public class StixOperations extends ExtractionOperations
ScriptOperations.ClassObjectOptions, ScriptOperations.JdbcExecutor, ScriptOperations.SavedSearchResult, ScriptOperations.ServerDefinition, ScriptOperations.ServiceDefinition
CRLF, s_SignificantVerbLemmaEnMap, SIGNIFICANT_VERB_LEMMAS_EN
INDENT
Constructor and Description |
---|
StixOperations(ScriptDriver driver)
Constructs a StixOperations.
|
Modifier and Type | Method and Description |
---|---|
void |
createJsonStixReportBatch(AttributeValueTable avt)
Creation a batch of JSON-based StixReports from an input file directory.
|
void |
createStixAttackDamage(AttributeValueTable avt)
Creates a StixAttackDamage.
|
void |
createStixAttackIncident(AttributeValueTable avt)
Creates a StixAttackIncident.
|
void |
createStixAttackPattern(AttributeValueTable avt)
Creates a StixAttackPattern.
|
void |
createStixCampaign(AttributeValueTable avt)
Creates a StixCampaign.
|
void |
createStixCourseOfAction(AttributeValueTable avt)
Creates a StixCourseOfAction.
|
void |
createStixIdentity(AttributeValueTable avt)
Creates a StixIdentity.
|
void |
createStixIndicator(AttributeValueTable avt)
Creates a StixIndicator.
|
void |
createStixIntrusionSet(AttributeValueTable avt)
Creates a StixIntrusionSet.
|
void |
createStixLocation(AttributeValueTable avt)
Creates a StixLocation.
|
void |
createStixMalware(AttributeValueTable avt)
Creates a StixMalware.
|
void |
createStixObservedData(AttributeValueTable avt)
Creates a StixObservedData.
|
void |
createStixRelationObject(AttributeValueTable avt)
Creates a StixRelationObject.
|
void |
createStixThreatActor(AttributeValueTable avt)
Creates a StixThreatActor.
|
void |
createStixTimeReference(AttributeValueTable avt)
Creates a StixTimeReference.
|
void |
createStixTool(AttributeValueTable avt)
Creates a StixTool.
|
void |
createStixTrainingReport(AttributeValueTable avt)
Creates a StixReport for training.
|
void |
createStixVulnerability(AttributeValueTable avt)
Creates a StixVulnerability.
|
void |
executeStixTrainingReport(AttributeValueTable avt)
Execute a previously created StixReport, for STIX training.
|
void |
identifyStixReport(AttributeValueTable avt)
Identify a StixReport from a solved/finished InformationExtraction.
|
protected StixDomainObject |
lookupStixDomainObject(LibrarySession sess,
String tag)
Lookup a StixDomainObject by tag.
|
protected StixReport |
lookupStixReport(LibrarySession sess,
String tag)
Lookup a StixReport by tag.
|
void |
searchStixDomainObjectByIndexedName(AttributeValueTable avt)
Search for StixDomainObject by INDEXEDNAME.
|
void |
showCreatedStixReportObjects(AttributeValueTable avt)
Shows the objects created as part of creating a StixReport
from a solved/finished InformationExtraction.
|
void |
showJson(AttributeValueTable avt)
Parse explicit JSON, showing the resuls of the parse only.
|
protected void |
showRelations(StixDomainObject obj,
String prefix)
Show the StixRelationObjects associated with the specified StixDomainObject.
|
void |
showStixAttackDamage(StixAttackDamage obj,
String prefix)
Show details about a StixAttackDamage.
|
void |
showStixAttackIncident(StixAttackIncident obj,
String prefix)
Show details about a StixAttackIncident.
|
void |
showStixAttackPattern(StixAttackPattern obj,
String prefix)
Show details about a StixAttackPattern.
|
void |
showStixCampaign(StixCampaign obj,
String prefix)
Show details about a StixCampaign.
|
void |
showStixCourseOfAction(StixCourseOfAction obj,
String prefix)
Show details about a StixCourseOfAction.
|
void |
showStixDomainObject(StixDomainObject obj,
String prefix)
Show details about a StixDomainObject.
|
void |
showStixDomainObject(String tag)
Show details about a StixDomainObject.
|
void |
showStixIdentity(StixIdentity obj,
String prefix)
Show details about a StixIdentity.
|
void |
showStixIndicator(StixIndicator obj,
String prefix)
Show details about a StixIndicator.
|
void |
showStixIntrusionSet(StixIntrusionSet obj,
String prefix)
Show details about a StixIntrusionSet.
|
void |
showStixLocation(StixLocation obj,
String prefix)
Show details about a StixLocation.
|
void |
showStixMalware(StixMalware obj,
String prefix)
Show details about a StixMalware.
