class name: Last_Run
Dictionary key name: last_run
prefetch_hash
XML Binding class name: Prefetch_Hash
Dictionary key name: prefetch_hash
times_executed
XML Binding class name: Times_Executed
Dictionary key name: times_executed
volume
XML Binding class name: Volume
Dictionary key name: volume

Version: 2.1.0.13

cybox.objects.win_process_object module

class cybox.objects.win_process_object.MemorySectionList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.win_process_object.MemorySectionListType
memory_section
(List of values permitted)
XML Binding class name: Memory_Section
Dictionary key name: memory_section
class cybox.objects.win_process_object.StartupInfo[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_process_object.StartupInfoType
dwfillattribute
XML Binding class name: dwFillAttribute
Dictionary key name: dwfillattribute
dwflags
XML Binding class name: dwFlags
Dictionary key name: dwflags
dwx
XML Binding class name: dwX
Dictionary key name: dwx
dwxcountchars
XML Binding class name: dwXCountChars
Dictionary key name: dwxcountchars
dwxsize
XML Binding class name: dwXSize
Dictionary key name: dwxsize
dwy
XML Binding class name: dwY
Dictionary key name: dwy
dwycountchars
XML Binding class name: dwYCountChars
Dictionary key name: dwycountchars
dwysize
XML Binding class name: dwYSize
Dictionary key name: dwysize
hstderror
XML Binding class name: hStdError
Dictionary key name: hstderror
hstdinput
XML Binding class name: hStdInput
Dictionary key name: hstdinput
hstdoutput
XML Binding class name: hStdOutput
Dictionary key name: hstdoutput
lpdesktop
XML Binding class name: lpDesktop
Dictionary key name: lpdesktop
lptitle
XML Binding class name: lpTitle
Dictionary key name: lptitle
wshowwindow
XML Binding class name: wShowWindow
Dictionary key name: wshowwindow
class cybox.objects.win_process_object.WinProcess[source]

Bases: cybox.objects.process_object.Process

XML binding class: cybox.bindings.win_process_object.WindowsProcessObjectType
aslr_enabled
XML Binding class name: aslr_enabled
Dictionary key name: aslr_enabled
dep_enabled
XML Binding class name: dep_enabled
Dictionary key name: dep_enabled
handle_list
XML Binding class name: Handle_List
Dictionary key name: handle_list
priority
XML Binding class name: Priority
Dictionary key name: priority
section_list
XML Binding class name: Section_List
Dictionary key name: section_list
security_id
XML Binding class name: Security_ID
Dictionary key name: security_id
security_type
XML Binding class name: Security_Type
Dictionary key name: security_type
startup_info
XML Binding class name: Startup_Info
Dictionary key name: startup_info
thread
(List of values permitted)
XML Binding class name: Thread
Dictionary key name: thread
window_title
XML Binding class name: Window_Title
Dictionary key name: window_title

Version: 2.1.0.13

cybox.objects.win_registry_key_object module

class cybox.objects.win_registry_key_object.RegistrySubkeys(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.win_registry_key_object.RegistrySubkeysType
subkey
(List of values permitted)
XML Binding class name: Subkey
Dictionary key name: subkey
class cybox.objects.win_registry_key_object.RegistryValue[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_registry_key_object.RegistryValueType
byte_runs
XML Binding class name: Byte_Runs
Dictionary key name: byte_runs
data
XML Binding class name: Data
Dictionary key name: data
datatype
XML Binding class name: Datatype
Dictionary key name: datatype
name
XML Binding class name: Name
Dictionary key name: name
class cybox.objects.win_registry_key_object.RegistryValues(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.win_registry_key_object.RegistryValuesType
value
(List of values permitted)
XML Binding class name: Value
Dictionary key name: value
class cybox.objects.win_registry_key_object.WinRegistryKey[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.win_registry_key_object.WindowsRegistryKeyObjectType
byte_runs
XML Binding class name: Byte_Runs
Dictionary key name: byte_runs
creator_username
XML Binding class name: Creator_Username
Dictionary key name: creator_username
handle_list
XML Binding class name: Handle_List
Dictionary key name: handle_list
hive
XML Binding class name: Hive
Dictionary key name: hive
key
XML Binding class name: Key
Dictionary key name: key
modified_time
XML Binding class name: Modified_Time
Dictionary key name: modified_time
number_subkeys
XML Binding class name: Number_Subkeys
Dictionary key name: number_subkeys
number_values
XML Binding class name: Number_Values
Dictionary key name: number_values
subkeys
XML Binding class name: Subkeys
Dictionary key name: subkeys
values
XML Binding class name: Values
Dictionary key name: values

