Skip to content

treyka/threaty_threatego

Repository files navigation

threaty_threatego

What is it?

  • A Maltego entity pack encompassing the entire STIX data model and a targeted subset of the CybOX data model.

But wait, wasn't there already one of those?

  • Yeah, this was inspired by STIXtego but is a wholly new project. @akniffe1 included a bunch of stuff that wasn't pertinent to the STIX/CybOX data models and omitted a lot of things that were. As co-chair in the OASIS CTI TC standards committee governing the STIX/CybOX standards, I wanted a purer and complete set of Maltego entities for representing STIX/CybOX. Hence this project.

Okay, I get it. Now what?

  • You can just download the .mtx included in this project and load it right into Maltego or you can clone this project and build it yourself by running the included build.sh.

  • The STIX entities encompass the entire STIX 1.2 data model. There were places where due to limitations in Maltego's available datatypes I had to take a few shortcuts but I think it's pretty solid.

  • I'm working on a set of Maltego entities covering a targeted subset of the CybOX 2.1 data model. (These should be available shortly.)

How can I help?

Future plans

  • As the STIX 2.0 and CybOX 3.0 revisions get closer to actual draft specs, I plan to add support for those on a separate branch.

About

Maltego entity pack encompassing the entire STIX 1.2 data model and a targeted subset of the CybOX 2.1 data model

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages