stix2

package module

Go to main page

Versions in this module

v0

v0.10.4

Oct 3, 2024

v0.10.3

Jan 5, 2024

Changes in this version

type ExtensionType

+ func (o ExtensionType) MarshalJSON() ([]byte, error)

v0.10.2

Dec 6, 2022

Changes in this version

type OpinionValue

+ func (typ OpinionValue) MarshalJSON() ([]byte, error)

v0.10.1

Nov 5, 2022

Changes in this version

+ const RegionSouthEasternAsia

v0.10.0

Oct 30, 2022

Changes in this version

type Collection

+ func (c *Collection) Incident(id Identifier) *Incident

+ func (c *Collection) Incidents() []*Incident

+ type Incident struct

+ Description string

+ Name string

+ func NewIncident(name string, opts ...STIXOption) (*Incident, error)

+ func (o *Incident) MarshalJSON() ([]byte, error)

type STIXType

+ const TypeIncident

v0.9.0

Jul 25, 2022

Changes in this version

type CollectionOption

+ func UseCustomParser(typ STIXType, handler func(data []byte) (STIXObject, error)) CollectionOption

v0.8.2

Jun 19, 2022

Changes in this version

type EncryptionAlgorithm

+ func (typ EncryptionAlgorithm) MarshalJSON() ([]byte, error)

type RelationshipType

+ const RelationshipTypeInvestigates

+ const RelationshipTypeRemediates

v0.8.1

Dec 19, 2021

v0.8.0

Jul 18, 2021

Changes in this version

+ const IdentityClassUnknown

+ const IdentitySectorChemical

+ const IdentitySectorCommercial

+ const IdentitySectorEmergencyServices

+ const IdentitySectorGovernment

+ const IdentitySectorInfrastructureDams

+ const IdentitySectorInfrastructureNuclear

+ const IdentitySectorInfrastructureWater

+ const InfrastructureTypeWorkstation

type Artifact

+ func (o *Artifact) MarshalJSON() ([]byte, error)

type AttackPattern

+ func (o *AttackPattern) MarshalJSON() ([]byte, error)

type AutonomousSystem

+ func (o *AutonomousSystem) MarshalJSON() ([]byte, error)

type Campaign

+ func (o *Campaign) MarshalJSON() ([]byte, error)

type Collection

+ func (c *Collection) ExtensionDefinition(id Identifier) *ExtensionDefinition

+ func (c *Collection) ExtensionDefinitions() []*ExtensionDefinition

+ func (c *Collection) GetAll(typ STIXType) []STIXObject

type CollectionOption

+ func DropCustomOption() CollectionOption

type CourseOfAction

+ func (o *CourseOfAction) MarshalJSON() ([]byte, error)

+ type CustomObject map[string]interface

+ func (c CustomObject) Get(key string) interface{}

+ func (c CustomObject) GetAsNumber(key string) int64

+ func (c CustomObject) GetAsString(key string) string

+ func (c CustomObject) GetAsStringSlice(key string) []string

+ func (c CustomObject) GetCreated() *time.Time

+ func (c CustomObject) GetID() Identifier

+ func (c CustomObject) GetModified() *time.Time

+ func (c CustomObject) GetType() STIXType

+ func (c CustomObject) Set(key string, val interface{})

+ func (s *CustomObject) GetExtendedTopLevelProperties() *CustomObject

type Directory

+ func (o *Directory) MarshalJSON() ([]byte, error)

type DomainName

+ func (o *DomainName) MarshalJSON() ([]byte, error)

type EmailAddress

+ func (o *EmailAddress) MarshalJSON() ([]byte, error)

type EmailMessage

+ func (o *EmailMessage) MarshalJSON() ([]byte, error)

+ type ExtensionDefinition struct

+ Created *Timestamp

+ CreatedBy Identifier

+ Description string

+ ExtensionProperties []string

+ ExtensionTypes []ExtensionType

+ ExternalReferences []*ExternalReference

+ GranularMarking []*GranularMarking

+ ID Identifier

+ Labels []string

+ Modified *Timestamp

+ Name string

+ ObjectMarking []Identifier

+ Revoked bool

+ Schema string

+ SpecVersion string

+ Type STIXType

+ Version string

+ func NewExtensionDefinition(name string, schema string, version string, extTypes []ExtensionType, ...) (*ExtensionDefinition, error)

+ func (e *ExtensionDefinition) GetCreated() *time.Time

+ func (e *ExtensionDefinition) GetID() Identifier

+ func (e *ExtensionDefinition) GetModified() *time.Time

+ func (e *ExtensionDefinition) GetType() STIXType

+ func (s *ExtensionDefinition) GetExtendedTopLevelProperties() *CustomObject

+ type ExtensionType uint8

+ const ExtensionTypeInvalid

+ const ExtensionTypeNewSCO

+ const ExtensionTypeNewSDO

+ const ExtensionTypeNewSRO

+ const ExtensionTypePropertyExtension

+ const ExtensionTypeToplevelPropertyExtension

+ func (typ *ExtensionType) UnmarshalJSON(b []byte) error

+ func (typ ExtensionType) String() string

+ type Extensions map[string]interface

+ func (o *Extensions) UnmarshalJSON(b []byte) error

type File

+ func (o *File) MarshalJSON() ([]byte, error)

type Grouping

+ func (o *Grouping) MarshalJSON() ([]byte, error)

type HashAlgorithm

+ const TLSH

type IPv4Address

+ func (o *IPv4Address) MarshalJSON() ([]byte, error)

type IPv6Address

+ func (o *IPv6Address) MarshalJSON() ([]byte, error)

type Identifier

+ func NewObservableIdentifier(value string, typ STIXType) Identifier

type Identity

+ func (o *Identity) MarshalJSON() ([]byte, error)

type Indicator

+ func (o *Indicator) MarshalJSON() ([]byte, error)

type Infrastructure

+ func (o *Infrastructure) MarshalJSON() ([]byte, error)

type IntrusionSet

+ func (o *IntrusionSet) MarshalJSON() ([]byte, error)

type LanguageContent

+ Extensions Extensions

+ func (o *LanguageContent) MarshalJSON() ([]byte, error)

+ func (s *LanguageContent) GetExtendedTopLevelProperties() *CustomObject

type Location

+ func (o *Location) MarshalJSON() ([]byte, error)

type MACAddress

+ func (o *MACAddress) MarshalJSON() ([]byte, error)

type Malware

+ func (o *Malware) MarshalJSON() ([]byte, error)

type MalwareAnalysis

+ func (c *MalwareAnalysis) AddAnalysisOf(id Identifier, opts ...STIXOption) (*Relationship, error)

+ func (o *MalwareAnalysis) MarshalJSON() ([]byte, error)

type MarkingDefinition

+ Extensions Extensions

+ func (o *MarkingDefinition) MarshalJSON() ([]byte, error)

+ func (s *MarkingDefinition) GetExtendedTopLevelProperties() *CustomObject

type Mutex

+ func (o *Mutex) MarshalJSON() ([]byte, error)

type NetworkTraffic

+ func (o *NetworkTraffic) MarshalJSON() ([]byte, error)

type Note

+ func (o *Note) MarshalJSON() ([]byte, error)

type ObservedData

+ func (o *ObservedData) MarshalJSON() ([]byte, error)

type Opinion

+ func (o *Opinion) MarshalJSON() ([]byte, error)

type Process

+ func (o *Process) MarshalJSON() ([]byte, error)

type RegistryKey

+ func (o *RegistryKey) MarshalJSON() ([]byte, error)

type Relationship

+ func (o *Relationship) MarshalJSON() ([]byte, error)

type RelationshipType

+ const RelationshipTypeAnalysisOf

type Report

+ func (o *Report) MarshalJSON() ([]byte, error)

type STIXCyberObservableObject

+ func (s *STIXCyberObservableObject) GetExtendedTopLevelProperties() *CustomObject

type STIXDomainObject

+ Extensions Extensions

+ func (s *STIXDomainObject) GetExtendedTopLevelProperties() *CustomObject

type STIXObject

+ GetExtendedTopLevelProperties func() *CustomObject

type STIXOption

+ func OptionExtensionProperties(value []string) STIXOption

type STIXRelationshipObject

+ Extensions Extensions

+ func (s *STIXRelationshipObject) GetExtendedTopLevelProperties() *CustomObject

type STIXType

+ const TypeExtensionDefinition

type Sighting

+ func (o *Sighting) MarshalJSON() ([]byte, error)

type Software

+ func (o *Software) MarshalJSON() ([]byte, error)

type ThreatActor

+ func (o *ThreatActor) MarshalJSON() ([]byte, error)

type Tool

+ func (o *Tool) MarshalJSON() ([]byte, error)

type URL

+ func (o *URL) MarshalJSON() ([]byte, error)

type UserAccount

+ func (o *UserAccount) MarshalJSON() ([]byte, error)

type Vulnerability

+ func (o *Vulnerability) MarshalJSON() ([]byte, error)

type WindowsPEOptionalHeader

+ SizeOfInitializedData int64

type WindowsProcessExtension

+ IntegrityLevel WindowsIntegrityLevel

type X509Certificate

+ SubjectPublicKeyAlgorithm string

+ func (o *X509Certificate) MarshalJSON() ([]byte, error)

v0.7.0

Mar 28, 2021

Changes in this version

+ type Collection struct

+ func New(opts ...CollectionOption) *Collection

+ func (c *Collection) AS(id Identifier) *AutonomousSystem

+ func (c *Collection) ASs() []*AutonomousSystem

+ func (c *Collection) Add(obj STIXObject) error

+ func (c *Collection) AllMalware() []*Malware

+ func (c *Collection) AllNetworkTraffic() []*NetworkTraffic

+ func (c *Collection) AllObjects() []STIXObject

+ func (c *Collection) AllObservedData() []*ObservedData

+ func (c *Collection) AllSoftware() []*Software

+ func (c *Collection) Artifact(id Identifier) *Artifact

+ func (c *Collection) Artifacts() []*Artifact

+ func (c *Collection) AttackPattern(id Identifier) *AttackPattern

+ func (c *Collection) AttackPatterns() []*AttackPattern

+ func (c *Collection) Campaign(id Identifier) *Campaign

+ func (c *Collection) Campaigns() []*Campaign

+ func (c *Collection) CourseOfAction(id Identifier) *CourseOfAction

+ func (c *Collection) CourseOfActions() []*CourseOfAction

+ func (c *Collection) Directories() []*Directory

+ func (c *Collection) Directory(id Identifier) *Directory

+ func (c *Collection) DomainName(id Identifier) *DomainName

+ func (c *Collection) DomainNames() []*DomainName

+ func (c *Collection) EmailAddress(id Identifier) *EmailAddress

+ func (c *Collection) EmailAddresses() []*EmailAddress

+ func (c *Collection) EmailMessage(id Identifier) *EmailMessage

+ func (c *Collection) EmailMessages() []*EmailMessage

+ func (c *Collection) File(id Identifier) *File

+ func (c *Collection) Files() []*File

+ func (c *Collection) Get(id Identifier) STIXObject

+ func (c *Collection) Group(id Identifier) *Grouping

+ func (c *Collection) Groups() []*Grouping

+ func (c *Collection) IPv4Address(id Identifier) *IPv4Address

+ func (c *Collection) IPv4Addresses() []*IPv4Address

+ func (c *Collection) IPv6Address(id Identifier) *IPv6Address

+ func (c *Collection) IPv6Addresses() []*IPv6Address

+ func (c *Collection) Identities() []*Identity

+ func (c *Collection) Identity(id Identifier) *Identity

+ func (c *Collection) Indicator(id Identifier) *Indicator

+ func (c *Collection) Indicators() []*Indicator

+ func (c *Collection) Infrastructure(id Identifier) *Infrastructure

+ func (c *Collection) Infrastructures() []*Infrastructure

+ func (c *Collection) IntrusionSet(id Identifier) *IntrusionSet

+ func (c *Collection) IntrusionSets() []*IntrusionSet

+ func (c *Collection) LanguageContent(id Identifier) *LanguageContent

+ func (c *Collection) LanguageContents() []*LanguageContent

+ func (c *Collection) Location(id Identifier) *Location

+ func (c *Collection) Locations() []*Location

+ func (c *Collection) MAC(id Identifier) *MACAddress

+ func (c *Collection) MACs() []*MACAddress

+ func (c *Collection) Malware(id Identifier) *Malware

+ func (c *Collection) MalwareAnalyses() []*MalwareAnalysis

+ func (c *Collection) MalwareAnalysis(id Identifier) *MalwareAnalysis

+ func (c *Collection) MarkingDefinition(id Identifier) *MarkingDefinition

+ func (c *Collection) MarkingDefinitions() []*MarkingDefinition

+ func (c *Collection) Mutex(id Identifier) *Mutex

+ func (c *Collection) Mutexes() []*Mutex

+ func (c *Collection) NetworkTraffic(id Identifier) *NetworkTraffic

+ func (c *Collection) Note(id Identifier) *Note

+ func (c *Collection) Notes() []*Note

+ func (c *Collection) ObservedData(id Identifier) *ObservedData

+ func (c *Collection) Opinion(id Identifier) *Opinion

+ func (c *Collection) Opinions() []*Opinion

+ func (c *Collection) Process(id Identifier) *Process

+ func (c *Collection) Processes() []*Process

+ func (c *Collection) RegistryKey(id Identifier) *RegistryKey

+ func (c *Collection) RegistryKeys() []*RegistryKey

+ func (c *Collection) Relationship(id Identifier) *Relationship

+ func (c *Collection) Relationships() []*Relationship

+ func (c *Collection) Report(id Identifier) *Report

+ func (c *Collection) Reports() []*Report

+ func (c *Collection) Sighting(id Identifier) *Sighting

+ func (c *Collection) Sightings() []*Sighting

+ func (c *Collection) Software(id Identifier) *Software

+ func (c *Collection) ThreatActor(id Identifier) *ThreatActor

+ func (c *Collection) ThreatActors() []*ThreatActor

+ func (c *Collection) ToBundle() (*Bundle, error)

+ func (c *Collection) Tool(id Identifier) *Tool

+ func (c *Collection) Tools() []*Tool

+ func (c *Collection) URL(id Identifier) *URL

+ func (c *Collection) URLs() []*URL

+ func (c *Collection) UserAccount(id Identifier) *UserAccount

+ func (c *Collection) UserAccounts() []*UserAccount

+ func (c *Collection) Vulnerabilities() []*Vulnerability

+ func (c *Collection) Vulnerability(id Identifier) *Vulnerability

+ func (c *Collection) X509Certificate(id Identifier) *X509Certificate

+ func (c *Collection) X509Certificates() []*X509Certificate

+ type CollectionOption func(c *Collection)