Version: 2.1.0.13

cybox.objects.win_semaphore_object module

class cybox.objects.win_semaphore_object.WinSemaphore[source]

Bases: cybox.objects.semaphore_object.Semaphore

XML binding class: cybox.bindings.win_semaphore_object.WindowsSemaphoreObjectType
handle
XML Binding class name: Handle
Dictionary key name: handle
security_attributes
XML Binding class name: Security_Attributes
Dictionary key name: security_attributes

Version: 2.1.0.13

cybox.objects.win_service_object module

class cybox.objects.win_service_object.ServiceDescriptionList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.win_service_object.ServiceDescriptionListType
description
(List of values permitted)
XML Binding class name: Description
Dictionary key name: description
class cybox.objects.win_service_object.WinService[source]

Bases: cybox.objects.win_process_object.WinProcess

XML binding class: cybox.bindings.win_service_object.WindowsServiceObjectType
description_list
XML Binding class name: Description_List
Dictionary key name: description_list
display_name
XML Binding class name: Display_Name
Dictionary key name: display_name
group_name
XML Binding class name: Group_Name
Dictionary key name: group_name
service_dll
XML Binding class name: Service_DLL
Dictionary key name: service_dll
service_dll_certificate_issuer
XML Binding class name: Service_DLL_Certificate_Issuer
Dictionary key name: service_dll_certificate_issuer
service_dll_certificate_subject
XML Binding class name: Service_DLL_Certificate_Subject
Dictionary key name: service_dll_certificate_subject
service_dll_hashes
XML Binding class name: Service_DLL_Hashes
Dictionary key name: service_dll_hashes
service_dll_signature_description
XML Binding class name: Service_DLL_Signature_Description
Dictionary key name: service_dll_signature_description
service_dll_signature_exists
XML Binding class name: service_dll_signature_exists
Dictionary key name: service_dll_signature_exists
service_dll_signature_verified
XML Binding class name: service_dll_signature_verified
Dictionary key name: service_dll_signature_verified
service_name
XML Binding class name: Service_Name
Dictionary key name: service_name
service_status
XML Binding class name: Service_Status
Dictionary key name: service_status
service_type
XML Binding class name: Service_Type
Dictionary key name: service_type
started_as
XML Binding class name: Started_As
Dictionary key name: started_as
startup_command_line
XML Binding class name: Startup_Command_Line
Dictionary key name: startup_command_line
startup_type
XML Binding class name: Startup_Type
Dictionary key name: startup_type

Version: 2.1.0.13

cybox.objects.win_system_object module

class cybox.objects.win_system_object.GlobalFlag[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_system_object.GlobalFlagType
abbreviation
XML Binding class name: Abbreviation
Dictionary key name: abbreviation
destination
XML Binding class name: Destination
Dictionary key name: destination
hexadecimal_value
XML Binding class name: Hexadecimal_Value
Dictionary key name: hexadecimal_value
symbolic_name
XML Binding class name: Symbolic_Name
Dictionary key name: symbolic_name
class cybox.objects.win_system_object.GlobalFlagList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.win_system_object.GlobalFlagListType
global_flag
(List of values permitted)
XML Binding class name: Global_Flag
Dictionary key name: global_flag
class cybox.objects.win_system_object.WinSystem[source]

Bases: cybox.objects.system_object.System

XML binding class: cybox.bindings.win_system_object.WindowsSystemObjectType
domain
(List of values permitted)
XML Binding class name: Domain
Dictionary key name: domain
global_flag_list
XML Binding class name: Global_Flag_List
Dictionary key name: global_flag_list
netbios_name
XML Binding class name: NetBIOS_Name
Dictionary key name: netbios_name
open_handle_list
XML Binding class name: Open_Handle_List
Dictionary key name: open_handle_list
product_id
XML Binding class name: Product_ID
Dictionary key name: product_id
product_name
XML Binding class name: Product_Name
Dictionary key name: product_name
registered_organization
XML Binding class name: Registered_Organization
Dictionary key name: registered_organization
registered_owner
XML Binding class name: Registered_Owner
Dictionary key name: registered_owner
windows_directory
XML Binding class name: Windows_Directory
Dictionary key name: windows_directory
windows_system_directory
XML Binding class name: Windows_System_Directory
Dictionary key name: windows_system_directory
windows_temp_directory
XML Binding class name: Windows_Temp_Directory
Dictionary key name: windows_temp_directory