|
void |
showStixObservedData(StixObservedData obj,
String prefix)
Show details about a StixObservedData.
|
void |
showStixRelationObject(StixRelationObject obj,
String prefix)
Show details about a StixRelationObject.
|
void |
showStixRelationObject(String tag)
Show details about a StixRelationObject.
|
void |
showStixReport(StixReport report,
String prefix)
Show details about a StixReport.
|
void |
showStixReportBatch(AttributeValueTable avt)
Shows the batch of StixReports from an input file directory.
|
void |
showStixReportBatch(Folder topFolder,
boolean verbose,
String indent)
Shows the batch of StixReports under a folder.
|
void |
showStixThreatActor(StixThreatActor obj,
String prefix)
Show details about a StixThreatActor.
|
void |
showStixTimeReference(StixTimeReference obj,
String prefix)
Show details about a StixTimeReference.
|
void |
showStixTool(StixTool obj,
String prefix)
Show details about a StixTool.
|
void |
showStixVulnerability(StixVulnerability obj,
String prefix)
Show details about a StixVulnerability.
|
addConfirmedResult, addEventAssignmentTable, addEventAssignmentTables, addFinisherOverrideSetting, addInformationExtractionEntityPhrase, addInformationExtractionEntityRelationType, addInformationExtractionEntityType, addInformationExtractionImplicitEntityRelation, addInformationExtractionLegalEntityRelation, addInformationExtractionRegexMapping, addInformationExtractionRegexPattern, addInformationExtractionRegexRule, addInformationExtractionSetting, addParserOverrideSetting, addPreparerOverrideSetting, addProperty, addSetting, addSettings, addSolverOverrideSetting, addTrainerOverrideSetting, addTrainingSetClassifierDocument, addTrainingSetRelationDocument, addUnconfirmedResult, cancelConfirmedInformationExtraction, confirmInformationExtraction, createCoreNlpRegexRuleDocument, createDependencyMatcherRegexRuleJsonDocument, createEntityRulerRegexRuleJsonDocument, createInformationExtraction, createInformationExtractionBatch, createInformationExtractionDomainSpecification, createInformationExtractionFinisherSpecification, createInformationExtractionParserSpecification, createInformationExtractionPreparerSpecification, createInformationExtractionSolverSpecification, createInformationExtractionSpecification, createInformationExtractionTrainerSpecification, createJsonPhraseDocumentBatch, createLegalImplicitRelationsDocument, createMarking, createNerClassifierDocument, createRegexPatternDocument, createRegexPatternJsonDocument, createRegexRuleDocument, createRegexRuleJsonDocument, createRelationMentionModelDocument, createResultSet, createSpacyClassifierDocument, createTokenMatcherRegexRuleJsonDocument, createTrainingExportSet, createTrainingSet, deriveMarkingSource, deriveRelationSource, executeInformationExtraction, executePythonScript, executePythonScriptIO, exportNerClassifierModelData, exportRelationMentionModelData, freeInformationExtractionDomainSpecification, freeInformationExtractionFinisherSpecification, freeInformationExtractionParserSpecification, freeInformationExtractionPreparerSpecification, freeInformationExtractionSolverSpecification, freeInformationExtractionSpecification, freeInformationExtractionTrainerSpecification, identifyInformationExtractionDomainSpecification, identifyInformationExtractionFinisherSpecification, identifyInformationExtractionParserSpecification, identifyInformationExtractionPreparerSpecification, identifyInformationExtractionSolverSpecification, identifyInformationExtractionSpecification, identifyInformationExtractionTrainerSpecification, importNerClassifierModelData, importRelationMentionModelData, isLegalCoreNlpRegexRule, isLegalRegexPattern, listFiles, lookupInformationExtraction, lookupInformationExtractionAbstractSpecification, lookupInformationExtractionDomainSpecification, lookupInformationExtractionFinisherSpecification, lookupInformationExtractionParserSpecification, lookupInformationExtractionPreparerSpecification, lookupInformationExtractionSolverSpecification, lookupInformationExtractionSpecification, lookupInformationExtractionTrainerSpecification, parseMarkingTag, parseMarkingType, processAllEvents, regenerateClassifierTrainingDocuments, removeTrainingExportSet, replaceEventAssignmentTableList, searchInformationExtractionEntityPhrases, setConfirmedOutcome, setInformationExtractionState, showAllInformationExtractionDomainSpecifications, showAllInformationExtractionFinisherSpecifications, showAllInformationExtractionParserSpecifications, showAllInformationExtractionPreparerSpecifications, showAllInformationExtractionSolverSpecifications, showAllInformationExtractionSpecifications, showAllInformationExtractionTrainerSpecifications, showClassifierTrainingDocument, showConllRelationTrainingDocument, showInformationExtraction, showInformationExtraction, showInformationExtractionClassifierHits, showInformationExtractionCorefChain, showInformationExtractionDependencyGraphEdge, showInformationExtractionDomainSpecification, showInformationExtractionDomainSpecification, showInformationExtractionEntityMention, showInformationExtractionEntityPhrase, showInformationExtractionFinisherSpecification, showInformationExtractionFinisherSpecification, showInformationExtractionOutcome, showInformationExtractionOutcome, showInformationExtractionOutcomeMarking, showInformationExtractionOutcomeMarkingRelation, showInformationExtractionParserSpecification, showInformationExtractionParserSpecification, showInformationExtractionPreparerSpecification, showInformationExtractionPreparerSpecification, showInformationExtractionRelationMention, showInformationExtractionRelationTriple, showInformationExtractionResultSet, showInformationExtractionSentence, showInformationExtractionSolverSpecification, showInformationExtractionSolverSpecification, showInformationExtractionSpecification, showInformationExtractionSpecification, showInformationExtractionToken, showInformationExtractionTokenList, showInformationExtractionTokens, showInformationExtractionTrainerSpecification, showInformationExtractionTrainerSpecification, showInformationExtractionTrainingSet, showOutcomeAsConfirmationInput, showOutcomeAsTsv, showOutcomeGraphSummaryDocument, showOutcomeTextSummaryDocument, showResultSet, showSearchTerm, showSpacyClassifierTrainingDocument, showTrainingExportSet, showTrainingSet, syncInformationExtractionEntityPhraseIndex
abortTransaction, acquireLock, acquireManualLock, activateAuditHandlerSpecification, activateAuditSpecification, activateOperationActionSpecification, activateServerSpecification, activateSystemObject, addAttachment, addAttribute, addAuditEventProperty, addAuditType, addAuditTypesForClass, addBooleanHandlerProperty, addCategory, addDefinitionAuditEntryType, addDefinitionAuditEntryTypesForClass, addDefinitionAuditEntryTypesUnderClass, addDefinitionBooleanProperty, addDefinitionDoubleProperty, addDefinitionIntegerProperty, addDefinitionLongProperty, addDefinitionProperties, addDefinitionProperty, addDefinitionStringArrayProperty, addDefinitionStringProperty, addDocumentDefinitionCharacterSet, addDocumentDefinitionContent, addDocumentDefinitionContentBfileReference, addDocumentDefinitionLanguage, addGlobalOperationActionSpecification, addGroupMember, addGroupMembers, addIntegerHandlerProperty, addLifecyclePolicyEntryDefinition, addLifecyclePolicyEntryDefinition, addLongHandlerProperty, addManagedServerDeclaration, addManagedServerDeclaration, addManagedServerDeclaration, addManagedServiceDeclaration, addManagedServiceDeclaration, addPreparedSelectorBindValue, addPreparedSelectorBooleanBindValue, addPreparedSelectorIntegerBindValue, addPreparedSelectorLibraryObjectBindValue, addPreparedSelectorLongBindValue, addPreparedSelectorStringBindValue, addPublicObjectDefinitionCategory, addSchemaObjectDefinitionCategory, addStringArrayHandlerProperty, addStringHandlerProperty, addSystemObjectDefinitionBooleanProperty, addSystemObjectDefinitionCategory, addSystemObjectDefinitionIntegerProperty, addSystemObjectDefinitionLongProperty, addSystemObjectDefinitionStringArrayProperty, addSystemObjectDefinitionStringProperty, addToDocumentDefinition, addToPublicObjectDefinition, applyLogLevelOverride, applyNamedFreezeLock, applySingletonLock, assignClassDomain, assignLifecyclePolicyByCategory, assignValueDefault, assignValueDomain, beginTransaction, businessObjectExists, clearImpersonateUser, clearSharedCaches, cloneCurrentSession, cloneDefinition, cloneDefinition, comment, comment, compareObjects, completeTransaction, concatenateObjectId, concatenateStrings, concatenateStrings, concatenateStrings, concatenateStrings, concatenateStrings, concatenateStrings, concatenateStrings, concatenateToLowerStrings, concatenateToLowerStrings, concatenateToLowerStrings, concatenateToUpperStrings, concatenateToUpperStrings, concatenateToUpperStrings, connect, connect, constructAuditEvent, constructPreparedSelectorGenerator, constructPreparedSelectorGenerator, convertPropertyDefinitionsToHashtable, convertStringArray, convertToBoolean, convertToBoolean, convertToDouble, convertToDouble, convertToInteger, convertToInteger, convertToLong, convertToLong, convertToRelativePath, copy, create, createAccessControlList, createAndApplyAuditTypeList, createApplicationToken, createApplicationToken, createAuditSpecification, createAuditSpecification, createAuditSpecification, createAuditSpecification, createAuditTypeList, createAuditTypeList, createAutoFolderingActionSpecification, createAutoFolderingActionSpecification, createCategorizedDocument, createClassDomain, createClassObject, createClassObject, createCustomLockEntry, createCustomMediaDriverSpecification, createCustomMediaDriverSpecification, createDefinition, createDefinitionFromDefinitionObject, createDefinitionFromObject, createDefinitionObject, createDependentView, createDocument, createDocument, createDocument, createDocumentBatch, createDocuments, createEntireAuditSpecification, createExtendedPermission, createExtendedUserProfile, createFolder, createFolder, createFolder, createFolderLink, createFolderTree, createFormat, createGroup, createGuestSession, createLibraryObject, createLibraryObject, createLifecycleDateRuleSpecification, createLifecycleDateRuleSpecification, createLifecyclePolicy, createLifecyclePolicy, createLifecyclePolicyActionSpecification, createLifecyclePolicyActionSpecification, createLifecyclePolicyEntryDefinition, createLink, createLink, createLink, createLockTypeLookupTables, createMedia, createMedia, createNamedFreezeLock, createNamedPropertyBundle, createNodeConfiguration, createNodeConfiguration, createOperationActionSpecification, createOperationActionSpecification, createOrUpdateClassObject, createPermissionBundle, createPolicy, createPolicyList, createPropertyBundle, createQueue, createRetentionPolicy, createServerConfiguration, createServerConfiguration, createServerSpecification, createServiceConfiguration, createServiceConfiguration, createSession, createSession, createSimplePropertyTable, createSimplePropertyTableList, createStorageGroup, createStorageGroup, createSystemLockObject, createUser, createUserSession, createValueDefault, createValueDomain, deactivateAuditHandlerSpecification, deactivateAuditSpecification, deactivateOperationActionSpecification, deactivateServerSpecification, deactivateSystemObject, deactivateUnknownOperationActionSpecifications, defineAttribute, defineAuditHandlerSpecificationDefinition, defineAuditHandlerSpecificationDefinition, defineAuditTargetSpecificationDefinition, defineAuditTypeListDefinition, defineAuditTypeListDefinition, defineClassObject, defineExistingClassObject, definitionExists, deleteAllCategories, deleteAuditSpecification, deleteNamedFreezeLock, deleteRepositoryParameter, deleteUser, deregisterBusinessObject, deregisterCustomLockType, deregisterDefinition, deregisterLockType, deregisterObject, deregisterSession, deregisterTransaction, determinePrimaryObjectColumnAlias, ensureFreed, executeAutocommitSql, executePreparedSelect, executePreparedSelect, executePreparedSelect, executePreparedSelect, executePreparedSelectCount, executePreparedSelectCount, executePreparedSelectCount, executePreparedSelectFromJson, executePreparedSelectResults, exists, existsRelative, extractContentForIndexing, findOrCreateCompositeGroup, freeClassDomain, freeClassObject, freeExtendedPermission, freeFolder, freeFormat, freeNamedPropertyBundle, freeNamedPropertyBundle, freeNodeConfiguration, freeNodeConfiguration, freeObject, freePermissionBundle, freePolicy, freeServerConfiguration, freeServerConfiguration, freeServiceConfiguration, freeServiceConfiguration, freeUnreferencedContent, freeValueDefault, freeValueDomain, generateClassObjectDefinitionTag, getAbsolutePath, getAclValueForConfigurationObjects, getAttributeValue, getAttributeValue, getAttributeValue, getAuditDriverHelper, getAuditEventDispatcher, getAuditingStartingId, getAuxiliaryTargets, getBindValues, getBypassSecurityAliases, getClassObjectCreationMode, getConsoleInputBoolean, getConsoleInputString, getConsoleInputString, getConsoleInputString, getConsoleSecureInputString, getContentPath, getCurrentSession, getDriver, getIncludedFileSettings, getLogWriter, getManagedServerDeclarations, getManagedServiceDeclarations, getParameterTable, getSavedSearchResultPrimaryObjects, getSavedSearchResults, getShowDates, getStringArray, getStringsFromArrayToken, getStripNumbersFromAuditEventProperties, handleEventPostedForCustomAuditHistory, handleTimerExpiredForCustomAuditHistory, identifyAcl, identifyAcl, identifyApplicationToken, identifyAttribute, identifyAttributePropertyBundle, identifyAuditHandlerSpecification, identifyAuditSpecification, identifyAuditTargetSpecification, identifyAuditTypeList, identifyAuditTypeListBySpecification, identifyAutoFolderingActionSpecification, identifyByAttribute, identifyByPath, identifyByRelativePath, identifyCategory, identifyCategory, identifyClassAcl, identifyClassDomain, identifyClassObject, identifyClassPolicyBundle, identifyClassPropertyBundle, identifyCompositeGroup, identifyCustomLock, identifyCustomMediaDriverSpecification, identifyDependentView, identifyExtendedPermission, identifyFormat, identifyGlobalAuditSpecification, identifyGlobalAuditTypeList, identifyGroup, identifyGuestUser, identifyInstancePropertyBundle, identifyLibraryObject, identifyLifecycleDateRuleSpecification, identifyLifecyclePolicy, identifyLifecyclePolicyActionSpecification, identifyLifecyclePolicyEntry, identifyMedia, identifyMessageEntry, identifyMessageList, identifyNamedFreezeLock, identifyNamedPropertyBundle, identifyNodeConfiguration, identifyObjectAuditSpecification, identifyObjectProperty, identifyOperationActionSpecification, identifyPermissionBundle, identifyPolicy, identifyPolicyList, identifyPrimaryUserProfile, identifyPropertyBundle, identifyQueue, identifyQueueTypeMapBundle, identifyRetentionPolicy, identifyServerConfiguration, identifyServerSpecification, identifyServiceConfiguration, identifySingletonLockType, identifyStorageGroup, identifySystemAcl, identifySystemLockObject, identifySystemUser, identifyUser, identifyValueDefault, identifyValueDomain, identifyWorldGroup, impersonateUser, impersonateUser, initializeManualTextIndexingRetainedEvents, isBootstrapModeEnabled, isDomainScopeImpliedForSearch, isInArray, log, log, lookupAcl, lookupApplicationToken, lookupAuditDomainContext, lookupAuditSpecification, lookupAutoFolderingActionSpecification, lookupBusinessObject, lookupBusinessObjectHashtable, lookupBusinessObjectList, lookupClassAcl, lookupDatatype, lookupDatatypeString, lookupDefinition, lookupDefinition, lookupDirectoryObject, lookupDocument, lookupFolder, lookupFormat, lookupFormatFromCollection, lookupGroup, lookupMedia, lookupMessageEntry, lookupObject, lookupObject, lookupObjectAttributeValue, lookupObjectId, lookupOperationActionSpecification, lookupPublicObject, lookupQueue, lookupSessionByTag, lookupSystemAcl, lookupSystemLockObject, lookupTagBySessionId, lookupUser, lookupUserFromCollection, makeDefinitionReadOnly, markCurrentAuditingId, modifyClassObject, move, moveCategory, normalizeBooleanString, notifyCustomAuditHistoryHandler, objectExists, postCustomAuditEvent, postCustomAuditEvent, postCustomAuditEvent, postSystemAuditEvent, postSystemAuditEvent, preprocessDocumentSettings, preprocessPublicObjectSettings, printStackTrace, processManualTextIndexingRetainedEvents, processRawAuditEvents, purgeGlobalAuditHistory, reactivateUnknownOperationActionSpecifications, readDocumentContent, refreshDependentView, registerAllNonCustomAuditTypes, registerAuditEventType, registerAuditEventType, registerBusinessObject, registerCustomAuditType, registerCustomLockType, registerDefinition, registerLockType, registerNewSession, registerObject, registerTransaction, releaseLock, releaseManualLock, removeAcesForFreedGrantees, removeAllAttachments, removeAttachment, removeAttribute, removeClassProperty, removeCustomLockEntry, removeGroupMembers, removeNamedFreezeLock, removeProperties, removeServerFromNodeConfiguration, removeServiceFromNodeConfiguration, removeSession, removeSessionState, removeSingletonLock, removeTag, rename, replaceMediaLookupsByFormat, replaceSession, resetFolderCountInfo, restoreGlobalOperationActionSpecification, runSchemaCreator, runScript, saveGlobalOperationActionSpecification, saveSearchResultPrimaryObjects, saveSearchResults, searchAuditHistory, searchAuditHistory, searchAuditHistory, sessionExists, setAdminMode, setAdminMode, setArrayTokenDelimiter, setAuditingStartingId, setAuditSpecificationAuditHandlerSpecificationDefinition, setAuditSpecificationAuditTargetSpecificationDefinition, setAuditSpecificationAuditTypeListDefinition, setAuditTargetSpecificationDefinitionTarget, setBooleanInstanceProperty, setClassObjectCreationMode, setClassPolicyList, setClassProperty, setCreateCategoriesServerSideOption, setCurrentSession, setCurrentSession, setDateFormat, setDefaultAuditEventSortClause, setDefaultMedia, setDefaultScriptOperationsClass, setDefaultStorageGroup, setDefinitionAttribute, setDefinitionAttribute, setDefinitionBooleanAttribute, setDefinitionClassObjectAttribute, setDefinitionDateAttribute, setDefinitionDirectoryObjectArrayAttribute, setDefinitionDirectoryObjectAttribute, setDefinitionDoubleAttribute, setDefinitionIntegerAttribute, setDefinitionLongAttribute, setDefinitionNullStringAttribute, setDefinitionObjectAttribute, setDefinitionSchemaObjectArrayAttribute, setDefinitionSchemaObjectAttribute, setDefinitionStringArrayAttribute, setDefinitionStringAttribute, setDefinitionSystemObjectAttribute, setDocumentDefinitionContentObjectDefinition, setGlobalAuditTypeList, setGlobalOperationActionSpecifications, setInstallationMode, setInstallationMode, setInstanceProperty, setIntegerInstanceProperty, setLifecyclePolicyDefinitionDeleteEntriesOption, setLocale, setLongInstanceProperty, setLongSessionState, setMainSessionAsCurrentSession, setMediaLookupByFormat, setNumberFormat, setObjectProperty, setPreventSessionTimeouts, setPreventSessionTimeouts, setProperty, setPublicObjectInstanceProperty, setRepositoryParameter, setStringInstanceProperty, setStringSessionState, setSubstitutionPrefix, setSystemAdminMode, setSystemAdminMode, setSystemObjectInstanceProperty, setTimeoutPeriodOption, setTimeZone, setUserCreateOptions, setUserDefaultAcl, setUserDeleteOptions, showAcl, showAggregateAuditEventColumns, showAllAutoFolderingActionSpecifications, showAllClassAcls, showAllClassDomains, showAllClassObjects, showAllCustomAuditSpecifications, showAllCustomMediaDriverSpecifications, showAllDependentViews, showAllExtendedPermissions, showAllExternalRetentionPolicies, showAllFormats, showAllLifecycleDateRuleSpecifications, showAllLifecyclePolicies, showAllLifecyclePolicyActionSpecifications, showAllMedias, showAllNodeConfigurations, showAllNodeConfigurations, showAllOperationActionSpecifications, showAllPermissionBundles, showAllPolicies, showAllPolicyLists, showAllRepositoryParameters, showAllRetentionPolicies, showAllServerConfigurations, showAllServerConfigurations, showAllServerSpecifications, showAllServiceConfigurations, showAllServiceConfigurations, showAllStorageGroups, showAllSystemAcls, showAllValueDefaults, showAllValueDomains, showApplicationToken, showApplicationTokens, showAttachments, showAttribute, showAttribute, showAuditCertificates, showAuditEventOperationTypes, showAuditSpecification, showAuditTypeList, showAuditTypesForClass, showAuditTypesForCreateOperations, showAuditTypesForFreeOperations, showAuditTypesUnderClass, showAutoFolderingActionSpecification, showCapabilities, showClassDomain, showClassDomain, showClassObject, showClassObjectAndSubNames, showClassObjectAndSubs, showCompositeGroup, showCreateClassObjectScript, showCurrentUser, showCustomAuditHistory, showCustomAuditHistory, showCustomAuditTypes, showCustomMediaDriverSpecification, showDefaultMedia, showDefaultStorageGroup, showDefineAttributeScript, showDefinition, showDefinitionObject, showDependentView, showDocument, showDocumentCharacterSet, showDocumentContentInfo, showDocumentContents, showDocumentContents, showDocumentContents, showDocumentLanguage, showDocumentsWithLifecyclePolicy, showExpandedAuditTypeList, showExtendedPermission, showFolder, showFolder, showFolderCountInfo, showFormat, showGlobalAuditHistory, showGlobalAuditHistory, showGlobalAuditSpecification, showGlobalAuditTypeList, showGlobalOperationActionSpecifications, showGroup, showInstanceProperty, showInstancePropertyBundle, showLibraryObject, showLibraryObject, showLifecycleDateRuleSpecification, showLifecyclePolicy, showLifecyclePolicyActionSpecification, showLifecyclePolicyEntry, showLink, showLocalizer, showLockEntry, showLockEntryInfo, showLockTypeLookupTables, showMedia, showMediaLookupByFormatMappings, showMessageEntry, showMessageList, showNamedPropertyBundle, showNodeConfiguration, showNodeConfiguration, showObject, showObjectAuditHistory, showObjectAuditHistory, showObjectAuditSpecification, showOperationActionSpecification, showParsedArrayToken, showParsedOperationString, showPermissionBundle, showPolicy, showPolicyList, showPreparedSelector, showPreparedSelector, showProperty, showPropertyBundle, showRepositoryParameter, showRetentionPolicy, showRuntimeStatistics, showSavedSearchResultPrimaryObjects, showSavedSearchResults, showServerConfiguration, showServerConfiguration, showServerSpecification, showServiceConfiguration, showServiceConfiguration, showServiceStatistics, showSessionCacheStatistics, showSessionState, showSimplePropertyTable, showSimplePropertyTableList, showStorageGroup, showUser, showValueDefault, showValueDefault, showValueDomain, showValueDomain, sleep, syncContentIndex, syncIndex, testJsonString, tokenToDirectoryObjectArray, tokenToDirectoryUserArray, tokenToDocumentArray, transactionExists, unregisterAuditEventType, unregisterCustomAuditType, update, updateAccessControlList, updateClassDomain, updateDefinitionObject, updateLibraryObject, updateLibraryObject, updateLibraryObject, updateNodeConfiguration, updateNodeConfiguration, updateServerConfiguration, updateServerConfiguration, updateServiceConfiguration, updateServiceConfiguration, updateUserPassword, updateValueDefault, updateValueDomain, verifyBusinessObjectTagNotExists, verifyDefinitionTagNotExists, verifyDefinitionWriteable, verifyObjectTagNotExists, writeConsoleOutputString, writeConsoleOutputString, writeDocumentContentToFile, zeroPad