+ func NoSortOption() CollectionOption

type Identity

+ Class string

type Indicator

+ KillChainPhase []*KillChainPhase

+ Types []string

type Infrastructure

+ KillChainPhase []*KillChainPhase

+ Types []string

type IntrusionSet

+ SecondaryMotivations []string

type Malware

+ OperatingSystems []Identifier

+ Types []string

type MalwareAnalysis

+ OperatingSystem Identifier

type RelationshipType

+ const RelationshipTypeAttributedTo

+ type STIXObject interface

+ GetCreated func() *time.Time

+ GetID func() Identifier

+ GetModified func() *time.Time

+ GetType func() STIXType

+ type STIXOption func(a STIXObject) error

+ func OptionAbstract(s string) STIXOption

+ func OptionAccountCreated(s *Timestamp) STIXOption

+ func OptionAccountExpires(s *Timestamp) STIXOption

+ func OptionAccountFirstLogin(s *Timestamp) STIXOption

+ func OptionAccountLastLogin(s *Timestamp) STIXOption

+ func OptionAccountLogin(s string) STIXOption

+ func OptionAccountType(s string) STIXOption

+ func OptionAdditionalHeaderFields(s map[string]string) STIXOption

+ func OptionAdministrativeArea(a string) STIXOption

+ func OptionAliases(a []string) STIXOption

+ func OptionAnalysisDefinitionVersion(s string) STIXOption

+ func OptionAnalysisEnded(s *Timestamp) STIXOption

+ func OptionAnalysisEngineVersion(s string) STIXOption

+ func OptionAnalysisStarted(s *Timestamp) STIXOption

+ func OptionArchitecture(s []string) STIXOption

+ func OptionAtime(s *Timestamp) STIXOption

+ func OptionAuthors(s []string) STIXOption

+ func OptionBCC(s []Identifier) STIXOption

+ func OptionBelongsTo(s Identifier) STIXOption

+ func OptionBody(s string) STIXOption

+ func OptionBodyMultipart(s []EmailMIME) STIXOption

+ func OptionCC(s []Identifier) STIXOption

+ func OptionCPE(s string) STIXOption

+ func OptionCanEscalatePrivs(s bool) STIXOption

+ func OptionCapabilities(s []string) STIXOption

+ func OptionChild(s []Identifier) STIXOption

+ func OptionCity(c string) STIXOption

+ func OptionClass(s string) STIXOption

+ func OptionCommandLine(s string) STIXOption

+ func OptionConfidence(confidence int) STIXOption

+ func OptionConfigurationVersion(s string) STIXOption

+ func OptionContactInformation(s string) STIXOption

+ func OptionContains(s []Identifier) STIXOption

+ func OptionContent(s Identifier) STIXOption

+ func OptionContentType(s string) STIXOption

+ func OptionCount(c int64) STIXOption

+ func OptionCreated(t *Timestamp) STIXOption

+ func OptionCreatedBy(id Identifier) STIXOption

+ func OptionCreatedTime(s *Timestamp) STIXOption

+ func OptionCreatorUser(s Identifier) STIXOption

+ func OptionCredential(s string) STIXOption

+ func OptionCredentialLastChanged(s *Timestamp) STIXOption

+ func OptionCtime(s *Timestamp) STIXOption

+ func OptionCwd(s string) STIXOption

+ func OptionDate(s *Timestamp) STIXOption

+ func OptionDefanged(b bool) STIXOption

+ func OptionDescription(des string) STIXOption

+ func OptionDisplayName(s string) STIXOption

+ func OptionDst(s Identifier) STIXOption

+ func OptionDstByteCount(s int64) STIXOption

+ func OptionDstPackets(s int64) STIXOption

+ func OptionDstPayload(s Identifier) STIXOption

+ func OptionDstPort(s int64) STIXOption

+ func OptionEncapsulated(s Identifier) STIXOption

+ func OptionEncapsulates(s []Identifier) STIXOption

+ func OptionEncryption(s EncryptionAlgorithm) STIXOption

+ func OptionEnd(s *Timestamp) STIXOption

+ func OptionEnvVars(s map[string]string) STIXOption

+ func OptionExplanation(s string) STIXOption

+ func OptionExtension(name string, value interface{}) STIXOption

+ func OptionExternalReferences(refs []*ExternalReference) STIXOption

+ func OptionFirstSeen(t *Timestamp) STIXOption

+ func OptionFrom(s Identifier) STIXOption

+ func OptionGoals(s []string) STIXOption

+ func OptionGranularMarking(gm []*GranularMarking) STIXOption

+ func OptionHashes(s Hashes) STIXOption

+ func OptionHostVM(s Identifier) STIXOption

+ func OptionIPFIX(s map[string]interface{}) STIXOption

+ func OptionImage(s Identifier) STIXOption

+ func OptionInstalledSoftware(s []Identifier) STIXOption

+ func OptionIsActive(s bool) STIXOption

+ func OptionIsDisabled(s bool) STIXOption

+ func OptionIsHidden(s bool) STIXOption

+ func OptionIsPrivileged(s bool) STIXOption

+ func OptionIsServiceAccount(s bool) STIXOption

+ func OptionIssuer(s string) STIXOption

+ func OptionKey(s string) STIXOption

+ func OptionKillChainPhase(k []*KillChainPhase) STIXOption

+ func OptionLabels(labels []string) STIXOption

+ func OptionLang(lang string) STIXOption

+ func OptionLanguages(s []string) STIXOption

+ func OptionLastSeen(t *Timestamp) STIXOption

+ func OptionMagicNumber(s Hex) STIXOption

+ func OptionMessageID(s string) STIXOption

+ func OptionMimeType(s string) STIXOption

+ func OptionModified(t *Timestamp) STIXOption

+ func OptionModifiedTime(s *Timestamp) STIXOption

+ func OptionModules(s []string) STIXOption

+ func OptionMtime(s *Timestamp) STIXOption

+ func OptionName(n string) STIXOption

+ func OptionNameEnc(s string) STIXOption

+ func OptionNumberOfSubkeys(s int64) STIXOption

+ func OptionObjectMarking(om []Identifier) STIXOption

+ func OptionObjectModified(s *Timestamp) STIXOption

+ func OptionObjective(o string) STIXOption

+ func OptionObservedData(d []Identifier) STIXOption

+ func OptionOpenedConnections(s []Identifier) STIXOption

+ func OptionOperatingSystem(s Identifier) STIXOption

+ func OptionOperatingSystems(s []Identifier) STIXOption

+ func OptionPID(s int64) STIXOption

+ func OptionParent(s Identifier) STIXOption

+ func OptionParentDirectory(s Identifier) STIXOption

+ func OptionPathEncoding(s string) STIXOption

+ func OptionPatternVersion(s string) STIXOption

+ func OptionPayload(s Binary) STIXOption

+ func OptionPersonalMotivations(s []string) STIXOption

+ func OptionPostalCode(s string) STIXOption

+ func OptionPrecision(p float64) STIXOption

+ func OptionPrimaryMotivation(s string) STIXOption

+ func OptionRIR(s string) STIXOption

+ func OptionRawEmail(s Identifier) STIXOption

+ func OptionReceivedLines(s []string) STIXOption

+ func OptionResolvesTo(s []Identifier) STIXOption

+ func OptionResourceLevel(s string) STIXOption

+ func OptionResultName(s string) STIXOption

+ func OptionRevoked(rev bool) STIXOption

+ func OptionRoles(s []string) STIXOption

+ func OptionSWID(s string) STIXOption

+ func OptionSample(s Identifier) STIXOption

+ func OptionSamples(s []Identifier) STIXOption

+ func OptionSecondaryMotivations(s []string) STIXOption

+ func OptionSectors(s []string) STIXOption

+ func OptionSelfSigned(s bool) STIXOption

+ func OptionSender(s Identifier) STIXOption

+ func OptionSerialNumber(s string) STIXOption

+ func OptionSignatureAlgorithm(s string) STIXOption

+ func OptionSize(s int64) STIXOption

+ func OptionSophistication(s string) STIXOption

+ func OptionSpecVersion(ver string) STIXOption

+ func OptionSrc(s Identifier) STIXOption

+ func OptionSrcByteCount(s int64) STIXOption

+ func OptionSrcPackets(s int64) STIXOption

+ func OptionSrcPayload(s Identifier) STIXOption

+ func OptionSrcPort(s int64) STIXOption

+ func OptionStart(s *Timestamp) STIXOption

+ func OptionStartTime(t *Timestamp) STIXOption

+ func OptionStopTime(t *Timestamp) STIXOption

+ func OptionStreetAddress(s string) STIXOption

+ func OptionSubject(s string) STIXOption

+ func OptionSubjectPublicKeyAlgorithm(s string) STIXOption

+ func OptionSubjectPublicKeyExponent(s int64) STIXOption

+ func OptionSubjectPublicKeyModulus(s string) STIXOption

+ func OptionSubmitted(s *Timestamp) STIXOption

+ func OptionSummary(b bool) STIXOption

+ func OptionTo(s []Identifier) STIXOption

+ func OptionTypes(s []string) STIXOption

+ func OptionURL(s string) STIXOption

+ func OptionUserID(s string) STIXOption

+ func OptionV3Extensions(s X509v3Extension) STIXOption

+ func OptionValidUntil(t *Timestamp) STIXOption

+ func OptionValidityNotAfter(s *Timestamp) STIXOption

+ func OptionValidityNotBefore(s *Timestamp) STIXOption

+ func OptionValues(s []*RegistryValue) STIXOption

+ func OptionVendor(s string) STIXOption

+ func OptionVersion(s string) STIXOption

+ func OptionWhereSighted(i []Identifier) STIXOption

+ type STIXType string

type Tool

+ Version string

v0.6.0

Aug 2, 2020

Changes in this version

type Location

+ AdministrativeArea string

type StixCollection

+ func (c *StixCollection) Get(id Identifier) StixObject

v0.5.0

Jul 26, 2020

Changes in this version

+ func HasValidIdentifier(obj StixObject) bool

type AttackPatternOption

+ func AttackPatternOptionDescription(des string) AttackPatternOption

type CampaignOption

+ func CampaignOptionDescription(des string) CampaignOption

type CourseOfActionOption

+ func CourseOfActionOptionDescription(des string) CourseOfActionOption

type GroupingOption

+ func GroupingOptionDescription(des string) GroupingOption

type IdentityOption

+ func IdentityOptionClass(s string) IdentityOption

+ func IdentityOptionDescription(des string) IdentityOption

type IndicatorOption

+ func IndicatorOptionDescription(des string) IndicatorOption

+ func IndicatorOptionTypes(s []string) IndicatorOption

type InfrastructureOption

+ func InfrastructureOptionDescription(des string) InfrastructureOption

+ func InfrastructureOptionTypes(s []string) InfrastructureOption

type IntrusionSetOption

+ func IntrusionSetOptionDescription(des string) IntrusionSetOption

type LocationOption

+ func LocationOptionDescription(des string) LocationOption

type MalwareOption

+ func MalwareOptionDescription(des string) MalwareOption

+ func MalwareOptionTypes(s []string) MalwareOption

type RelationshipOption

+ func RelationshipOptionDescription(des string) RelationshipOption

type ReportOption

+ func ReportOptionTypes(s []string) ReportOption

type SightingOption

+ func SightingOptionDescription(des string) SightingOption

type ThreatActorOption

+ func ThreatActorOptionTypes(s []string) ThreatActorOption

type ToolOption

+ func ToolOptionTypes(s []string) ToolOption

v0.4.1

Jul 23, 2020

v0.4.0

Apr 19, 2020

Changes in this version

+ const MalwareResultBenign

+ const MalwareResultMalicious

+ const MalwareResultSuspicious

+ const MalwareResultUnknown

+ const PatternTypePCRE

+ const PatternTypeSTIX

+ const PatternTypeSigma

+ const PatternTypeSnort

+ const PatternTypeSuricata

+ const PatternTypeYara

type LanguageContent

+ func (l *LanguageContent) GetCreated() *time.Time

+ func (l *LanguageContent) GetModified() *time.Time

type Malware

+ KillChainPhase []*KillChainPhase

type MalwareAnalysis

+ Result string

+ ResultName string

+ Sample Identifier

type MalwareAnalysisOption

+ func MalwareAnalysisOptionResultName(s string) MalwareAnalysisOption

+ func MalwareAnalysisOptionSample(s Identifier) MalwareAnalysisOption

type MarkingDefinition

+ func (m *MarkingDefinition) GetCreated() *time.Time

+ func (m *MarkingDefinition) GetModified() *time.Time

type RelationshipType

+ const RelationshipTypeDerivedFrom

+ const RelationshipTypeDuplicateOf

type STIXCyberObservableObject

+ func (o *STIXCyberObservableObject) AddDerivedFrom(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (o *STIXCyberObservableObject) AddDuplicateOf(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (o *STIXCyberObservableObject) AddRelatedTo(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (o *STIXCyberObservableObject) GetCreated() *time.Time

+ func (o *STIXCyberObservableObject) GetModified() *time.Time

type STIXDomainObject

+ func (s *STIXDomainObject) AddDerivedFrom(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (s *STIXDomainObject) AddDuplicateOf(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (s *STIXDomainObject) AddRelatedTo(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (s *STIXDomainObject) GetCreated() *time.Time

+ func (s *STIXDomainObject) GetModified() *time.Time

type STIXRelationshipObject

+ func (s *STIXRelationshipObject) GetCreated() *time.Time

+ func (s *STIXRelationshipObject) GetModified() *time.Time

type Software

+ SWID string

type SoftwareOption

+ func SoftwareOptionSWID(s string) SoftwareOption

type StixObject

+ GetCreated func() *time.Time

+ GetModified func() *time.Time

v0.3.0

Mar 21, 2020

Changes in this version

+ type AutonomousSystem struct

+ Name string

+ Number int64

+ RIR string

+ func NewAutonomousSystem(number int64, opts ...AutonomousSystemOption) (*AutonomousSystem, error)

+ type AutonomousSystemOption func(a *AutonomousSystem)

+ type DomainName struct

+ ResolvesTo []Identifier

+ Value string

+ func NewDomainName(value string, opts ...DomainNameOption) (*DomainName, error)