Version: 2.1.0.13

cybox.objects.win_system_restore_object module

class cybox.objects.win_system_restore_object.HiveList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.win_system_restore_object.HiveListType
hive
(List of values permitted)
XML Binding class name: Hive
Dictionary key name: hive
class cybox.objects.win_system_restore_object.WinSystemRestore[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.win_system_restore_object.WindowsSystemRestoreObjectType
acl_change_sid
XML Binding class name: ACL_Change_SID
Dictionary key name: acl_change_sid
acl_change_username
XML Binding class name: ACL_Change_Username
Dictionary key name: acl_change_username
backup_file_name
XML Binding class name: Backup_File_Name
Dictionary key name: backup_file_name
change_event
XML Binding class name: Change_Event
Dictionary key name: change_event
changelog_entry_flags
XML Binding class name: ChangeLog_Entry_Flags
Dictionary key name: changelog_entry_flags
changelog_entry_sequence_number
XML Binding class name: ChangeLog_Entry_Sequence_Number
Dictionary key name: changelog_entry_sequence_number
changelog_entry_type
XML Binding class name: ChangeLog_Entry_Type
Dictionary key name: changelog_entry_type
created
XML Binding class name: Created
Dictionary key name: created
file_attributes
XML Binding class name: File_Attributes
Dictionary key name: file_attributes
new_file_name
XML Binding class name: New_File_Name
Dictionary key name: new_file_name
original_file_name
XML Binding class name: Original_File_Name
Dictionary key name: original_file_name
original_short_file_name
XML Binding class name: Original_Short_File_Name
Dictionary key name: original_short_file_name
process_name
XML Binding class name: Process_Name
Dictionary key name: process_name
registry_hive_list
XML Binding class name: Registry_Hive_List
Dictionary key name: registry_hive_list
restore_point_description
XML Binding class name: Restore_Point_Description
Dictionary key name: restore_point_description
restore_point_full_path
XML Binding class name: Restore_Point_Full_Path
Dictionary key name: restore_point_full_path
restore_point_name
XML Binding class name: Restore_Point_Name
Dictionary key name: restore_point_name
restore_point_type
XML Binding class name: Restore_Point_Type
Dictionary key name: restore_point_type

Version: 2.1.0.13

cybox.objects.win_task_object module

class cybox.objects.win_task_object.IComHandlerAction[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_task_object.IComHandlerActionType
com_class_id
XML Binding class name: COM_Class_ID
Dictionary key name: com_class_id
com_data
XML Binding class name: COM_Data
Dictionary key name: com_data
class cybox.objects.win_task_object.IExecAction[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_task_object.IExecActionType
exec_arguments
XML Binding class name: Exec_Arguments
Dictionary key name: exec_arguments
exec_program_hashes
XML Binding class name: Exec_Program_Hashes
Dictionary key name: exec_program_hashes
exec_program_path
XML Binding class name: Exec_Program_Path
Dictionary key name: exec_program_path
exec_working_directory
XML Binding class name: Exec_Working_Directory
Dictionary key name: exec_working_directory
class cybox.objects.win_task_object.IShowMessageAction[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_task_object.IShowMessageActionType
show_message_body
XML Binding class name: Show_Message_Body
Dictionary key name: show_message_body
show_message_title
XML Binding class name: Show_Message_Title
Dictionary key name: show_message_title
class cybox.objects.win_task_object.TaskAction[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_task_object.TaskActionType
action_id
XML Binding class name: Action_ID
Dictionary key name: action_id
action_type
XML Binding class name: Action_Type
Dictionary key name: action_type
icomhandleraction
XML Binding class name: IComHandlerAction
Dictionary key name: icomhandleraction
iemailaction
XML Binding class name: IEmailAction
Dictionary key name: iemailaction
iexecaction
XML Binding class name: IExecAction
Dictionary key name: iexecaction
ishowmessageaction
XML Binding class name: IShowMessageAction
Dictionary key name: ishowmessageaction
class cybox.objects.win_task_object.TaskActionList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.win_task_object.TaskActionListType
action
(List of values permitted)
XML Binding class name: Action
Dictionary key name: action
class cybox.objects.win_task_object.Trigger[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_task_object.TriggerType
trigger_begin
XML Binding class name: Trigger_Begin
Dictionary key name: trigger_begin
trigger_delay
XML Binding class name: Trigger_Delay
Dictionary key name: trigger_delay
trigger_end
XML Binding class name: Trigger_End
Dictionary key name: trigger_end
trigger_frequency
XML Binding class name: Trigger_Frequency
Dictionary key name: trigger_frequency
trigger_max_run_time
XML Binding class name: Trigger_Max_Run_Time
Dictionary key name: trigger_max_run_time
trigger_session_change_type
XML Binding class name: Trigger_Session_Change_Type
Dictionary key name: trigger_session_change_type
trigger_type
XML Binding class name: Trigger_Type
Dictionary key name: trigger_type
class cybox.objects.win_task_object.TriggerList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.win_task_object.TriggerListType
trigger
(List of values permitted)
XML Binding class name: Trigger
Dictionary key name: trigger
class cybox.objects.win_task_object.WinTask[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.win_task_object.WindowsTaskObjectType
account_logon_type
XML Binding class name: Account_Logon_Type
Dictionary key name: account_logon_type
account_name
XML Binding class name: Account_Name
Dictionary key name: account_name
account_run_level
XML Binding class name: Account_Run_Level
Dictionary key name: account_run_level
action_list
XML Binding class name: Action_List
Dictionary key name: action_list
application_name
XML Binding class name: Application_Name
Dictionary key name: application_name
comment
XML Binding class name: Comment
Dictionary key name: comment
creation_date
XML Binding class name: Creation_Date
Dictionary key name: creation_date
creator
XML Binding class name: Creator
Dictionary key name: creator
exit_code
XML Binding class name: Exit_Code
Dictionary key name: exit_code
flags
XML Binding class name: Flags
Dictionary key name: flags
max_run_time
XML Binding class name: Max_Run_Time
Dictionary key name: max_run_time
most_recent_run_time
XML Binding class name: Most_Recent_Run_Time
Dictionary key name: most_recent_run_time
name
XML Binding class name: Name
Dictionary key name: name
next_run_time
XML Binding class name: Next_Run_Time
Dictionary key name: next_run_time
parameters
XML Binding class name: Parameters
Dictionary key name: parameters
priority
XML Binding class name: Priority
Dictionary key name: priority
status
XML Binding class name: Status
Dictionary key name: status
trigger_list
XML Binding class name: Trigger_List
Dictionary key name: trigger_list
work_item_data
XML Binding class name: Work_Item_Data
Dictionary key name: work_item_data
working_directory
XML Binding class name: Working_Directory
Dictionary key name: working_directory

Version: 2.1.0.13

cybox.objects.win_thread_object module

class cybox.objects.win_thread_object.WinThread[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.win_thread_object.WindowsThreadObjectType
context
XML Binding class name: Context
Dictionary key name: context
creation_flags
XML Binding class name: Creation_Flags
Dictionary key name: creation_flags
creation_time
XML Binding class name: Creation_Time
Dictionary key name: creation_time
handle
XML Binding class name: Handle
Dictionary key name: handle
parameter_address
XML Binding class name: Parameter_Address
Dictionary key name: parameter_address
priority
XML Binding class name: Priority
Dictionary key name: priority
running_status
XML Binding class name: Running_Status
Dictionary key name: running_status
security_attributes
XML Binding class name: Security_Attributes
Dictionary key name: security_attributes
stack_size
XML Binding class name: Stack_Size
Dictionary key name: stack_size
start_address
XML Binding class name: Start_Address
Dictionary key name: start_address
thread_id
XML Binding class name: Thread_ID
Dictionary key name: thread_id

Version: 2.1.0.13

cybox.objects.win_user_object module

class cybox.objects.win_user_object.WinGroup[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_user_account_object.WindowsGroupType
name
XML Binding class name: Name
Dictionary key name: name
class cybox.objects.win_user_object.WinGroupList(*args)[source]

Bases: cybox.objects.user_account_object.GroupList

XML binding class: cybox.bindings.user_account_object.GroupListType
group
(List of values permitted)
XML Binding class name: Group
Dictionary key name: group
class cybox.objects.win_user_object.WinPrivilege[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.win_user_account_object.WindowsPrivilegeType
user_right
XML Binding class name: User_Right
Dictionary key name: user_right
class cybox.objects.win_user_object.WinPrivilegeList(*args)[source]

Bases: cybox.objects.user_account_object.PrivilegeList

XML binding class: cybox.bindings.user_account_object.PrivilegeListType
privilege
(List of values permitted)
XML Binding class name: Privilege
Dictionary key name: privilege
class cybox.objects.win_user_object.WinUser[source]

Bases: cybox.objects.user_account_object.UserAccount

XML binding class: cybox.bindings.win_user_account_object.WindowsUserAccountObjectType
group_list
XML Binding class name: Group_List
Dictionary key name: group_list
privilege_list
XML Binding class name: Privilege_List
Dictionary key name: privilege_list
security_id
XML Binding class name: Security_ID
Dictionary key name: security_id
security_type
XML Binding class name: Security_Type
Dictionary key name: security_type

Version: 2.1.0.13

cybox.objects.win_volume_object module

class cybox.objects.win_volume_object.WinVolume[source]

Bases: cybox.objects.volume_object.Volume

XML binding class: cybox.bindings.win_volume_object.WindowsVolumeObjectType
attributes_list
XML Binding class name: Attributes_List
Dictionary key name: attributes_list
drive_letter
XML Binding class name: Drive_Letter
Dictionary key name: drive_letter
drive_type
XML Binding class name: Drive_Type
Dictionary key name: drive_type
class cybox.objects.win_volume_object.WindowsVolumeAttributesList(*args)[source]

Bases: mixbox.entities.EntityList

XML binding class: cybox.bindings.win_volume_object.WindowsVolumeAttributesListType
attribute
(List of values permitted)
XML Binding class name: Attribute
Dictionary key name: attribute

Version: 2.1.0.13

cybox.objects.win_waitable_timer_object module

class cybox.objects.win_waitable_timer_object.WinWaitableTimer[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.win_waitable_timer_object.WindowsWaitableTimerObjectType
name
XML Binding class name: Name
Dictionary key name: name
security_attributes
XML Binding class name: Security_Attributes
Dictionary key name: security_attributes
type_
XML Binding class name: Type
Dictionary key name: type

Version: 2.1.0.13

cybox.objects.x509_certificate_object module

class cybox.objects.x509_certificate_object.RSAPublicKey[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.x509_certificate_object.RSAPublicKeyType
exponent
XML Binding class name: Exponent
Dictionary key name: exponent
modulus
XML Binding class name: Modulus
Dictionary key name: modulus
class cybox.objects.x509_certificate_object.SubjectPublicKey[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.x509_certificate_object.SubjectPublicKeyType
public_key_algorithm
XML Binding class name: Public_Key_Algorithm
Dictionary key name: public_key_algorithm
rsa_public_key
XML Binding class name: RSA_Public_Key
Dictionary key name: rsa_public_key
class cybox.objects.x509_certificate_object.Validity[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.x509_certificate_object.ValidityType
not_after
XML Binding class name: Not_After
Dictionary key name: not_after
not_before
XML Binding class name: Not_Before
Dictionary key name: not_before
class cybox.objects.x509_certificate_object.X509Cert[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.x509_certificate_object.X509CertificateContentsType
issuer
XML Binding class name: Issuer
Dictionary key name: issuer
non_standard_extensions
XML Binding class name: Non_Standard_Extensions
Dictionary key name: non_standard_extensions
serial_number
XML Binding class name: Serial_Number
Dictionary key name: serial_number
signature_algorithm
XML Binding class name: Signature_Algorithm
Dictionary key name: signature_algorithm
standard_extensions
XML Binding class name: Standard_Extensions
Dictionary key name: standard_extensions
subject
XML Binding class name: Subject
Dictionary key name: subject
subject_public_key
XML Binding class name: Subject_Public_Key
Dictionary key name: subject_public_key
validity
XML Binding class name: Validity
Dictionary key name: validity
version
XML Binding class name: Version
Dictionary key name: version
class cybox.objects.x509_certificate_object.X509Certificate[source]

Bases: cybox.common.object_properties.ObjectProperties

XML binding class: cybox.bindings.x509_certificate_object.X509CertificateObjectType
certificate
XML Binding class name: Certificate
Dictionary key name: certificate
certificate_signature
XML Binding class name: Certificate_Signature
Dictionary key name: certificate_signature
raw_certificate
XML Binding class name: Raw_Certificate
Dictionary key name: raw_certificate
class cybox.objects.x509_certificate_object.X509CertificateSignature[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.x509_certificate_object.X509CertificateSignatureType
signature
XML Binding class name: Signature
Dictionary key name: signature
signature_algorithm
XML Binding class name: Signature_Algorithm
Dictionary key name: signature_algorithm
class cybox.objects.x509_certificate_object.X509NonStandardExtensions[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.x509_certificate_object.X509NonStandardExtensionsType
netscape_certificate_type
XML Binding class name: Netscape_Certificate_Type
Dictionary key name: netscape_certificate_type
netscape_comment
XML Binding class name: Netscape_Comment
Dictionary key name: netscape_comment
old_authority_key_identifier
XML Binding class name: Old_Authority_Key_Identifier
Dictionary key name: old_authority_key_identifier
old_primary_key_attributes
XML Binding class name: Old_Primary_Key_Attributes
Dictionary key name: old_primary_key_attributes
class cybox.objects.x509_certificate_object.X509V3Extensions[source]