public StixOperations(ScriptDriver driver)
driver
- the main script driver instancepublic void searchStixDomainObjectByIndexedName(AttributeValueTable avt) throws IfsException
avt
- the named argumentsIfsException
- if the operation failspublic void createStixTrainingReport(AttributeValueTable avt) throws IfsException
The keys supported by this operation:
avt
- the named argumentsIfsException
- if the operation failspublic void identifyStixReport(AttributeValueTable avt) throws IfsException
The keys supported by this operation:
avt
- the named argumentsIfsException
- if the operation failspublic void showCreatedStixReportObjects(AttributeValueTable avt) throws IfsException
The keys supported by this operation:
avt
- the named argumentsIfsException
- if the operation failspublic void showStixReport(StixReport report, String prefix) throws IfsException
report
- the StixReport to showprefix
- the indentation prefixIfsException
- if the operation failspublic void createStixThreatActor(AttributeValueTable avt) throws IfsException
The keys supported by this operation:
avt
- the named argumentsIfsException
- if the operation failspublic void showStixThreatActor(StixThreatActor obj, String prefix) throws IfsException
obj
- the StixThreatActor to showprefix
- the indentation prefixIfsException
- if the operation failspublic void createStixIntrusionSet(AttributeValueTable avt) throws IfsException
The keys supported by this operation:
avt
- the named argumentsIfsException
- if the operation failspublic void showStixIntrusionSet(StixIntrusionSet obj, String prefix) throws IfsException
obj
- the StixIntrusionSet to showprefix
- the indentation prefixIfsException
- if the operation failspublic void createStixCampaign(AttributeValueTable avt) throws IfsException
The keys supported by this operation:
avt
- the named argumentsIfsException
- if the operation failspublic void showStixCampaign(StixCampaign obj, String prefix) throws IfsException
obj
- the StixCampaign to showprefix
- the indentation prefixIfsException
- if the operation failspublic void createStixAttackIncident(AttributeValueTable avt) throws IfsException
The keys supported by this operation:
avt
- the named argumentsIfsException
- if the operation failspublic void showStixAttackIncident(StixAttackIncident obj, String prefix) throws IfsException
obj
- the StixAttackIncident to showprefix
- the indentation prefixIfsException
- if the operation failspublic void createStixAttackDamage(AttributeValueTable avt) throws IfsException
The keys supported by this operation:
avt
- the named argumentsIfsException
- if the operation failspublic void showStixAttackDamage(StixAttackDamage obj, String prefix) throws IfsException
obj
- the StixAttackDamage to showprefix
- the indentation prefixIfsException
- if the operation failspublic void createStixAttackPattern(AttributeValueTable avt) throws IfsException
The keys supported by this operation:
avt
- the named argumentsIfsException
- if the operation failspublic void showStixAttackPattern(StixAttackPattern obj, String prefix) throws IfsException
obj
- the StixAttackPattern to showprefix
- the indentation prefixIfsException
- if the operation failspublic void createStixMalware(AttributeValueTable avt) throws IfsException
The keys supported by this operation:
avt
- the named argumentsIfsException
- if the operation failspublic void showStixMalware(StixMalware obj, String prefix) throws IfsException
obj
- the StixMalware to showprefix
- the indentation prefixIfsException
- if the operation failspublic void createStixTool(AttributeValueTable avt) throws IfsException
The keys supported by this operation:
avt
- the named argumentsIfsException
- if the operation failspublic void showStixTool(StixTool obj, String prefix) throws IfsException
obj
- the StixTool to showprefix
- the indentation prefixIfsException
- if the operation failspublic void createStixVulnerability(AttributeValueTable avt) throws IfsException
The keys supported by this operation:
avt
- the named argumentsIfsException
- if the operation failspublic void showStixVulnerability(StixVulnerability obj, String prefix) throws IfsException
obj
- the StixVulnerability to showprefix
- the indentation prefixIfsException
- if the operation failspublic void createStixCourseOfAction(AttributeValueTable avt) throws IfsException
The keys supported by this operation:
avt
- the named argumentsIfsException
- if the operation failspublic void showStixCourseOfAction(StixCourseOfAction obj, String prefix) throws IfsException