+ func (c *DomainName) AddResolvesTo(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ type DomainNameOption func(a *DomainName)

type StixType

+ const TypeAutonomousSystem

v0.2.1

Feb 23, 2020

Changes in this version

type AttackPatternOption

+ func AttackPatternOptionLabels(labels []string) AttackPatternOption

type CampaignOption

+ func CampaignOptionLabels(labels []string) CampaignOption

type CourseOfActionOption

+ func CourseOfActionOptionLabels(labels []string) CourseOfActionOption

type GroupingOption

+ func GroupingOptionLabels(labels []string) GroupingOption

type IdentityOption

+ func IdentityOptionLabels(labels []string) IdentityOption

type IndicatorOption

+ func IndicatorOptionLabels(labels []string) IndicatorOption

type InfrastructureOption

+ func InfrastructureOptionLabels(labels []string) InfrastructureOption

type IntrusionSetOption

+ func IntrusionSetOptionLabels(labels []string) IntrusionSetOption

type LanguageContent

+ Labels []string

type LanguageContentOption

+ func LanguageContentOptionLabels(labels []string) LanguageContentOption

type LocationOption

+ func LocationOptionLabels(labels []string) LocationOption

type MalwareAnalysisOption

+ func MalwareAnalysisOptionLabels(labels []string) MalwareAnalysisOption

type MalwareOption

+ func MalwareOptionLabels(labels []string) MalwareOption

type NoteOption

+ func NoteOptionLabels(labels []string) NoteOption

type ObservedDataOption

+ func ObservedDataOptionLabels(labels []string) ObservedDataOption

type OpinionOption

+ func OpinionOptionLabels(labels []string) OpinionOption

type RelationshipOption

+ func RelationshipOptionLabels(labels []string) RelationshipOption

type ReportOption

+ func ReportOptionLabels(labels []string) ReportOption

type STIXDomainObject

+ Labels []string

type STIXRelationshipObject

+ Labels []string

type SightingOption

+ func SightingOptionLabels(labels []string) SightingOption

type ThreatActorOption

+ func ThreatActorOptionLabels(labels []string) ThreatActorOption

type ToolOption

+ func ToolOptionLabels(labels []string) ToolOption

type VulnerabilityOption

+ func VulnerabilityOptionLabels(labels []string) VulnerabilityOption

v0.2.0

Feb 18, 2020

Changes in this version

+ var AllTypes = []StixType

type Bundle

+ ID Identifier

+ Type StixType

+ func NewBundle(objs ...StixObject) (*Bundle, error)

type LanguageContent

+ func (l *LanguageContent) GetID() Identifier

+ func (l *LanguageContent) GetType() StixType

type MarkingDefinition

+ func (m *MarkingDefinition) GetID() Identifier

+ func (m *MarkingDefinition) GetType() StixType

type STIXCyberObservableObject

+ func (o *STIXCyberObservableObject) GetID() Identifier

+ func (o *STIXCyberObservableObject) GetType() StixType

type STIXDomainObject

+ func (s *STIXDomainObject) GetID() Identifier

+ func (s *STIXDomainObject) GetType() StixType

type STIXRelationshipObject

+ func (s *STIXRelationshipObject) GetID() Identifier

+ func (s *STIXRelationshipObject) GetType() StixType

type StixCollection

+ func (c *StixCollection) AS(id Identifier) *AS

+ func (c *StixCollection) Add(obj StixObject)

+ func (c *StixCollection) AllMalware() []*Malware

+ func (c *StixCollection) AllNetworkTraffic() []*NetworkTraffic

+ func (c *StixCollection) AllObjects() []StixObject

+ func (c *StixCollection) AllObservedData() []*ObservedData

+ func (c *StixCollection) AllSoftware() []*Software

+ func (c *StixCollection) Artifact(id Identifier) *Artifact

+ func (c *StixCollection) AttackPattern(id Identifier) *AttackPattern

+ func (c *StixCollection) Campaign(id Identifier) *Campaign

+ func (c *StixCollection) CourseOfAction(id Identifier) *CourseOfAction

+ func (c *StixCollection) Directory(id Identifier) *Directory

+ func (c *StixCollection) DomainName(id Identifier) *Domain

+ func (c *StixCollection) EmailAddress(id Identifier) *EmailAddress

+ func (c *StixCollection) EmailMessage(id Identifier) *EmailMessage

+ func (c *StixCollection) File(id Identifier) *File

+ func (c *StixCollection) Group(id Identifier) *Grouping

+ func (c *StixCollection) IPv4Address(id Identifier) *IPv4Address

+ func (c *StixCollection) IPv6Address(id Identifier) *IPv6Address

+ func (c *StixCollection) Identity(id Identifier) *Identity

+ func (c *StixCollection) Indicator(id Identifier) *Indicator

+ func (c *StixCollection) Infrastructure(id Identifier) *Infrastructure

+ func (c *StixCollection) IntrusionSet(id Identifier) *IntrusionSet

+ func (c *StixCollection) LanguageContent(id Identifier) *LanguageContent

+ func (c *StixCollection) Location(id Identifier) *Location

+ func (c *StixCollection) MAC(id Identifier) *MACAddress

+ func (c *StixCollection) MalwareAnalyses() []*MalwareAnalysis

+ func (c *StixCollection) MarkingDefinition(id Identifier) *MarkingDefinition

+ func (c *StixCollection) Mutex(id Identifier) *Mutex

+ func (c *StixCollection) Note(id Identifier) *Note

+ func (c *StixCollection) Opinion(id Identifier) *Opinion

+ func (c *StixCollection) Process(id Identifier) *Process

+ func (c *StixCollection) RegistryKey(id Identifier) *RegistryKey

+ func (c *StixCollection) Relationship(id Identifier) *Relationship

+ func (c *StixCollection) Report(id Identifier) *Report

+ func (c *StixCollection) Sighting(id Identifier) *Sighting

+ func (c *StixCollection) ThreatActor(id Identifier) *ThreatActor

+ func (c *StixCollection) ToBundle() (*Bundle, error)

+ func (c *StixCollection) Tool(id Identifier) *Tool

+ func (c *StixCollection) URL(id Identifier) *URL

+ func (c *StixCollection) UserAccount(id Identifier) *UserAccount

+ func (c *StixCollection) Vulnerability(id Identifier) *Vulnerability

+ func (c *StixCollection) X509Certificate(id Identifier) *X509Certificate

+ type StixObject interface

+ GetID func() Identifier

+ GetType func() StixType

type StixType

+ const TypeBundle

v0.1.0

Jan 4, 2020

Changes in this version

+ const ArchitectureAlpha

+ const ArchitectureArm

+ const ArchitectureIA64

+ const ArchitectureMIPS

+ const ArchitecturePowerPC

+ const ArchitectureSPARC

+ const ArchitectureX86

+ const ArchitectureX8664

+ const AttackMotivationAccidental

+ const AttackMotivationCoercion

+ const AttackMotivationDominance

+ const AttackMotivationIdeology

+ const AttackMotivationNotoriety

+ const AttackMotivationOrganizationalGain

+ const AttackMotivationPersonalGain

+ const AttackMotivationPersonalSatisfaction

+ const AttackMotivationRevenge

+ const AttackMotivationUnpredictable

+ const AttackResourceLevelClub

+ const AttackResourceLevelContest

+ const AttackResourceLevelGovernment

+ const AttackResourceLevelIndividual

+ const AttackResourceLevelOrganization

+ const AttackResourceLevelTeam

+ const CourseOfActionTypeHTML

+ const CourseOfActionTypeMD

+ const CourseOfActionTypePDF

+ const CourseOfActionTypePlain

+ const ExtArchive

+ const ExtHTTPRequest

+ const ExtICMP

+ const ExtNTFS

+ const ExtPDF

+ const ExtRasterImage

+ const ExtSocket

+ const ExtTCP

+ const ExtUnixAccount

+ const ExtWindowsPEBinary

+ const ExtWindowsProcess

+ const ExtWindowsService

+ const GroupingContextMalwareAnalysis

+ const GroupingContextSuspiciousActivity

+ const GroupingContextUnspecified

+ const IdentityClassClass

+ const IdentityClassGroup

+ const IdentityClassIndividual

+ const IdentityClassOrganization

+ const IdentityClassSystem

+ const IdentityClassUnspecified

+ const IdentitySectorAerospace

+ const IdentitySectorAgriculture

+ const IdentitySectorAutomotive

+ const IdentitySectorCommunications

+ const IdentitySectorConstruction

+ const IdentitySectorDefence

+ const IdentitySectorEducation

+ const IdentitySectorEnergy

+ const IdentitySectorEntertainment

+ const IdentitySectorFinancialServices

+ const IdentitySectorGovernmentLocal

+ const IdentitySectorGovernmentNational

+ const IdentitySectorGovernmentPublicServices

+ const IdentitySectorGovernmentRegional

+ const IdentitySectorHealthcare

+ const IdentitySectorHospitalityLeisure

+ const IdentitySectorInfrastructure

+ const IdentitySectorInsurance

+ const IdentitySectorManufacturing

+ const IdentitySectorMining

+ const IdentitySectorNonProfit

+ const IdentitySectorPharmaceuticals

+ const IdentitySectorRetail

+ const IdentitySectorTechnology

+ const IdentitySectorTelecommunications

+ const IdentitySectorTransportation

+ const IdentitySectorUtilities

+ const ImplementationLanguageApplescript

+ const ImplementationLanguageBash

+ const ImplementationLanguageC

+ const ImplementationLanguageCpp

+ const ImplementationLanguageCsharp

+ const ImplementationLanguageGo

+ const ImplementationLanguageJava

+ const ImplementationLanguageJavascript

+ const ImplementationLanguageLua

+ const ImplementationLanguageObjectiveC

+ const ImplementationLanguagePHP

+ const ImplementationLanguagePerl

+ const ImplementationLanguagePowershell

+ const ImplementationLanguagePython

+ const ImplementationLanguageRuby

+ const ImplementationLanguageScala

+ const ImplementationLanguageSwift

+ const ImplementationLanguageTypeScript

+ const ImplementationLanguageVisualBasic

+ const ImplementationLanguageX8632

+ const ImplementationLanguageX8664

+ const IndicatorTypeAnomalousActivity

+ const IndicatorTypeAnonymization

+ const IndicatorTypeAttribution

+ const IndicatorTypeBenign

+ const IndicatorTypeCompromised

+ const IndicatorTypeMaliciousActivity

+ const IndicatorTypeUnknown

+ const InfrastructureTypeAmplification

+ const InfrastructureTypeAnonymization

+ const InfrastructureTypeBotnet

+ const InfrastructureTypeCommandAndControl

+ const InfrastructureTypeExfiltration

+ const InfrastructureTypeHostingMalware

+ const InfrastructureTypeHostingTargetLists

+ const InfrastructureTypePhishing

+ const InfrastructureTypeReconnaissance

+ const InfrastructureTypeStaging

+ const InfrastructureTypeUndefined

+ const LockheedMartinCyberKillChain

+ const MalwareAVResultBenign

+ const MalwareAVResultMalicious

+ const MalwareAVResultSuspicious

+ const MalwareAVResultUnknown

+ const MalwareCapabilitiesAccessesRemoteMachines

+ const MalwareCapabilitiesAntiDebugging

+ const MalwareCapabilitiesAntiDisassembly

+ const MalwareCapabilitiesAntiEmulation

+ const MalwareCapabilitiesAntiMemoryForensics

+ const MalwareCapabilitiesAntiSandbox

+ const MalwareCapabilitiesAntiVM

+ const MalwareCapabilitiesCapturesInputPeripherals

+ const MalwareCapabilitiesCapturesOutputPeripherals

+ const MalwareCapabilitiesCapturesSystemStateData

+ const MalwareCapabilitiesCleansTracesOfInfection

+ const MalwareCapabilitiesCommitsFraud

+ const MalwareCapabilitiesCommunicatesWithC2

+ const MalwareCapabilitiesCompromisesDataAvailability

+ const MalwareCapabilitiesCompromisesDataIntegrity

+ const MalwareCapabilitiesCompromisesSystemAvailability

+ const MalwareCapabilitiesControlsLocalMachine

+ const MalwareCapabilitiesDegradesSecuritySoftware

+ const MalwareCapabilitiesDegradesSystemUpdates

+ const MalwareCapabilitiesDeterminesC2Server

+ const MalwareCapabilitiesEmailsSpam

+ const MalwareCapabilitiesEscalatesPrivileges

+ const MalwareCapabilitiesEvadesAV

+ const MalwareCapabilitiesExfiltratesData

+ const MalwareCapabilitiesFingerprintsHost

+ const MalwareCapabilitiesHidesArtifacts

+ const MalwareCapabilitiesHidesExecutingCode

+ const MalwareCapabilitiesInfectsFiles

+ const MalwareCapabilitiesInfectsRemoteMachines

+ const MalwareCapabilitiesInstallsOtherComponents

+ const MalwareCapabilitiesPersistsAfterSystemReboot

+ const MalwareCapabilitiesPreventsArtifactAccess

+ const MalwareCapabilitiesPreventsArtifactDeletion

+ const MalwareCapabilitiesProbesNetworkEnvironment

+ const MalwareCapabilitiesSelfModifies

+ const MalwareCapabilitiesStealsAuthenticationCredentials

+ const MalwareCapabilitiesViolatesSystemOperationalIntegrity

+ const MalwareTypeAdware

+ const MalwareTypeBackdoor

+ const MalwareTypeBootkit

+ const MalwareTypeBot

+ const MalwareTypeDDoS

+ const MalwareTypeDownloader

+ const MalwareTypeDropper

+ const MalwareTypeExploitKit

+ const MalwareTypeKeylogger

+ const MalwareTypeRansomware

+ const MalwareTypeRemoteAccessTrojan

+ const MalwareTypeResourceExploitation

+ const MalwareTypeRogueSecuritySoftware

+ const MalwareTypeRootkit

+ const MalwareTypeScreenCapture

+ const MalwareTypeSpyware

+ const MalwareTypeTrojan

+ const MalwareTypeUnknown

+ const MalwareTypeVirus

+ const MalwareTypeWebshell

+ const MalwareTypeWiper

+ const MalwareTypeWorm

+ const RegionAfrica

+ const RegionAmericas

+ const RegionAntarctica

+ const RegionAsia

+ const RegionAustraliaNewZealand

+ const RegionCaribbean

+ const RegionCentralAmerica

+ const RegionCentralAsia

+ const RegionEasternAfrica

+ const RegionEasternAsia

+ const RegionEasternEurope

+ const RegionEurope

+ const RegionLatinAmericaCaribbean

+ const RegionMelanesia

+ const RegionMicronesia

+ const RegionMiddleAfrica

+ const RegionNorthernAfrica

+ const RegionNorthernAmerica

+ const RegionNorthernEurope

+ const RegionOceania

+ const RegionPolynesia

+ const RegionSouthAmerica

+ const RegionSouthernAfrica

+ const RegionSouthernAsia

+ const RegionSouthernEurope

+ const RegionWesternAfrica

+ const RegionWesternAsia

+ const RegionWesternEurope

+ const ReportTypeAttackPattern

+ const ReportTypeCampaign

+ const ReportTypeIdentity

+ const ReportTypeIndicator

+ const ReportTypeIntrusionSet

+ const ReportTypeMalware

+ const ReportTypeObservedData

+ const ReportTypeThreatActor

+ const ReportTypeThreatReport

+ const ReportTypeTool

+ const ReportTypeVulnerability

+ const SpecVersion20

+ const SpecVersion21

+ const ThreatActorRoleAgent

+ const ThreatActorRoleDirector

+ const ThreatActorRoleIndependent

+ const ThreatActorRoleInfrastructureArchitect

+ const ThreatActorRoleInfrastructureOperator

+ const ThreatActorRoleMalwareAuthor

+ const ThreatActorRoleSponsor

+ const ThreatActorSophisticationAdvanced

+ const ThreatActorSophisticationExpert

+ const ThreatActorSophisticationInnovator

+ const ThreatActorSophisticationIntermediate

+ const ThreatActorSophisticationMinimal

+ const ThreatActorSophisticationNone

+ const ThreatActorSophisticationStrategic

+ const ThreatActorTypeActivist

+ const ThreatActorTypeCompetitor

+ const ThreatActorTypeCrimeSyndicate

+ const ThreatActorTypeCriminal

+ const ThreatActorTypeHacker

+ const ThreatActorTypeInsiderAccidental

+ const ThreatActorTypeInsiderDisgruntled

+ const ThreatActorTypeNationState

+ const ThreatActorTypeSensationalist

+ const ThreatActorTypeSpy

+ const ThreatActorTypeTerrorist

+ const ThreatActorTypeUnknown

+ const ToolTypeCredentialExploitation

+ const ToolTypeDenialOfService

+ const ToolTypeExploitation

+ const ToolTypeInformationGathering

+ const ToolTypeNetworkCapture

+ const ToolTypeRemoteAccess

+ const ToolTypeUnknown

+ const ToolTypeVulnerabilityScanning

+ var CyberObservableNamespace = uuid.MustParse("00abedb4-aa42-466c-9c01-fed23315a9b7")

+ var ErrInvalidParameter = errors.New("invalid parameter")

+ var ErrInvalidProperty = errors.New("invalid value for the property")

+ var ErrPropertyMissing = errors.New(...)

+ var TLPAmber = &MarkingDefinition

+ var TLPGreen = &MarkingDefinition

+ var TLPRed = &MarkingDefinition

+ var TLPWhite = &MarkingDefinition

+ func IsValidIdentifier(id Identifier) bool

+ type AS struct

+ Name string

+ Number int64

+ RIR string

+ func NewAS(number int64, opts ...ASOption) (*AS, error)

+ type ASOption func(a *AS)

+ func ASOptionDefanged(b bool) ASOption

+ func ASOptionExtension(name string, value interface{}) ASOption

+ func ASOptionGranularMarking(gm *GranularMarking) ASOption

+ func ASOptionName(s string) ASOption

+ func ASOptionObjectMarking(om []Identifier) ASOption

+ func ASOptionRIR(s string) ASOption

+ func ASOptionSpecVersion(ver string) ASOption

+ type AccountType string

+ const AccountFacebook

+ const AccountLdap

+ const AccountNis

+ const AccountOpenid

+ const AccountRadius

+ const AccountSkype

+ const AccountTacacs

+ const AccountTwitter

+ const AccountUnix

+ const AccountWindowsDomain

+ const AccountWindowsLocal

+ type AltDataStream struct

+ Hashes Hashes

+ Name string

+ Size int64

+ type ArchiveFileExtension struct

+ Comment string

+ Contains []Identifier

+ type Artifact struct

+ Encryption EncryptionAlgorithm

+ Hashes Hashes

+ Key string

+ MimeType string

+ Payload Binary

+ URL string

+ func NewArtifact(opts ...ArtifactOption) (*Artifact, error)

+ type ArtifactOption func(a *Artifact)

+ func ArtifactOptionDefanged(b bool) ArtifactOption

+ func ArtifactOptionEncryption(s EncryptionAlgorithm) ArtifactOption

+ func ArtifactOptionExtension(name string, value interface{}) ArtifactOption

+ func ArtifactOptionGranularMarking(gm *GranularMarking) ArtifactOption

+ func ArtifactOptionHashes(s Hashes) ArtifactOption

+ func ArtifactOptionKey(s string) ArtifactOption

+ func ArtifactOptionMimeType(s string) ArtifactOption

+ func ArtifactOptionObjectMarking(om []Identifier) ArtifactOption

+ func ArtifactOptionPayload(s Binary) ArtifactOption

+ func ArtifactOptionSpecVersion(ver string) ArtifactOption

+ func ArtifactOptionURL(s string) ArtifactOption

+ type AttackPattern struct

+ Aliases []string

+ Description string

+ KillChainPhase []*KillChainPhase

+ Name string

+ func NewAttackPattern(name string, opts ...AttackPatternOption) (*AttackPattern, error)

+ func (a *AttackPattern) AddDelivers(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (a *AttackPattern) AddTargets(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (a *AttackPattern) AddUses(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ type AttackPatternOption func(a *AttackPattern)

+ func AttackPatternOptionAliases(a []string) AttackPatternOption

+ func AttackPatternOptionConfidence(confidence int) AttackPatternOption

+ func AttackPatternOptionCreated(t *Timestamp) AttackPatternOption

+ func AttackPatternOptionCreatedBy(id Identifier) AttackPatternOption

+ func AttackPatternOptionDesciption(des string) AttackPatternOption

+ func AttackPatternOptionExternalReferences(refs []*ExternalReference) AttackPatternOption

+ func AttackPatternOptionGranularMarking(gm *GranularMarking) AttackPatternOption

+ func AttackPatternOptionKillChainPhase(k []*KillChainPhase) AttackPatternOption

+ func AttackPatternOptionLables(lables []string) AttackPatternOption

+ func AttackPatternOptionLang(lang string) AttackPatternOption

+ func AttackPatternOptionModified(t *Timestamp) AttackPatternOption

+ func AttackPatternOptionObjectMarking(om []Identifier) AttackPatternOption

+ func AttackPatternOptionRevoked(rev bool) AttackPatternOption

+ func AttackPatternOptionSpecVersion(ver string) AttackPatternOption

+ type Binary []byte

+ func (typ *Binary) UnmarshalJSON(b []byte) error

+ func (typ Binary) MarshalJSON() ([]byte, error)

+ func (typ Binary) String() string

+ type Bundle struct

+ Objects []json.RawMessage

+ type Campaign struct

+ Aliases []string

+ Description string

+ FirstSeen *Timestamp

+ LastSeen *Timestamp

+ Name string

+ Objective string

+ func NewCampaign(name string, opts ...CampaignOption) (*Campaign, error)

+ func (c *Campaign) AddAttributedTo(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (c *Campaign) AddCompromises(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (c *Campaign) AddOriginatesFrom(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (c *Campaign) AddTargets(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (c *Campaign) AddUses(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ type CampaignOption func(a *Campaign)

+ func CampaignOptionAliases(a []string) CampaignOption

+ func CampaignOptionConfidence(confidence int) CampaignOption

+ func CampaignOptionCreated(t *Timestamp) CampaignOption

+ func CampaignOptionCreatedBy(id Identifier) CampaignOption

+ func CampaignOptionDesciption(des string) CampaignOption

+ func CampaignOptionExternalReferences(refs []*ExternalReference) CampaignOption

+ func CampaignOptionFirstSeen(t *Timestamp) CampaignOption

+ func CampaignOptionGranularMarking(gm *GranularMarking) CampaignOption

+ func CampaignOptionLables(lables []string) CampaignOption

+ func CampaignOptionLang(lang string) CampaignOption

+ func CampaignOptionLastSeen(t *Timestamp) CampaignOption

+ func CampaignOptionModified(t *Timestamp) CampaignOption

+ func CampaignOptionObjectMarking(om []Identifier) CampaignOption

+ func CampaignOptionObjective(o string) CampaignOption

+ func CampaignOptionRevoked(rev bool) CampaignOption

+ func CampaignOptionSpecVersion(ver string) CampaignOption

+ type CourseOfAction struct

+ ActionBin string

+ ActionReference *ExternalReference

+ ActionType string

+ Description string

+ Name string

+ OSExecutionEnvs []string

+ func NewCourseOfAction(name string, opts ...CourseOfActionOption) (*CourseOfAction, error)

+ func (c *CourseOfAction) AddInvestigates(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (c *CourseOfAction) AddMitigates(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (c *CourseOfAction) AddRemediates(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ type CourseOfActionOption func(a *CourseOfAction)

+ func CourseOfActionOptionActionBin(s string) CourseOfActionOption

+ func CourseOfActionOptionActionReference(r *ExternalReference) CourseOfActionOption

+ func CourseOfActionOptionActionType(s string) CourseOfActionOption

+ func CourseOfActionOptionConfidence(confidence int) CourseOfActionOption

+ func CourseOfActionOptionCreated(t *Timestamp) CourseOfActionOption

+ func CourseOfActionOptionCreatedBy(id Identifier) CourseOfActionOption

+ func CourseOfActionOptionDesciption(des string) CourseOfActionOption

+ func CourseOfActionOptionExternalReferences(refs []*ExternalReference) CourseOfActionOption

+ func CourseOfActionOptionGranularMarking(gm *GranularMarking) CourseOfActionOption

+ func CourseOfActionOptionLables(lables []string) CourseOfActionOption

+ func CourseOfActionOptionLang(lang string) CourseOfActionOption

+ func CourseOfActionOptionModified(t *Timestamp) CourseOfActionOption

+ func CourseOfActionOptionOSExecutionEnvs(s []string) CourseOfActionOption

+ func CourseOfActionOptionObjectMarking(om []Identifier) CourseOfActionOption

+ func CourseOfActionOptionRevoked(rev bool) CourseOfActionOption

+ func CourseOfActionOptionSpecVersion(ver string) CourseOfActionOption

+ type Directory struct

+ Atime *Timestamp

+ Contains []Identifier

+ Ctime *Timestamp

+ Mtime *Timestamp

+ Path string

+ PathEnc string

+ func NewDirectory(path string, opts ...DirectoryOption) (*Directory, error)

+ type DirectoryOption func(a *Directory)

+ func DirectoryOptionAtime(s *Timestamp) DirectoryOption

+ func DirectoryOptionContains(s []Identifier) DirectoryOption

+ func DirectoryOptionCtime(s *Timestamp) DirectoryOption

+ func DirectoryOptionDefanged(b bool) DirectoryOption

+ func DirectoryOptionExtension(name string, value interface{}) DirectoryOption

+ func DirectoryOptionGranularMarking(gm *GranularMarking) DirectoryOption

+ func DirectoryOptionMtime(s *Timestamp) DirectoryOption

+ func DirectoryOptionObjectMarking(om []Identifier) DirectoryOption

+ func DirectoryOptionPathEncoding(s string) DirectoryOption

+ func DirectoryOptionSpecVersion(ver string) DirectoryOption

+ type Domain struct

+ ResolvesTo []Identifier

+ Value string

+ func NewDomain(value string, opts ...DomainOption) (*Domain, error)

+ func (c *Domain) AddResolvesTo(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ type DomainOption func(a *Domain)

+ func DomainOptionDefanged(b bool) DomainOption

+ func DomainOptionExtension(name string, value interface{}) DomainOption

+ func DomainOptionGranularMarking(gm *GranularMarking) DomainOption

+ func DomainOptionObjectMarking(om []Identifier) DomainOption

+ func DomainOptionSpecVersion(ver string) DomainOption

+ type EmailAddress struct

+ BelongsTo Identifier

+ DisplayName string

+ Value string

+ func NewEmailAddress(value string, opts ...EmailAddressOption) (*EmailAddress, error)

+ type EmailAddressOption func(a *EmailAddress)

+ func EmailAddressOptionBelongsTo(s Identifier) EmailAddressOption

+ func EmailAddressOptionDefanged(b bool) EmailAddressOption

+ func EmailAddressOptionDisplayName(s string) EmailAddressOption

+ func EmailAddressOptionExtension(name string, value interface{}) EmailAddressOption

+ func EmailAddressOptionGranularMarking(gm *GranularMarking) EmailAddressOption

+ func EmailAddressOptionObjectMarking(om []Identifier) EmailAddressOption

+ func EmailAddressOptionSpecVersion(ver string) EmailAddressOption

+ type EmailMIME struct

+ Body string

+ BodyRaw Identifier

+ ContentDisposition string

+ ContentType string

+ type EmailMessage struct

+ AdditionalHeaderFields map[string]string

+ BCC []Identifier

+ Body string

+ BodyMultipart []EmailMIME

+ CC []Identifier

+ ContentType string

+ Date *Timestamp

+ From Identifier

+ IsMultipart bool

+ MessageID string

+ RawEmail Identifier

+ ReceivedLines []string

+ Sender Identifier

+ Subject string

+ To []Identifier

+ func NewEmailMessage(multipart bool, opts ...EmailMessageOption) (*EmailMessage, error)

+ type EmailMessageOption func(a *EmailMessage)

+ func EmailMessageOptionAdditionalHeaderFields(s map[string]string) EmailMessageOption

+ func EmailMessageOptionBCC(s []Identifier) EmailMessageOption

+ func EmailMessageOptionBody(s string) EmailMessageOption

+ func EmailMessageOptionBodyMultipart(s []EmailMIME) EmailMessageOption

+ func EmailMessageOptionCC(s []Identifier) EmailMessageOption

+ func EmailMessageOptionContentType(s string) EmailMessageOption

+ func EmailMessageOptionDate(s *Timestamp) EmailMessageOption

+ func EmailMessageOptionDefanged(b bool) EmailMessageOption

+ func EmailMessageOptionExtension(name string, value interface{}) EmailMessageOption

+ func EmailMessageOptionFrom(s Identifier) EmailMessageOption

+ func EmailMessageOptionGranularMarking(gm *GranularMarking) EmailMessageOption

+ func EmailMessageOptionMessageID(s string) EmailMessageOption

+ func EmailMessageOptionObjectMarking(om []Identifier) EmailMessageOption

+ func EmailMessageOptionRawEmail(s Identifier) EmailMessageOption

+ func EmailMessageOptionReceivedLines(s []string) EmailMessageOption

+ func EmailMessageOptionSender(s Identifier) EmailMessageOption

+ func EmailMessageOptionSpecVersion(ver string) EmailMessageOption

+ func EmailMessageOptionSubject(s string) EmailMessageOption

+ func EmailMessageOptionTo(s []Identifier) EmailMessageOption

+ type EncryptionAlgorithm uint8

+ const EncryptionAlgorithmAES256GCM

+ const EncryptionAlgorithmChaCha20Poly1305

+ const EncryptionAlgorithmMimeTypeIndicated

+ const EncryptionAlgorithmNone

+ func (typ *EncryptionAlgorithm) UnmarshalJSON(b []byte) error

+ func (typ EncryptionAlgorithm) String() string

+ type ExternalReference struct

+ Description string

+ ExternalID string

+ Hashes Hashes

+ Name string

+ URL string

+ func NewExternalReference(name, description, url, externalID string, hashes map[HashAlgorithm]string) (*ExternalReference, error)

+ func ParseExternalReference(data []byte) (*ExternalReference, error)

+ type File struct

+ Atime *Timestamp

+ Contains []Identifier

+ Content Identifier

+ Ctime *Timestamp

+ Hashes Hashes

+ MagicNumber Hex

+ MimeType string

+ Mtime *Timestamp

+ Name string

+ NameEnc string

+ ParentDirectory Identifier

+ Size int64

+ func NewFile(name string, hashes Hashes, opts ...FileOption) (*File, error)

+ func (f *File) ArchiveExtension() *ArchiveFileExtension

+ func (f *File) NTFSExtension() *NTFSFileExtension

+ func (f *File) PDFExtension() *PDFExtension

+ func (f *File) RasterImageExtension() *RasterImageExtension

+ func (f *File) WindowsPEBinaryExtension() *WindowsPEBinaryExtension

+ type FileOption func(a *File)

+ func FileOptionAtime(s *Timestamp) FileOption

+ func FileOptionContains(s []Identifier) FileOption

+ func FileOptionContent(s Identifier) FileOption

+ func FileOptionCtime(s *Timestamp) FileOption

+ func FileOptionDefanged(b bool) FileOption

+ func FileOptionExtension(name string, value interface{}) FileOption

+ func FileOptionGranularMarking(gm *GranularMarking) FileOption

+ func FileOptionMagicNumber(s Hex) FileOption

+ func FileOptionMimeType(s string) FileOption

+ func FileOptionMtime(s *Timestamp) FileOption

+ func FileOptionNameEnc(s string) FileOption

+ func FileOptionObjectMarking(om []Identifier) FileOption

+ func FileOptionParentDirectory(s Identifier) FileOption

+ func FileOptionSize(s int64) FileOption

+ func FileOptionSpecVersion(ver string) FileOption

+ type GranularMarking struct

+ Lang string

+ Marking Identifier

+ Selectors []string

+ type Grouping struct

+ Context string

+ Description string

+ Name string

+ Objects []Identifier

+ func NewGrouping(context string, objects []Identifier, opts ...GroupingOption) (*Grouping, error)

+ type GroupingOption func(a *Grouping)

+ func GroupingOptionConfidence(confidence int) GroupingOption

+ func GroupingOptionCreated(t *Timestamp) GroupingOption

+ func GroupingOptionCreatedBy(id Identifier) GroupingOption

+ func GroupingOptionDesciption(des string) GroupingOption

+ func GroupingOptionExternalReferences(refs []*ExternalReference) GroupingOption

+ func GroupingOptionGranularMarking(gm *GranularMarking) GroupingOption

+ func GroupingOptionLables(lables []string) GroupingOption

+ func GroupingOptionLang(lang string) GroupingOption

+ func GroupingOptionModified(t *Timestamp) GroupingOption

+ func GroupingOptionName(n string) GroupingOption

+ func GroupingOptionObjectMarking(om []Identifier) GroupingOption

+ func GroupingOptionRevoked(rev bool) GroupingOption

+ func GroupingOptionSpecVersion(ver string) GroupingOption

+ type HTTPRequestExtension struct

+ Body Identifier

+ BodyLength int64

+ HTTPVersion string

+ Header map[string][]string

+ Method string

+ Value string

+ type HashAlgorithm string

+ const MD5

+ const SHA1

+ const SHA256

+ const SHA3256

+ const SHA3512

+ const SHA512

+ const SSDEEP

+ type Hashes map[HashAlgorithm]string

+ type Hex string

+ type ICMPExtension struct

+ Code Hex

+ Type Hex

+ type IPv4Address struct

+ BelongsTo []Identifier

+ ResolvesTo []Identifier

+ Value string

+ func NewIPv4Address(value string, opts ...IPv4AddressOption) (*IPv4Address, error)

+ func (c *IPv4Address) AddBelongsTo(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (c *IPv4Address) AddResolvesTo(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ type IPv4AddressOption func(a *IPv4Address)

+ func IPv4AddressOptionDefanged(b bool) IPv4AddressOption

+ func IPv4AddressOptionExtension(name string, value interface{}) IPv4AddressOption

+ func IPv4AddressOptionGranularMarking(gm *GranularMarking) IPv4AddressOption

+ func IPv4AddressOptionObjectMarking(om []Identifier) IPv4AddressOption

+ func IPv4AddressOptionSpecVersion(ver string) IPv4AddressOption

+ type IPv6Address struct

+ BelongsTo []Identifier

+ ResolvesTo []Identifier

+ Value string

+ func NewIPv6Address(value string, opts ...IPv6AddressOption) (*IPv6Address, error)

+ func (c *IPv6Address) AddBelongsTo(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (c *IPv6Address) AddResolvesTo(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ type IPv6AddressOption func(a *IPv6Address)

+ func IPv6AddressOptionDefanged(b bool) IPv6AddressOption

+ func IPv6AddressOptionExtension(name string, value interface{}) IPv6AddressOption

+ func IPv6AddressOptionGranularMarking(gm *GranularMarking) IPv6AddressOption

+ func IPv6AddressOptionObjectMarking(om []Identifier) IPv6AddressOption

+ func IPv6AddressOptionSpecVersion(ver string) IPv6AddressOption

+ type Identifier string

+ func NewIdentifier(typ StixType) (Identifier, error)

+ func NewObservableIdenfier(value string, typ StixType) Identifier

+ func (i Identifier) ForType(typ StixType) bool

+ func (i Identifier) ForTypes(typ ...StixType) bool

+ type Identity struct

+ ContactInformation string

+ Description string

+ IdentityClass string

+ Name string

+ Roles []string

+ Sectors []string

+ func NewIdentity(name, class string, opts ...IdentityOption) (*Identity, error)

+ func (c *Identity) AddLocatedAt(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ type IdentityOption func(a *Identity)

+ func IdentityOptionConfidence(confidence int) IdentityOption

+ func IdentityOptionContactInformation(s string) IdentityOption

+ func IdentityOptionCreated(t *Timestamp) IdentityOption

+ func IdentityOptionCreatedBy(id Identifier) IdentityOption

+ func IdentityOptionDesciption(des string) IdentityOption

+ func IdentityOptionExternalReferences(refs []*ExternalReference) IdentityOption

+ func IdentityOptionGranularMarking(gm *GranularMarking) IdentityOption

+ func IdentityOptionLables(lables []string) IdentityOption

+ func IdentityOptionLang(lang string) IdentityOption

+ func IdentityOptionModified(t *Timestamp) IdentityOption

+ func IdentityOptionObjectMarking(om []Identifier) IdentityOption

+ func IdentityOptionRevoked(rev bool) IdentityOption

+ func IdentityOptionRoles(s []string) IdentityOption

+ func IdentityOptionSectors(s []string) IdentityOption

+ func IdentityOptionSpecVersion(ver string) IdentityOption

+ type Indicator struct

+ Description string

+ IndicatorTypes []string

+ KillChainPhases []*KillChainPhase

+ Name string

+ Pattern string

+ PatternType string

+ PatternVersion string

+ ValidFrom *Timestamp

+ ValidUntil *Timestamp

+ func NewIndicator(pattern, patternType string, indicatorTypes []string, validFrom *Timestamp, ...) (*Indicator, error)

+ func (c *Indicator) AddBasedOn(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (c *Indicator) AddIndicates(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ type IndicatorOption func(a *Indicator)

+ func IndicatorOptionConfidence(confidence int) IndicatorOption

+ func IndicatorOptionCreated(t *Timestamp) IndicatorOption

+ func IndicatorOptionCreatedBy(id Identifier) IndicatorOption

+ func IndicatorOptionDesciption(des string) IndicatorOption

+ func IndicatorOptionExternalReferences(refs []*ExternalReference) IndicatorOption

+ func IndicatorOptionGranularMarking(gm *GranularMarking) IndicatorOption

+ func IndicatorOptionKillChainPhase(s []*KillChainPhase) IndicatorOption

+ func IndicatorOptionLables(lables []string) IndicatorOption

+ func IndicatorOptionLang(lang string) IndicatorOption

+ func IndicatorOptionModified(t *Timestamp) IndicatorOption

+ func IndicatorOptionName(s string) IndicatorOption

+ func IndicatorOptionObjectMarking(om []Identifier) IndicatorOption

+ func IndicatorOptionPatternVersion(s string) IndicatorOption

+ func IndicatorOptionRevoked(rev bool) IndicatorOption

+ func IndicatorOptionSpecVersion(ver string) IndicatorOption

+ func IndicatorOptionValidUntil(t *Timestamp) IndicatorOption

+ type Infrastructure struct

+ Aliases []string

+ Description string

+ FirstSeen *Timestamp

+ InfrastructureTypes []string

+ KillChainPhases []*KillChainPhase

+ LastSeen *Timestamp

+ Name string

+ func NewInfrastructure(name string, typs []string, opts ...InfrastructureOption) (*Infrastructure, error)

+ func (c *Infrastructure) AddCommunicatesWith(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (c *Infrastructure) AddConsistsOf(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (c *Infrastructure) AddControls(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (c *Infrastructure) AddDelivers(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (c *Infrastructure) AddHas(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (c *Infrastructure) AddHosts(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (c *Infrastructure) AddLocatedAt(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (c *Infrastructure) AddUses(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ type InfrastructureOption func(a *Infrastructure)

+ func InfrastructureOptionAliases(s []string) InfrastructureOption

+ func InfrastructureOptionConfidence(confidence int) InfrastructureOption

+ func InfrastructureOptionCreated(t *Timestamp) InfrastructureOption

+ func InfrastructureOptionCreatedBy(id Identifier) InfrastructureOption

+ func InfrastructureOptionDesciption(des string) InfrastructureOption

+ func InfrastructureOptionExternalReferences(refs []*ExternalReference) InfrastructureOption

+ func InfrastructureOptionFirstSeen(t *Timestamp) InfrastructureOption

+ func InfrastructureOptionGranularMarking(gm *GranularMarking) InfrastructureOption

+ func InfrastructureOptionKillChainPhase(s []*KillChainPhase) InfrastructureOption

+ func InfrastructureOptionLables(lables []string) InfrastructureOption

+ func InfrastructureOptionLang(lang string) InfrastructureOption

+ func InfrastructureOptionLastSeen(t *Timestamp) InfrastructureOption

+ func InfrastructureOptionModified(t *Timestamp) InfrastructureOption

+ func InfrastructureOptionObjectMarking(om []Identifier) InfrastructureOption

+ func InfrastructureOptionRevoked(rev bool) InfrastructureOption

+ func InfrastructureOptionSpecVersion(ver string) InfrastructureOption

+ type IntrusionSet struct

+ Aliases []string

+ Description string

+ FirstSeen *Timestamp

+ Goals []string

+ LastSeen *Timestamp

+ Name string

+ PrimaryMotivation string

+ ResourceLevel string

+ SecondaryMotivation string

+ func NewIntrusionSet(name string, opts ...IntrusionSetOption) (*IntrusionSet, error)

+ func (c *IntrusionSet) AddAttributedTo(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (c *IntrusionSet) AddCompromises(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (c *IntrusionSet) AddHosts(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (c *IntrusionSet) AddOriginatesFrom(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (c *IntrusionSet) AddOwns(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (c *IntrusionSet) AddTargets(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (c *IntrusionSet) AddUses(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ type IntrusionSetOption func(a *IntrusionSet)

+ func IntrusionSetOptionAliases(s []string) IntrusionSetOption

+ func IntrusionSetOptionConfidence(confidence int) IntrusionSetOption

+ func IntrusionSetOptionCreated(t *Timestamp) IntrusionSetOption

+ func IntrusionSetOptionCreatedBy(id Identifier) IntrusionSetOption

+ func IntrusionSetOptionDesciption(des string) IntrusionSetOption

+ func IntrusionSetOptionExternalReferences(refs []*ExternalReference) IntrusionSetOption

+ func IntrusionSetOptionFirstSeen(t *Timestamp) IntrusionSetOption

+ func IntrusionSetOptionGoals(s []string) IntrusionSetOption

+ func IntrusionSetOptionGranularMarking(gm *GranularMarking) IntrusionSetOption

+ func IntrusionSetOptionLables(lables []string) IntrusionSetOption

+ func IntrusionSetOptionLang(lang string) IntrusionSetOption

+ func IntrusionSetOptionLastSeen(t *Timestamp) IntrusionSetOption

+ func IntrusionSetOptionModified(t *Timestamp) IntrusionSetOption

+ func IntrusionSetOptionObjectMarking(om []Identifier) IntrusionSetOption

+ func IntrusionSetOptionPrimaryMotivation(s string) IntrusionSetOption

+ func IntrusionSetOptionResourceLevel(s string) IntrusionSetOption

+ func IntrusionSetOptionRevoked(rev bool) IntrusionSetOption

+ func IntrusionSetOptionSecondaryMotivation(s string) IntrusionSetOption

+ func IntrusionSetOptionSpecVersion(ver string) IntrusionSetOption

+ type KillChainPhase struct

+ Name string

+ Phase string

+ func NewKillChainPhase(name, phase string) (*KillChainPhase, error)

+ func ParseKillChainPhase(data []byte) (*KillChainPhase, error)

+ type LanguageContent struct

+ Confidence int

+ Contents map[string]map[string]interface{}

+ Created *Timestamp

+ CreatedBy Identifier

+ ExternalReferences []*ExternalReference

+ GranularMarking *GranularMarking

+ ID Identifier

+ Lables []string

+ Modified *Timestamp

+ Object Identifier

+ ObjectMarking []Identifier

+ ObjectModified *Timestamp

+ Revoked bool

+ SpecVersion string

+ Type StixType

+ func NewLanguageContent(object Identifier, content map[string]map[string]interface{}, ...) (*LanguageContent, error)

+ type LanguageContentOption func(a *LanguageContent)

+ func LanguageContentOptionConfidence(confidence int) LanguageContentOption

+ func LanguageContentOptionCreated(t *Timestamp) LanguageContentOption

+ func LanguageContentOptionCreatedBy(id Identifier) LanguageContentOption

+ func LanguageContentOptionExternalReferences(refs []*ExternalReference) LanguageContentOption

+ func LanguageContentOptionGranularMarking(gm *GranularMarking) LanguageContentOption

+ func LanguageContentOptionLables(lables []string) LanguageContentOption

+ func LanguageContentOptionModified(t *Timestamp) LanguageContentOption

+ func LanguageContentOptionObjectMarking(om []Identifier) LanguageContentOption

+ func LanguageContentOptionObjectModified(s *Timestamp) LanguageContentOption

+ func LanguageContentOptionRevoked(rev bool) LanguageContentOption

+ func LanguageContentOptionSpecVersion(ver string) LanguageContentOption

+ type Location struct

+ AdminstrativeArea string

+ City string

+ Country string

+ Description string

+ Latitude float64

+ Longitude float64

+ Name string

+ PostalCode string

+ Precision float64

+ Region string

+ StreetAddress string

+ func NewLocation(region, country string, lat, long float64, opts ...LocationOption) (*Location, error)

+ type LocationOption func(a *Location)

+ func LocationOptionAdministrativeArea(a string) LocationOption

+ func LocationOptionCity(c string) LocationOption

+ func LocationOptionConfidence(confidence int) LocationOption

+ func LocationOptionCreated(t *Timestamp) LocationOption

+ func LocationOptionCreatedBy(id Identifier) LocationOption

+ func LocationOptionDesciption(des string) LocationOption

+ func LocationOptionExternalReferences(refs []*ExternalReference) LocationOption