Bases: mixbox.entities.Entity

XML binding class: cybox.bindings.x509_certificate_object.X509V3ExtensionsType
authority_key_identifier
XML Binding class name: Authority_Key_Identifier
Dictionary key name: authority_key_identifier
basic_constraints
XML Binding class name: Basic_Constraints
Dictionary key name: basic_constraints
certificate_policies
XML Binding class name: Certificate_Policies
Dictionary key name: certificate_policies
crl_distribution_points
XML Binding class name: CRL_Distribution_Points
Dictionary key name: crl_distribution_points
extended_key_usage
XML Binding class name: Extended_Key_Usage
Dictionary key name: extended_key_usage
inhibit_any_policy
XML Binding class name: Inhibit_Any_Policy
Dictionary key name: inhibit_any_policy
issuer_alternative_name
XML Binding class name: Issuer_Alternative_Name
Dictionary key name: issuer_alternative_name
key_usage
XML Binding class name: Key_Usage
Dictionary key name: key_usage
name_constraints
XML Binding class name: Name_Constraints
Dictionary key name: name_constraints
policy_constraints
XML Binding class name: Policy_Constraints
Dictionary key name: policy_constraints
policy_mappings
XML Binding class name: Policy_Mappings
Dictionary key name: policy_mappings
private_key_usage_period
XML Binding class name: Private_Key_Usage_Period
Dictionary key name: private_key_usage_period
subject_alternative_name
XML Binding class name: Subject_Alternative_Name
Dictionary key name: subject_alternative_name
subject_directory_attributes
XML Binding class name: Subject_Directory_Attributes
Dictionary key name: subject_directory_attributes
subject_key_identifier
XML Binding class name: Subject_Key_Identifier
Dictionary key name: subject_key_identifier

Utility Classes and Functions

Version: 2.1.0.13

cybox.utils package

Submodules

Version: 2.1.0.13

cybox.utils.autoentity module
cybox.utils.autoentity.make_class_ref(cls)[source]
cybox.utils.autoentity.setup(app)[source]

Version: 2.1.0.13

cybox.utils.caches module
exception cybox.utils.caches.CacheMiss[source]

Bases: exceptions.Exception

Item was not found in a cache.

cybox.utils.caches.cache_clear()[source]

Clear the global cache

cybox.utils.caches.cache_count()[source]

Get the number of items in the global cache

cybox.utils.caches.cache_get(id_)[source]

Retrieve a value from the global cache

cybox.utils.caches.cache_put(value, id_=None)[source]

Save a value in the global cache

Version: 2.1.0.13

Module contents

Common utility methods

cybox.utils.denormalize_from_xml(value, delimiter)[source]
cybox.utils.normalize_to_xml(value, delimiter)[source]
cybox.utils.unwrap_cdata(value)[source]

Remove CDATA wrapping from value if present

cybox.utils.wrap_cdata(value)[source]

Version: 2.1.0.13

cybox.utils.autoentity module

cybox.utils.autoentity.make_class_ref(cls)[source]
cybox.utils.autoentity.setup(app)[source]

Version: 2.1.0.13

cybox.utils.caches module

exception cybox.utils.caches.CacheMiss[source]

Bases: exceptions.Exception

Item was not found in a cache.

cybox.utils.caches.cache_clear()[source]

Clear the global cache

cybox.utils.caches.cache_count()[source]

Get the number of items in the global cache

cybox.utils.caches.cache_get(id_)[source]

Retrieve a value from the global cache

cybox.utils.caches.cache_put(value, id_=None)[source]

Save a value in the global cache

Version: 2.1.0.13

CybOX Helper module

Version: 2.1.0.13

cybox.helper module

CybOX Common Indicator API

An api for creating observables for common indicators: ipv4 addresses, domain names, file hashes, and urls.

cybox.helper.create_domain_name_observable(domain_name)[source]

Create a CybOX Observable representing a domain name.

cybox.helper.create_email_address_observable(email_address)[source]

Create a CybOX Observable representing an IPv4 address

cybox.helper.create_file_hash_observable(fn, hash_value)[source]

Create a CybOX Observable representing a file hash.

cybox.helper.create_ipv4_list_observables(list_ipv4_addresses)[source]

Create a list of CybOX Observables, each representing an IPv4 address

cybox.helper.create_ipv4_observable(ipv4_address)[source]

Create a CybOX Observable representing an IPv4 address

cybox.helper.create_url_observable(url)[source]

Version: 2.1.0.13

API Coverage

The python-cybox APIs currently provide ⚠ partial coverage of all CybOX-defined constructs. Development is ongoing toward the goal of providing ✓ full CybOX language support in the APIs. Until such time that full coverage is provided, an overview of which constructs are available in these APIs will be maintained below.