obj
- the StixCourseOfAction to showprefix
- the indentation prefixIfsException
- if the operation failspublic void createStixLocation(AttributeValueTable avt) throws IfsException
The keys supported by this operation:
avt
- the named argumentsIfsException
- if the operation failspublic void showStixLocation(StixLocation obj, String prefix) throws IfsException
obj
- the StixLocation to showprefix
- the indentation prefixIfsException
- if the operation failspublic void createStixTimeReference(AttributeValueTable avt) throws IfsException
The keys supported by this operation:
avt
- the named argumentsIfsException
- if the operation failspublic void showStixTimeReference(StixTimeReference obj, String prefix) throws IfsException
obj
- the StixTimeReference to showprefix
- the indentation prefixIfsException
- if the operation failspublic void createStixIndicator(AttributeValueTable avt) throws IfsException
The keys supported by this operation:
avt
- the named argumentsIfsException
- if the operation failspublic void showStixIndicator(StixIndicator obj, String prefix) throws IfsException
obj
- the StixIndicator to showprefix
- the indentation prefixIfsException
- if the operation failspublic void createStixObservedData(AttributeValueTable avt) throws IfsException
The keys supported by this operation:
avt
- the named argumentsIfsException
- if the operation failspublic void showStixObservedData(StixObservedData obj, String prefix) throws IfsException
obj
- the StixObservedData to showprefix
- the indentation prefixIfsException
- if the operation failspublic void createStixIdentity(AttributeValueTable avt) throws IfsException
The keys supported by this operation:
avt
- the named argumentsIfsException
- if the operation failspublic void showStixIdentity(StixIdentity obj, String prefix) throws IfsException
obj
- the StixIdentity to showprefix
- the indentation prefixIfsException
- if the operation failspublic void createStixRelationObject(AttributeValueTable avt) throws IfsException
The keys supported by this operation:
avt
- the named argumentsIfsException
- if the operation failspublic void showStixRelationObject(String tag) throws IfsException
name
- the StixRelationObject tagIfsException
- if the operation failspublic void showStixRelationObject(StixRelationObject obj, String prefix) throws IfsException
obj
- the StixRelationObject to showprefix
- the indentation prefixIfsException
- if the operation failspublic void showStixDomainObject(String tag) throws IfsException
tag
- the StixDomainObject tagIfsException
- if the operation failspublic void showStixDomainObject(StixDomainObject obj, String prefix) throws IfsException
tag
- the StixDomainObject tagIfsException
- if the operation failspublic void showJson(AttributeValueTable avt) throws IfsException
The keys supported by this operation:
showJson
in class ExtractionOperations
avt
- the named argumentsIfsException
- if the operation failspublic void executeStixTrainingReport(AttributeValueTable avt) throws IfsException
For JSON reports, this performs a StixJsonParser prepare() and execute().
The keys supported by this operation:
avt
- the named argumentsIfsException
- if the operation failspublic void createJsonStixReportBatch(AttributeValueTable avt) throws IfsException
The keys supported by this operation:
avt
- the named argumentsIfsException
- if the operation failspublic void showStixReportBatch(AttributeValueTable avt) throws IfsException
The keys supported by this operation:
avt
- the named argumentsIfsException
- if the operation failspublic void showStixReportBatch(Folder topFolder, boolean verbose, String indent) throws IfsException
topFolder
- the top folderverbose
- whether the output should be verboseIfsException
- if the operation failsprotected void showRelations(StixDomainObject obj, String prefix) throws IfsException
obj
- the StixDomainObjectprefix
- the logging prefixIfsException
- if the operation failsprotected StixDomainObject lookupStixDomainObject(LibrarySession sess, String tag) throws IfsException
A RuntimeException is thrown if there is no object registered with the specified tag, or if the object registered is not a StixDomainObject.
sess
- the sessiontag
- the object tagIfsException
- if the operation failsprotected StixReport lookupStixReport(LibrarySession sess, String tag) throws IfsException
A RuntimeException is thrown if there is no object registered with the specified tag, or if the object registered is not a StixReport.
sess
- the sessiontag
- the object tagIfsException
- if the operation failsCopyright © 2023. All rights reserved.