+ func LocationOptionGranularMarking(gm *GranularMarking) LocationOption

+ func LocationOptionLables(lables []string) LocationOption

+ func LocationOptionLang(lang string) LocationOption

+ func LocationOptionModified(t *Timestamp) LocationOption

+ func LocationOptionName(s string) LocationOption

+ func LocationOptionObjectMarking(om []Identifier) LocationOption

+ func LocationOptionPostalCode(s string) LocationOption

+ func LocationOptionPrecision(p float64) LocationOption

+ func LocationOptionRevoked(rev bool) LocationOption

+ func LocationOptionSpecVersion(ver string) LocationOption

+ func LocationOptionStreetAddress(s string) LocationOption

+ type MACAddress struct

+ Value string

+ func NewMACAddress(value string, opts ...MACAddressOption) (*MACAddress, error)

+ type MACAddressOption func(a *MACAddress)

+ func MACAddressOptionDefanged(b bool) MACAddressOption

+ func MACAddressOptionExtension(name string, value interface{}) MACAddressOption

+ func MACAddressOptionGranularMarking(gm *GranularMarking) MACAddressOption

+ func MACAddressOptionObjectMarking(om []Identifier) MACAddressOption

+ func MACAddressOptionSpecVersion(ver string) MACAddressOption

+ type Malware struct

+ Aliases []string

+ Architecture []string

+ Capabilities []string

+ Description string

+ FirstSeen *Timestamp

+ IsFamily bool

+ KillChainPhashe []*KillChainPhase

+ Languages []string

+ LastSeen *Timestamp

+ MalwareType []string

+ Name string

+ OS string

+ Samples []Identifier

+ func NewMalware(malwareTypes []string, family bool, opts ...MalwareOption) (*Malware, error)

+ func (c *Malware) AddAuthoredBy(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (c *Malware) AddBeaconsTo(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (c *Malware) AddCommunicatesWith(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (c *Malware) AddControls(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (c *Malware) AddDownloads(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (c *Malware) AddDrops(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (c *Malware) AddExfiltratesTo(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (c *Malware) AddExploits(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (c *Malware) AddOriginatesFrom(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (c *Malware) AddTargets(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (c *Malware) AddUses(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (c *Malware) AddVariantOf(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ type MalwareAnalysis struct

+ AVResult string

+ AnalysisDefinitionVersion string

+ AnalysisEnded *Timestamp

+ AnalysisEngineVersion string

+ AnalysisSCOs []Identifier

+ AnalysisStarted *Timestamp

+ ConfigurationVersion string

+ HostVM Identifier

+ InstalledSoftware []Identifier

+ Modules []string

+ OS Identifier

+ Product string

+ Submitted *Timestamp

+ Version string

+ func NewMalwareAnalysis(product, result string, analysisSCOs []Identifier, ...) (*MalwareAnalysis, error)

+ func (c *MalwareAnalysis) AddAVAnalysisOf(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (c *MalwareAnalysis) AddCharacterizes(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (c *MalwareAnalysis) AddDynamicAnalysisOf(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (c *MalwareAnalysis) AddStaticAnalysisOf(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ type MalwareAnalysisOption func(a *MalwareAnalysis)

+ func MalwareAnalysisOptionAnalysisDefinitionVersion(s string) MalwareAnalysisOption

+ func MalwareAnalysisOptionAnalysisEnded(s *Timestamp) MalwareAnalysisOption

+ func MalwareAnalysisOptionAnalysisEngineVersion(s string) MalwareAnalysisOption

+ func MalwareAnalysisOptionAnalysisStarted(s *Timestamp) MalwareAnalysisOption

+ func MalwareAnalysisOptionConfidence(confidence int) MalwareAnalysisOption

+ func MalwareAnalysisOptionConfigurationVersion(s string) MalwareAnalysisOption

+ func MalwareAnalysisOptionCreated(t *Timestamp) MalwareAnalysisOption

+ func MalwareAnalysisOptionCreatedBy(id Identifier) MalwareAnalysisOption

+ func MalwareAnalysisOptionExternalReferences(refs []*ExternalReference) MalwareAnalysisOption

+ func MalwareAnalysisOptionGranularMarking(gm *GranularMarking) MalwareAnalysisOption

+ func MalwareAnalysisOptionHostVM(s Identifier) MalwareAnalysisOption

+ func MalwareAnalysisOptionInstalledSoftware(s []Identifier) MalwareAnalysisOption

+ func MalwareAnalysisOptionLables(lables []string) MalwareAnalysisOption

+ func MalwareAnalysisOptionLang(lang string) MalwareAnalysisOption

+ func MalwareAnalysisOptionModified(t *Timestamp) MalwareAnalysisOption

+ func MalwareAnalysisOptionModules(s []string) MalwareAnalysisOption

+ func MalwareAnalysisOptionOS(s Identifier) MalwareAnalysisOption

+ func MalwareAnalysisOptionObjectMarking(om []Identifier) MalwareAnalysisOption

+ func MalwareAnalysisOptionRevoked(rev bool) MalwareAnalysisOption

+ func MalwareAnalysisOptionSpecVersion(ver string) MalwareAnalysisOption

+ func MalwareAnalysisOptionSubmitted(s *Timestamp) MalwareAnalysisOption

+ func MalwareAnalysisOptionVersion(s string) MalwareAnalysisOption

+ type MalwareOption func(a *Malware)

+ func MalwareOptionAliases(s []string) MalwareOption

+ func MalwareOptionArchitecture(s []string) MalwareOption

+ func MalwareOptionCapabilities(s []string) MalwareOption

+ func MalwareOptionConfidence(confidence int) MalwareOption

+ func MalwareOptionCreated(t *Timestamp) MalwareOption

+ func MalwareOptionCreatedBy(id Identifier) MalwareOption

+ func MalwareOptionDesciption(des string) MalwareOption

+ func MalwareOptionExternalReferences(refs []*ExternalReference) MalwareOption

+ func MalwareOptionFirstSeen(t *Timestamp) MalwareOption

+ func MalwareOptionGranularMarking(gm *GranularMarking) MalwareOption

+ func MalwareOptionKillChainPhase(s []*KillChainPhase) MalwareOption

+ func MalwareOptionLables(lables []string) MalwareOption

+ func MalwareOptionLang(lang string) MalwareOption

+ func MalwareOptionLanguages(s []string) MalwareOption

+ func MalwareOptionLastSeen(t *Timestamp) MalwareOption

+ func MalwareOptionModified(t *Timestamp) MalwareOption

+ func MalwareOptionName(s string) MalwareOption

+ func MalwareOptionOS(s string) MalwareOption

+ func MalwareOptionObjectMarking(om []Identifier) MalwareOption

+ func MalwareOptionRevoked(rev bool) MalwareOption

+ func MalwareOptionSamples(s []Identifier) MalwareOption

+ func MalwareOptionSpecVersion(ver string) MalwareOption

+ type MarkingDefinition struct

+ Created *Timestamp

+ CreatedBy Identifier

+ Definition interface{}

+ DefinitionType string

+ ExternalReferences []*ExternalReference

+ GranularMarking *GranularMarking

+ ID Identifier

+ Name string

+ ObjectMarking []Identifier

+ SpecVersion string

+ Type StixType

+ func NewMarkingDefinition(typ string, definition interface{}, opts ...MarkingDefinitionOption) (*MarkingDefinition, error)

+ type MarkingDefinitionOption func(a *MarkingDefinition)

+ func MarkingDefinitionOptionCreated(t *Timestamp) MarkingDefinitionOption

+ func MarkingDefinitionOptionCreatedBy(id Identifier) MarkingDefinitionOption

+ func MarkingDefinitionOptionExternalReferences(refs []*ExternalReference) MarkingDefinitionOption

+ func MarkingDefinitionOptionGranularMarking(gm *GranularMarking) MarkingDefinitionOption

+ func MarkingDefinitionOptionName(s string) MarkingDefinitionOption

+ func MarkingDefinitionOptionObjectMarking(om []Identifier) MarkingDefinitionOption

+ func MarkingDefinitionOptionSpecVersion(ver string) MarkingDefinitionOption

+ type Mutex struct

+ Name string

+ func NewMutex(value string, opts ...MutexOption) (*Mutex, error)

+ type MutexOption func(a *Mutex)

+ func MutexOptionDefanged(b bool) MutexOption

+ func MutexOptionExtension(name string, value interface{}) MutexOption

+ func MutexOptionGranularMarking(gm *GranularMarking) MutexOption

+ func MutexOptionObjectMarking(om []Identifier) MutexOption

+ func MutexOptionSpecVersion(ver string) MutexOption

+ type NTFSFileExtension struct

+ AltDataStreams []AltDataStream

+ SID string

+ type NetworkTraffic struct

+ Dst Identifier

+ DstByteCount int64

+ DstPackets int64

+ DstPayload Identifier

+ DstPort int64

+ Encapsulated Identifier

+ Encapsulates []Identifier

+ End *Timestamp

+ IPFIX map[string]interface{}

+ IsActive bool

+ Protocols []string

+ Src Identifier

+ SrcByteCount int64

+ SrcPackets int64

+ SrcPayload Identifier

+ SrcPort int64

+ Start *Timestamp

+ func NewNetworkTraffic(proto []string, opts ...NetworkTrafficOption) (*NetworkTraffic, error)

+ func (n *NetworkTraffic) HTTPRequestExtension() *HTTPRequestExtension

+ func (n *NetworkTraffic) ICMPExtension() *ICMPExtension

+ func (n *NetworkTraffic) SocketExtension() *SocketExtension

+ func (n *NetworkTraffic) TCPExtension() *TCPExtension

+ type NetworkTrafficOption func(a *NetworkTraffic)

+ func NetworkTrafficOptionDefanged(b bool) NetworkTrafficOption

+ func NetworkTrafficOptionDst(s Identifier) NetworkTrafficOption

+ func NetworkTrafficOptionDstByteCount(s int64) NetworkTrafficOption

+ func NetworkTrafficOptionDstPackets(s int64) NetworkTrafficOption

+ func NetworkTrafficOptionDstPayload(s Identifier) NetworkTrafficOption

+ func NetworkTrafficOptionDstPort(s int64) NetworkTrafficOption

+ func NetworkTrafficOptionEncapsulated(s Identifier) NetworkTrafficOption

+ func NetworkTrafficOptionEncapsulates(s []Identifier) NetworkTrafficOption

+ func NetworkTrafficOptionEnd(s *Timestamp) NetworkTrafficOption

+ func NetworkTrafficOptionExtension(name string, value interface{}) NetworkTrafficOption

+ func NetworkTrafficOptionGranularMarking(gm *GranularMarking) NetworkTrafficOption

+ func NetworkTrafficOptionIPFIX(s map[string]interface{}) NetworkTrafficOption

+ func NetworkTrafficOptionIsActive(s bool) NetworkTrafficOption

+ func NetworkTrafficOptionObjectMarking(om []Identifier) NetworkTrafficOption

+ func NetworkTrafficOptionSpecVersion(ver string) NetworkTrafficOption

+ func NetworkTrafficOptionSrc(s Identifier) NetworkTrafficOption

+ func NetworkTrafficOptionSrcByteCount(s int64) NetworkTrafficOption

+ func NetworkTrafficOptionSrcPackets(s int64) NetworkTrafficOption

+ func NetworkTrafficOptionSrcPayload(s Identifier) NetworkTrafficOption

+ func NetworkTrafficOptionSrcPort(s int64) NetworkTrafficOption

+ func NetworkTrafficOptionStart(s *Timestamp) NetworkTrafficOption

+ type Note struct

+ Abstract string

+ Authors []string

+ Content string

+ Objects []Identifier

+ func NewNote(content string, objects []Identifier, opts ...NoteOption) (*Note, error)

+ type NoteOption func(a *Note)

+ func NoteOptionAbstract(s string) NoteOption

+ func NoteOptionAuthors(s []string) NoteOption

+ func NoteOptionConfidence(confidence int) NoteOption

+ func NoteOptionCreated(t *Timestamp) NoteOption

+ func NoteOptionCreatedBy(id Identifier) NoteOption

+ func NoteOptionExternalReferences(refs []*ExternalReference) NoteOption

+ func NoteOptionGranularMarking(gm *GranularMarking) NoteOption

+ func NoteOptionLables(lables []string) NoteOption

+ func NoteOptionLang(lang string) NoteOption

+ func NoteOptionModified(t *Timestamp) NoteOption

+ func NoteOptionObjectMarking(om []Identifier) NoteOption

+ func NoteOptionRevoked(rev bool) NoteOption

+ func NoteOptionSpecVersion(ver string) NoteOption

+ type ObservedData struct

+ FirstObserved *Timestamp

+ LastObserved *Timestamp

+ NumberObserved int64

+ ObjectRefs []Identifier

+ Objects map[string]*STIXCyberObservableObject

+ func NewObservedData(firstObserved, lastObserved *Timestamp, numberObserved int64, ...) (*ObservedData, error)

+ type ObservedDataOption func(a *ObservedData)

+ func ObservedDataOptionConfidence(confidence int) ObservedDataOption

+ func ObservedDataOptionCreated(t *Timestamp) ObservedDataOption

+ func ObservedDataOptionCreatedBy(id Identifier) ObservedDataOption

+ func ObservedDataOptionExternalReferences(refs []*ExternalReference) ObservedDataOption

+ func ObservedDataOptionGranularMarking(gm *GranularMarking) ObservedDataOption

+ func ObservedDataOptionLables(lables []string) ObservedDataOption

+ func ObservedDataOptionLang(lang string) ObservedDataOption

+ func ObservedDataOptionModified(t *Timestamp) ObservedDataOption

+ func ObservedDataOptionObjectMarking(om []Identifier) ObservedDataOption

+ func ObservedDataOptionRevoked(rev bool) ObservedDataOption

+ func ObservedDataOptionSpecVersion(ver string) ObservedDataOption

+ type Opinion struct

+ Authors []string

+ Explanation string

+ Objects []Identifier

+ Value OpinionValue

+ func NewOpinion(val OpinionValue, objects []Identifier, opts ...OpinionOption) (*Opinion, error)

+ type OpinionOption func(a *Opinion)

+ func OpinionOptionAuthors(s []string) OpinionOption

+ func OpinionOptionConfidence(confidence int) OpinionOption

+ func OpinionOptionCreated(t *Timestamp) OpinionOption

+ func OpinionOptionCreatedBy(id Identifier) OpinionOption

+ func OpinionOptionExplanation(s string) OpinionOption

+ func OpinionOptionExternalReferences(refs []*ExternalReference) OpinionOption

+ func OpinionOptionGranularMarking(gm *GranularMarking) OpinionOption

+ func OpinionOptionLables(lables []string) OpinionOption

+ func OpinionOptionLang(lang string) OpinionOption

+ func OpinionOptionModified(t *Timestamp) OpinionOption

+ func OpinionOptionObjectMarking(om []Identifier) OpinionOption

+ func OpinionOptionRevoked(rev bool) OpinionOption

+ func OpinionOptionSpecVersion(ver string) OpinionOption

+ type OpinionValue byte

+ const OpinionAgree

+ const OpinionDisagree

+ const OpinionNeutral

+ const OpinionStronglyAgree

+ const OpinionStronglyDisagree

+ func (typ *OpinionValue) UnmarshalJSON(b []byte) error

+ func (typ OpinionValue) String() string

+ type PDFExtension struct

+ DocumentInfo map[string]string

+ IsOptimized bool

+ PDFid0 string

+ PDFid1 string

+ Version string

+ type Process struct

+ Child []Identifier

+ CommandLine string

+ CreatedTime *Timestamp

+ CreatorUser Identifier

+ Cwd string

+ EnvVars map[string]string

+ Image Identifier

+ IsHidden bool

+ OpenedConnections []Identifier

+ PID int64

+ Parent Identifier

+ func NewProcess(opts ...ProcessOption) (*Process, error)

+ func (n *Process) WindowsProcessExtension() *WindowsProcessExtension

+ func (n *Process) WindowsServiceExtension() *WindowsServiceExtension

+ type ProcessOption func(a *Process)

+ func ProcessOptionChild(s []Identifier) ProcessOption

+ func ProcessOptionCommandLine(s string) ProcessOption

+ func ProcessOptionCreatedTime(s *Timestamp) ProcessOption

+ func ProcessOptionCreatorUser(s Identifier) ProcessOption

+ func ProcessOptionCwd(s string) ProcessOption

+ func ProcessOptionDefanged(b bool) ProcessOption

+ func ProcessOptionEnvVars(s map[string]string) ProcessOption

+ func ProcessOptionExtension(name string, value interface{}) ProcessOption

+ func ProcessOptionGranularMarking(gm *GranularMarking) ProcessOption

+ func ProcessOptionImage(s Identifier) ProcessOption

+ func ProcessOptionIsHidden(s bool) ProcessOption

+ func ProcessOptionObjectMarking(om []Identifier) ProcessOption

+ func ProcessOptionOpenedConnections(s []Identifier) ProcessOption

+ func ProcessOptionPID(s int64) ProcessOption

+ func ProcessOptionParent(s Identifier) ProcessOption

+ func ProcessOptionSpecVersion(ver string) ProcessOption

+ type RasterImageExtension struct

+ BitsPerPixel int64

+ ExifTags map[string]interface{}

+ Height int64

+ Width int64

+ type RegistryDataType byte

+ const RegBinary

+ const RegDword

+ const RegDwordBigEndian

+ const RegDwordLittleEndian

+ const RegExpandSz

+ const RegFullResourceDescription

+ const RegInvalidType

+ const RegLink

+ const RegMultiSz

+ const RegNone

+ const RegQword

+ const RegResourceList

+ const RegResourceRequirementsList

+ const RegSz

+ const RegUnknownValue

+ func (r *RegistryDataType) UnmarshalJSON(b []byte) error

+ func (r RegistryDataType) MarshalJSON() ([]byte, error)

+ func (r RegistryDataType) String() string

+ type RegistryKey struct

+ CreatorUser Identifier

+ Key string

+ ModifiedTime *Timestamp

+ NumberOfSubkeys int64

+ Values []*RegistryValue

+ func NewRegistryKey(opts ...RegistryKeyOption) (*RegistryKey, error)

+ type RegistryKeyOption func(a *RegistryKey)

+ func RegistryKeyOptionCreatorUser(s Identifier) RegistryKeyOption

+ func RegistryKeyOptionDefanged(b bool) RegistryKeyOption

+ func RegistryKeyOptionExtension(name string, value interface{}) RegistryKeyOption

+ func RegistryKeyOptionGranularMarking(gm *GranularMarking) RegistryKeyOption

+ func RegistryKeyOptionKey(s string) RegistryKeyOption

+ func RegistryKeyOptionModifiedTime(s *Timestamp) RegistryKeyOption

+ func RegistryKeyOptionNumberOfSubkeys(s int64) RegistryKeyOption

+ func RegistryKeyOptionObjectMarking(om []Identifier) RegistryKeyOption

+ func RegistryKeyOptionSpecVersion(ver string) RegistryKeyOption

+ func RegistryKeyOptionValues(s []*RegistryValue) RegistryKeyOption

+ type RegistryValue struct

+ Data string

+ DataType RegistryDataType

+ Name string

+ type Relationship struct

+ Description string

+ RelationshipType RelationshipType

+ Source Identifier

+ StartTime *Timestamp

+ StopTime *Timestamp

+ Target Identifier

+ func NewRelationship(relType RelationshipType, source, target Identifier, ...) (*Relationship, error)

+ type RelationshipOption func(r *Relationship)

+ func RelationshipOptionConfidence(confidence int) RelationshipOption

+ func RelationshipOptionCreated(t *Timestamp) RelationshipOption

+ func RelationshipOptionCreatedBy(id Identifier) RelationshipOption

+ func RelationshipOptionDesciption(des string) RelationshipOption

+ func RelationshipOptionExternalReferences(refs []*ExternalReference) RelationshipOption

+ func RelationshipOptionGranularMarking(gm *GranularMarking) RelationshipOption

+ func RelationshipOptionLables(lables []string) RelationshipOption

+ func RelationshipOptionLang(lang string) RelationshipOption

+ func RelationshipOptionModified(t *Timestamp) RelationshipOption

+ func RelationshipOptionObjectMarking(om []Identifier) RelationshipOption

+ func RelationshipOptionRevoked(rev bool) RelationshipOption

+ func RelationshipOptionSpecVersion(ver string) RelationshipOption

+ func RelationshipOptionStartTime(t *Timestamp) RelationshipOption

+ func RelationshipOptionStopTime(t *Timestamp) RelationshipOption

+ type RelationshipType uint16

+ const RelationshipTypeAVAnalysisOf

+ const RelationshipTypeAttrubutedTo

+ const RelationshipTypeAuthoredBy

+ const RelationshipTypeBasedOn

+ const RelationshipTypeBeaconsTo

+ const RelationshipTypeBelongsTo

+ const RelationshipTypeCharacterizes

+ const RelationshipTypeCommunicatesWith

+ const RelationshipTypeCompromises

+ const RelationshipTypeConsistsOf

+ const RelationshipTypeControls

+ const RelationshipTypeDelivers

+ const RelationshipTypeDownloads

+ const RelationshipTypeDrops

+ const RelationshipTypeDynamicAnalysisOf

+ const RelationshipTypeExfiltratesTo

+ const RelationshipTypeExploits

+ const RelationshipTypeHas

+ const RelationshipTypeHosts

+ const RelationshipTypeImpersonates

+ const RelationshipTypeIndicates

+ const RelationshipTypeLocatedAt

+ const RelationshipTypeMitigates

+ const RelationshipTypeOriginatesFrom

+ const RelationshipTypeOwns

+ const RelationshipTypeRelatedTo

+ const RelationshipTypeResolvesTo

+ const RelationshipTypeStaticAnalysisOf

+ const RelationshipTypeTargets

+ const RelationshipTypeUnknown

+ const RelationshipTypeUses

+ const RelationshipTypeVariantOf

+ func (r *RelationshipType) UnmarshalJSON(b []byte) error

+ func (r RelationshipType) MarshalJSON() ([]byte, error)

+ func (r RelationshipType) String() string

+ type Report struct

+ Description string

+ Name string

+ Objects []Identifier

+ Published *Timestamp

+ Types []string

+ func NewReport(name string, reportType []string, published *Timestamp, objects []Identifier, ...) (*Report, error)

+ type ReportOption func(a *Report)

+ func ReportOptionConfidence(confidence int) ReportOption

+ func ReportOptionCreated(t *Timestamp) ReportOption

+ func ReportOptionCreatedBy(id Identifier) ReportOption

+ func ReportOptionDescription(s string) ReportOption

+ func ReportOptionExternalReferences(refs []*ExternalReference) ReportOption

+ func ReportOptionGranularMarking(gm *GranularMarking) ReportOption

+ func ReportOptionLables(lables []string) ReportOption

+ func ReportOptionLang(lang string) ReportOption

+ func ReportOptionModified(t *Timestamp) ReportOption

+ func ReportOptionObjectMarking(om []Identifier) ReportOption

+ func ReportOptionRevoked(rev bool) ReportOption

+ func ReportOptionSpecVersion(ver string) ReportOption

+ type STIXCyberObservableObject struct

+ Defanged bool

+ Extensions map[string]json.RawMessage

+ GranularMarking *GranularMarking

+ ID Identifier

+ ObjectMarking []Identifier

+ SpecVersion string

+ Type StixType

+ type STIXDomainObject struct

+ Confidence int

+ Created *Timestamp

+ CreatedBy Identifier

+ ExternalReferences []*ExternalReference

+ GranularMarking *GranularMarking

+ ID Identifier

+ Lables []string

+ Lang string

+ Modified *Timestamp

+ ObjectMarking []Identifier

+ Revoked bool

+ SpecVersion string

+ Type StixType

+ type STIXRelationshipObject struct

+ Confidence int

+ Created *Timestamp

+ CreatedBy Identifier

+ ExternalReferences []*ExternalReference

+ GranularMarking *GranularMarking

+ ID Identifier

+ Lables []string

+ Lang string

+ Modified *Timestamp

+ ObjectMarking []Identifier

+ Revoked bool

+ SpecVersion string

+ Type StixType

+ type Sighting struct

+ Count int64

+ Description string

+ FirstSeen *Timestamp

+ LastSeen *Timestamp

+ ObservedData []Identifier

+ SightingOf Identifier

+ Summary bool

+ WhereSighted []Identifier

+ func NewSighting(s Identifier, opts ...SightingOption) (*Sighting, error)

+ type SightingOption func(r *Sighting)

+ func SightingOptionConfidence(confidence int) SightingOption

+ func SightingOptionCount(c int64) SightingOption

+ func SightingOptionCreated(t *Timestamp) SightingOption

+ func SightingOptionCreatedBy(id Identifier) SightingOption

+ func SightingOptionDesciption(des string) SightingOption

+ func SightingOptionExternalReferences(refs []*ExternalReference) SightingOption

+ func SightingOptionFirstSeen(t *Timestamp) SightingOption

+ func SightingOptionGranularMarking(gm *GranularMarking) SightingOption

+ func SightingOptionLables(lables []string) SightingOption

+ func SightingOptionLang(lang string) SightingOption

+ func SightingOptionLastSeen(t *Timestamp) SightingOption

+ func SightingOptionModified(t *Timestamp) SightingOption

+ func SightingOptionObjectMarking(om []Identifier) SightingOption

+ func SightingOptionObservedData(d []Identifier) SightingOption

+ func SightingOptionRevoked(rev bool) SightingOption

+ func SightingOptionSpecVersion(ver string) SightingOption

+ func SightingOptionSummary(b bool) SightingOption

+ func SightingOptionWhereSighted(i []Identifier) SightingOption

+ type SocketAddressFamily byte

+ const SocketFamilyAPPLETALK

+ const SocketFamilyBTH

+ const SocketFamilyINET

+ const SocketFamilyINET6

+ const SocketFamilyIPX

+ const SocketFamilyIRDA

+ const SocketFamilyNETBIOS

+ const SocketFamilyUNSPEC

+ const SocketFamilyUnknownValue

+ func (s *SocketAddressFamily) UnmarshalJSON(b []byte) error

+ func (s SocketAddressFamily) MarshalJSON() ([]byte, error)

+ func (s SocketAddressFamily) String() string

+ type SocketExtension struct

+ AddressFamily SocketAddressFamily

+ IsBlocking bool

+ IsListening bool

+ Options map[string]int64

+ SocketDescriptor int64

+ SocketHandle int64

+ SocketType SocketType

+ type SocketType byte

+ const SocketTypeDgram

+ const SocketTypeRaw

+ const SocketTypeRdm

+ const SocketTypeSeqpacket

+ const SocketTypeStream

+ const SocketTypeUnknown

+ func (s *SocketType) UnmarshalJSON(b []byte) error

+ func (s SocketType) MarshalJSON() ([]byte, error)

+ func (s SocketType) String() string

+ type Software struct

+ CPE string

+ Languages []string

+ Name string

+ Vendor string

+ Version string

+ func NewSoftware(name string, opts ...SoftwareOption) (*Software, error)

+ type SoftwareOption func(a *Software)

+ func SoftwareOptionCPE(s string) SoftwareOption

+ func SoftwareOptionDefanged(b bool) SoftwareOption

+ func SoftwareOptionExtension(name string, value interface{}) SoftwareOption

+ func SoftwareOptionGranularMarking(gm *GranularMarking) SoftwareOption

+ func SoftwareOptionLanguages(s []string) SoftwareOption

+ func SoftwareOptionObjectMarking(om []Identifier) SoftwareOption

+ func SoftwareOptionSpecVersion(ver string) SoftwareOption

+ func SoftwareOptionVendor(s string) SoftwareOption

+ func SoftwareOptionVersion(s string) SoftwareOption

+ type StatementMarking struct

+ Statement string

+ type StixCollection struct

+ ASs map[Identifier]*AS

+ Artifacts map[Identifier]*Artifact

+ AttackPatterns map[Identifier]*AttackPattern

+ Campaigns map[Identifier]*Campaign

+ CourseOfActions map[Identifier]*CourseOfAction

+ Directories map[Identifier]*Directory

+ DomainNames map[Identifier]*Domain

+ EmailAddresses map[Identifier]*EmailAddress

+ EmailMessages map[Identifier]*EmailMessage

+ Files map[Identifier]*File

+ Groups map[Identifier]*Grouping

+ IPv4Addresses map[Identifier]*IPv4Address

+ IPv6Addresses map[Identifier]*IPv6Address

+ Identities map[Identifier]*Identity

+ Indicators map[Identifier]*Indicator

+ Infrastructures map[Identifier]*Infrastructure

+ IntrusionSets map[Identifier]*IntrusionSet

+ LanguageContents map[Identifier]*LanguageContent

+ Locations map[Identifier]*Location

+ MACs map[Identifier]*MACAddress

+ Malware map[Identifier]*Malware

+ MalwareAnalysis map[Identifier]*MalwareAnalysis

+ MarkingDefinitions map[Identifier]*MarkingDefinition

+ Mutexes map[Identifier]*Mutex

+ NetworkTraffic map[Identifier]*NetworkTraffic

+ Notes map[Identifier]*Note

+ ObservedData map[Identifier]*ObservedData

+ Opinions map[Identifier]*Opinion

+ Processes map[Identifier]*Process

+ RegistryKeys map[Identifier]*RegistryKey

+ Relationships map[Identifier]*Relationship

+ Reports map[Identifier]*Report

+ Sightings map[Identifier]*Sighting

+ Software map[Identifier]*Software

+ ThreatActors map[Identifier]*ThreatActor

+ Tools map[Identifier]*Tool

+ URLs map[Identifier]*URL

+ UserAccounts map[Identifier]*UserAccount

+ Vulnerabilities map[Identifier]*Vulnerability

+ X509Certificates map[Identifier]*X509Certificate

+ func FromJSON(data []byte) (*StixCollection, error)