CybOX Features

CybOX Construct API Coverage Documentation
Composite Observable ✓ Full cybox.core.observable.ObservableComposition
Event ⚠ Partial cybox.core.event.Event
Object ⚠ Partial cybox.core.object.Object
Observables ⚠ Partial cybox.core.observable.Observables
Observable ⚠ Partial cybox.core.observable.Observable
Relationships ⚠ Partial  

CybOX Objects

CybOX Construct API Coverage Documentation
Account Object ✓ Full cybox.objects.account_object.Account
Address Object ✓ Full cybox.objects.address_object.Address
API Object ✓ Full cybox.objects.api_object.API
Archive File Object ✓ Full cybox.objects.archive_file_object.ArchiveFile
ARP Cache Object ✓ Full cybox.objects.arp_cache_object.ARPCache
Artifact Object ✓ Full cybox.objects.artifact_object.Artifact
AS Object ✓ Full cybox.objects.as_object.AutonomousSystem
Code Object ✓ Full cybox.objects.code_object.Code
Custom Object × None  
Device Object ✓ Full cybox.objects.device_object.Device
Disk Object ✓ Full cybox.objects.disk_object.Disk
Disk Partition Object ✓ Full cybox.objects.disk_partition_object.DiskPartition
DNS Cache Object ✓ Full cybox.objects.dns_cache_object.DNSCache
DNS Query Object ✓ Full cybox.objects.dns_query_object.DNSQuery
DNS Record Object ✓ Full cybox.objects.dns_record_object.DNSRecord
Domain Name Object ✓ Full cybox.objects.domain_name_object.DomainName
Email Message Object ✓ Full cybox.objects.email_message_object.EmailMessage
File Object ✓ Full cybox.objects.file_object.File
GUI Dialogbox Object ✓ Full cybox.objects.gui_dialogbox_object.GUIDialogbox
GUI Object ✓ Full cybox.objects.gui_object.GUI
GUI Window Object ✓ Full cybox.objects.gui_window_object.GUIWindow
HTTP Session Object ✓ Full cybox.objects.http_session_object.HTTPSession
Hostname Object ✓ Full cybox.objects.hostname_object.Hostname
Image File Object ✓ Full cybox.objects.image_file_object.ImageFile
Library Object ✓ Full cybox.objects.library_object.Library
Link Object ✓ Full cybox.objects.link_object.Link
Linux Package Object ✓ Full cybox.objects.linux_package_object.LinuxPackage
Memory Object ✓ Full cybox.objects.memory_object.Memory
Mutex Object ✓ Full cybox.objects.mutex_object.Mutex
Network Connection Object ✓ Full cybox.objects.network_connection_object.NetworkConnection
Network Flow Object × None  
Network Packet Object ✓ Full cybox.objects.network_packet_object.NetworkPacket
Network Route Entry Object ✓ Full cybox.objects.network_route_entry_object.NetworkRouteEntry
Network Route Object ✓ Full cybox.objects.network_route_object.NetRoute
Network Socket Object ✓ Full cybox.objects.network_socket_object.NetworkSocket
Network Subnet Object ✓ Full cybox.objects.network_subnet_object.NetworkSubnet
PDF File Object ⚠ Partial cybox.objects.pdf_file_object.PDFFile
Pipe Object ✓ Full cybox.objects.pipe_object.Pipe
Port Object ✓ Full cybox.objects.port_object.Port
Process Object ✓ Full cybox.objects.process_object.Process
Product Object ✓ Full cybox.objects.product_object.Product
Semaphore Object ✓ Full cybox.objects.semaphore_object.Semaphore
SMS Message Object ✓ Full cybox.objects.sms_message_object.SMSMessage
Socket Address Object ✓ Full cybox.objects.socket_address_object.SocketAddress
System Object ⚠ Partial cybox.objects.system_object.System
URI Object ✓ Full cybox.objects.uri_object.URI
URL History Object × None  
Unix File Object × None  
Unix Network Route Entry Object × None  
Unix Pipe Object × None  
Unix Process Object × None  
Unix User Account Object × None  
Unix Volume Object × None  
User Account Object ✓ Full cybox.objects.user_account_object.UserAccount
User Session Object × None  
Volume Object ✓ Full cybox.objects.volume_object.Volume
Whois Object ✓ Full cybox.objects.whois_object.WhoisEntry
Win Computer Account Object ✓ Full cybox.objects.win_computer_account_object.WinComputerAccount
Win Critical Section Object ✓ Full cybox.objects.win_critical_section_object.WinCriticalSection
Win Driver Object ✓ Full cybox.objects.win_driver_object.WinDriver
Win Event Log Object ✓ Full cybox.objects.win_event_log_object.WinEventLog
Win Event Object ✓ Full cybox.objects.win_event_object.WinEvent
Win Executable File Object ✓ Full cybox.objects.win_executable_file_object.WinExecutableFile
Win File Object ✓ Full cybox.objects.win_file_object.WinFile
Win Filemapping Object ✓ Full cybox.objects.win_filemapping_object.WinFilemapping
Win Handle Object ✓ Full cybox.objects.win_handle_object.WinHandle
Win Hook Object ✓ Full cybox.objects.win_hook_object.WinHook
Win Kernel Hook Object ✓ Full cybox.objects.win_kernel_hook_object.WinKernelHook
Win Kernel Object ✓ Full cybox.objects.win_kernel_object.WinKernel
Win Mailslot Object ✓ Full cybox.objects.win_mailslot_object.WinMailslot
Win Memory Page Region Object ✓ Full cybox.objects.win_memory_page_region_object.WinMemoryPageRegion
Win Mutex Object ✓ Full cybox.objects.win_mutex_object.WinMutex
Win Network Route Entry Object ✓ Full cybox.objects.win_network_route_entry_object.WinNetworkRouteEntry
Win Network Share Object ✓ Full cybox.objects.win_network_share_object.WinNetworkShare
Win Pipe Object ✓ Full cybox.objects.win_pipe_object.WinPipe
Win Prefetch Object ✓ Full cybox.objects.win_prefetch_object.WinPrefetch
Win Process Object ✓ Full cybox.objects.win_process_object.WinProcess
Win Registry Key Object ✓ Full cybox.objects.win_registry_key_object.WinRegistryKey
Win Semaphore Object ✓ Full cybox.objects.win_semaphore_object.WinSemaphore
Win Service Object ✓ Full cybox.objects.win_service_object.WinService
Win System Object ✓ Full cybox.objects.win_system_object.WinSystem
Win System Restore Object ✓ Full cybox.objects.win_system_restore_object.WinSystemRestore
Win Task Object ✓ Full cybox.objects.win_task_object.WinTask
Win Thread Object ✓ Full cybox.objects.win_thread_object.WinThread
Win User Account Object ✓ Full cybox.objects.win_user_object.WinUser
Win Volume Object ✓ Full cybox.objects.win_volume_object.WinVolume
Win Waitable Timer Object ✓ Full cybox.objects.win_waitable_timer_object.WinWaitableTimer
X509 Certificate Object ✓ Full cybox.objects.x509_certificate_object.X509Certificate

CybOX Vocabularies

CybOX Construct API Coverage Documentation
ActionArgumentNameVocab-1.0 ✓ Full cybox.common.vocabs.ActionArgumentName
ActionNameVocab-1.0 × None (replaced by version 1.1)  
ActionNameVocab-1.1 ✓ Full cybox.common.vocabs.ActionName
ActionObjectAssociationTypeVocab-1.0 ✓ Full cybox.common.vocabs.AssociationType
ActionRelationshipTypeVocab-1.0 × None  
ActionTypeVocab-1.0 ✓ Full cybox.common.vocabs.ActionType
CharacterEncodingVocab-1.0 ✓ Full cybox.common.vocabs.CharacterEncoding
EventTypeVocab-1.0 × None (replaced by version 1.0.1)  
EventTypeVocab-1.0.1 ✓ Full cybox.common.vocabs.EventType
HashNameVocab-1.0 ✓ Full cybox.common.vocabs.HashName
InformationSourceTypeVocab-1.0 ✓ Full cybox.common.vocabs.InformationSourceType
ObjectRelationshipVocab-1.0 × None (replaced by version 1.1)  
ObjectRelationshipVocab-1.1 ✓ Full cybox.common.vocabs.ObjectRelationship
ObjectStateVocab-1.0 × None  
ToolTypeVocab-1.0 × None (replaced by version 1.1)  
ToolTypeVocab-1.1 ✓ Full cybox.common.vocabs.ToolType

Indices and tables