+ type StixType uint16

+ const TypeAS

+ const TypeArtifact

+ const TypeAttackPattern

+ const TypeCampaign

+ const TypeCourseOfAction

+ const TypeDirectory

+ const TypeDomainName

+ const TypeEmailAddress

+ const TypeEmailMIME

+ const TypeEmailMessage

+ const TypeFile

+ const TypeGrouping

+ const TypeIPv4Addr

+ const TypeIPv6Addr

+ const TypeIdentity

+ const TypeIndicator

+ const TypeInfrastructure

+ const TypeIntrusionSet

+ const TypeLanguageContent

+ const TypeLocation

+ const TypeMACAddress

+ const TypeMalware

+ const TypeMalwareAnalysis

+ const TypeMarkingDefinition

+ const TypeMutex

+ const TypeNetworkTraffic

+ const TypeNote

+ const TypeObservedData

+ const TypeOpinion

+ const TypeProcess

+ const TypeRegistryKey

+ const TypeRelationship

+ const TypeReport

+ const TypeSighting

+ const TypeSoftware

+ const TypeThreatActor

+ const TypeTool

+ const TypeURL

+ const TypeUnknown

+ const TypeUserAccount

+ const TypeVulnerability

+ const TypeX509Certificate

+ func (typ *StixType) UnmarshalJSON(b []byte) error

+ func (typ StixType) String() string

+ type TCPExtension struct

+ DstFlags Hex

+ SrcFlags Hex

+ type TLPMarking struct

+ TLP string

+ type ThreatActor struct

+ Aliases []string

+ Description string

+ FirstSeen *Timestamp

+ Goals []string

+ LastSeen *Timestamp

+ Name string

+ PersonalMotivations []string

+ PrimaryMotivation string

+ ResourceLevel string

+ Roles []string

+ SecondaryMotivations []string

+ Sophistication string

+ Types []string

+ func NewThreatActor(name string, types []string, opts ...ThreatActorOption) (*ThreatActor, error)

+ func (a *ThreatActor) AddAttributedTo(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (a *ThreatActor) AddCompromises(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (a *ThreatActor) AddHosts(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (a *ThreatActor) AddImpersonates(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (a *ThreatActor) AddLocatedAt(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (a *ThreatActor) AddOwns(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (a *ThreatActor) AddTargets(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (a *ThreatActor) AddUses(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ type ThreatActorOption func(a *ThreatActor)

+ func ThreatActorOptionAliases(s []string) ThreatActorOption

+ func ThreatActorOptionConfidence(confidence int) ThreatActorOption

+ func ThreatActorOptionCreated(t *Timestamp) ThreatActorOption

+ func ThreatActorOptionCreatedBy(id Identifier) ThreatActorOption

+ func ThreatActorOptionDescription(s string) ThreatActorOption

+ func ThreatActorOptionExternalReferences(refs []*ExternalReference) ThreatActorOption

+ func ThreatActorOptionFirstSeen(s *Timestamp) ThreatActorOption

+ func ThreatActorOptionGoals(s []string) ThreatActorOption

+ func ThreatActorOptionGranularMarking(gm *GranularMarking) ThreatActorOption

+ func ThreatActorOptionLables(lables []string) ThreatActorOption

+ func ThreatActorOptionLang(lang string) ThreatActorOption

+ func ThreatActorOptionLastSeen(s *Timestamp) ThreatActorOption

+ func ThreatActorOptionModified(t *Timestamp) ThreatActorOption

+ func ThreatActorOptionObjectMarking(om []Identifier) ThreatActorOption

+ func ThreatActorOptionPersonalMotivations(s []string) ThreatActorOption

+ func ThreatActorOptionPrimaryMotivation(s string) ThreatActorOption

+ func ThreatActorOptionResourceLevel(s string) ThreatActorOption

+ func ThreatActorOptionRevoked(rev bool) ThreatActorOption

+ func ThreatActorOptionRoles(s []string) ThreatActorOption

+ func ThreatActorOptionSecondaryMotivations(s []string) ThreatActorOption

+ func ThreatActorOptionSophistication(s string) ThreatActorOption

+ func ThreatActorOptionSpecVersion(ver string) ThreatActorOption

+ type Timestamp struct

+ func (t *Timestamp) MarshalJSON() ([]byte, error)

+ func (t *Timestamp) String() string

+ func (t *Timestamp) UnmarshalJSON(b []byte) error

+ type Tool struct

+ Aliases []string

+ Description string

+ KillChainPhase []*KillChainPhase

+ Name string

+ ToolVersion string

+ Types []string

+ func NewTool(name string, types []string, opts ...ToolOption) (*Tool, error)

+ func (a *Tool) AddDelivers(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (a *Tool) AddDrops(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (a *Tool) AddHas(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (a *Tool) AddTargets(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ func (a *Tool) AddUses(id Identifier, opts ...RelationshipOption) (*Relationship, error)

+ type ToolOption func(a *Tool)

+ func ToolOptionAliases(s []string) ToolOption

+ func ToolOptionConfidence(confidence int) ToolOption

+ func ToolOptionCreated(t *Timestamp) ToolOption

+ func ToolOptionCreatedBy(id Identifier) ToolOption

+ func ToolOptionDescription(s string) ToolOption

+ func ToolOptionExternalReferences(refs []*ExternalReference) ToolOption

+ func ToolOptionGranularMarking(gm *GranularMarking) ToolOption

+ func ToolOptionKillChainPhase(s []*KillChainPhase) ToolOption

+ func ToolOptionLables(lables []string) ToolOption

+ func ToolOptionLang(lang string) ToolOption

+ func ToolOptionModified(t *Timestamp) ToolOption

+ func ToolOptionObjectMarking(om []Identifier) ToolOption

+ func ToolOptionRevoked(rev bool) ToolOption

+ func ToolOptionSpecVersion(ver string) ToolOption

+ func ToolOptionToolVersion(s string) ToolOption

+ type UNIXAccountExtension struct

+ GID int64

+ Groups []string

+ Home string

+ Shell string

+ type URL struct

+ Value string

+ func NewURL(value string, opts ...URLOption) (*URL, error)

+ type URLOption func(a *URL)

+ func URLOptionDefanged(b bool) URLOption

+ func URLOptionExtension(name string, value interface{}) URLOption

+ func URLOptionGranularMarking(gm *GranularMarking) URLOption

+ func URLOptionObjectMarking(om []Identifier) URLOption

+ func URLOptionSpecVersion(ver string) URLOption

+ type UserAccount struct

+ AccountCreated *Timestamp

+ AccountExpires *Timestamp

+ AccountFirstLogin *Timestamp

+ AccountLastLogin *Timestamp

+ AccountLogin string

+ AccountType AccountType

+ CanEscalatePrivs bool

+ Credential string

+ CredentialLastChanged *Timestamp

+ DisplayName string

+ IsDisabled bool

+ IsPrivileged bool

+ IsServiceAccount bool

+ UserID string

+ func NewUserAccount(opts ...UserAccountOption) (*UserAccount, error)

+ func (n *UserAccount) UNIXAccountExtension() *UNIXAccountExtension

+ type UserAccountOption func(a *UserAccount)

+ func UserAccountOptionAccountCreated(s *Timestamp) UserAccountOption

+ func UserAccountOptionAccountExpires(s *Timestamp) UserAccountOption

+ func UserAccountOptionAccountFirstLogin(s *Timestamp) UserAccountOption

+ func UserAccountOptionAccountLastLogin(s *Timestamp) UserAccountOption

+ func UserAccountOptionAccountLogin(s string) UserAccountOption

+ func UserAccountOptionAccountType(s AccountType) UserAccountOption

+ func UserAccountOptionCanEscalatePrivs(s bool) UserAccountOption

+ func UserAccountOptionCredential(s string) UserAccountOption

+ func UserAccountOptionCredentialLastChanged(s *Timestamp) UserAccountOption

+ func UserAccountOptionDefanged(b bool) UserAccountOption

+ func UserAccountOptionDisplayName(s string) UserAccountOption

+ func UserAccountOptionExtension(name string, value interface{}) UserAccountOption

+ func UserAccountOptionGranularMarking(gm *GranularMarking) UserAccountOption

+ func UserAccountOptionIsDisabled(s bool) UserAccountOption

+ func UserAccountOptionIsPrivileged(s bool) UserAccountOption

+ func UserAccountOptionIsServiceAccount(s bool) UserAccountOption

+ func UserAccountOptionObjectMarking(om []Identifier) UserAccountOption

+ func UserAccountOptionSpecVersion(ver string) UserAccountOption

+ func UserAccountOptionUserID(s string) UserAccountOption

+ type Vulnerability struct

+ Description string

+ Name string

+ func NewVulnerability(name string, opts ...VulnerabilityOption) (*Vulnerability, error)

+ type VulnerabilityOption func(a *Vulnerability)

+ func VulnerabilityOptionConfidence(confidence int) VulnerabilityOption

+ func VulnerabilityOptionCreated(t *Timestamp) VulnerabilityOption

+ func VulnerabilityOptionCreatedBy(id Identifier) VulnerabilityOption

+ func VulnerabilityOptionDescription(s string) VulnerabilityOption

+ func VulnerabilityOptionExternalReferences(refs []*ExternalReference) VulnerabilityOption

+ func VulnerabilityOptionGranularMarking(gm *GranularMarking) VulnerabilityOption

+ func VulnerabilityOptionLables(lables []string) VulnerabilityOption

+ func VulnerabilityOptionLang(lang string) VulnerabilityOption

+ func VulnerabilityOptionModified(t *Timestamp) VulnerabilityOption

+ func VulnerabilityOptionObjectMarking(om []Identifier) VulnerabilityOption

+ func VulnerabilityOptionRevoked(rev bool) VulnerabilityOption

+ func VulnerabilityOptionSpecVersion(ver string) VulnerabilityOption

+ type WindowsIntegrityLevel byte

+ const IntegrityLevelHigh

+ const IntegrityLevelLow

+ const IntegrityLevelMedium

+ const IntegrityLevelSystem

+ const IntegrityLevelUnknown

+ func (s *WindowsIntegrityLevel) UnmarshalJSON(b []byte) error

+ func (s WindowsIntegrityLevel) MarshalJSON() ([]byte, error)

+ func (s WindowsIntegrityLevel) String() string

+ type WindowsPEBinaryExtension struct

+ Characteristics Hex

+ FileHeaderHash Hashes

+ ImpHash string

+ Machine Hex

+ NumberOfSections int64

+ NumberOfSymbols int64

+ OptionalHeader WindowsPEOptionalHeader

+ PEType WindowsPEBinaryType

+ PointerToSymbolTable Hex

+ Sections []WindowsPESection

+ SizeOfOptionalHeader int64

+ TimeDateStamp *Timestamp

+ type WindowsPEBinaryType string

+ const WindowsPEDLL

+ const WindowsPEExe

+ const WindowsPESys

+ type WindowsPEOptionalHeader struct

+ AddressOfEntryPoint int64

+ BaseOfCode int64

+ BaseOfData int64

+ Checksum Hex

+ DLLCharacteristics Hex

+ FileAlignment int64

+ Hashes Hashes

+ ImageBase int64

+ LoaderFlags Hex

+ Magic Hex

+ MajorImageVersion int64

+ MajorLinkerVersion int64

+ MajorOSVersion int64

+ MajorSubsystemVersion int64

+ MinorImageVersion int64

+ MinorLinkerVersion int64

+ MinorOSVersion int64

+ MinorSubsystemVersion int64

+ NumberOfRVAAndSizes int64

+ SectionAlignment int64

+ SizeOfCode int64

+ SizeOfHeaders int64

+ SizeOfHeapCommit int64

+ SizeOfHeapReserve int64

+ SizeOfImage int64

+ SizeOfInializedData int64

+ SizeOfStackCommit int64

+ SizeOfStackReserve int64

+ SizeOfUninitializedData int64

+ Subsystem Hex

+ Win32VersionValue Hex

+ type WindowsPESection struct

+ Entropy float64

+ Hashes Hashes

+ Name string

+ Size int64

+ type WindowsProcessExtension struct

+ ASLR bool

+ DEP bool

+ InterityLevel WindowsIntegrityLevel

+ OwnerSID string

+ Priority string

+ StartupInfo map[string]interface{}

+ WindowTitle string

+ type WindowsServiceExtension struct

+ Descriptions []string

+ DisplayName string

+ GroupName string

+ Name string

+ ServiceDLL []Identifier

+ ServiceStatus WindowsServiceStatusType

+ ServiceType WindowsServiceType

+ StartType WindowsServiceStartType

+ type WindowsServiceStartType byte

+ const ServiceStartAuto

+ const ServiceStartBoot

+ const ServiceStartDemand

+ const ServiceStartDisabled

+ const ServiceStartSystem

+ const ServiceStartUnknown

+ func (s *WindowsServiceStartType) UnmarshalJSON(b []byte) error

+ func (s WindowsServiceStartType) MarshalJSON() ([]byte, error)

+ func (s WindowsServiceStartType) String() string

+ type WindowsServiceStatusType byte

+ const ServiceStatusContinuePending

+ const ServiceStatusPausePending

+ const ServiceStatusPaused

+ const ServiceStatusRunning

+ const ServiceStatusStartPending

+ const ServiceStatusStopPending

+ const ServiceStatusStopped

+ const ServiceStatusUnknown

+ func (s *WindowsServiceStatusType) UnmarshalJSON(b []byte) error

+ func (s WindowsServiceStatusType) MarshalJSON() ([]byte, error)

+ func (s WindowsServiceStatusType) String() string

+ type WindowsServiceType byte

+ const ServiceFileSystemDriver

+ const ServiceKernelDriver

+ const ServiceUnknown

+ const ServiceWin32OwnProcess

+ const ServiceWin32ShareProcess

+ func (s *WindowsServiceType) UnmarshalJSON(b []byte) error

+ func (s WindowsServiceType) MarshalJSON() ([]byte, error)

+ func (s WindowsServiceType) String() string

+ type X509Certificate struct

+ Hashes Hashes

+ Issuer string

+ SelfSigned bool

+ SerialNumber string

+ SignatureAlgorithm string

+ Subject string

+ SubjectPublicKeyAlghorithm string

+ SubjectPublicKeyExponent int64

+ SubjectPublicKeyModulus string

+ ValidityNotAfter *Timestamp

+ ValidityNotBefore *Timestamp

+ Version string

+ X509v3Extensions X509v3Extension

+ func NewX509Certificate(opts ...X509CertificateOption) (*X509Certificate, error)

+ type X509CertificateOption func(a *X509Certificate)

+ func X509CertificateOptionDefanged(b bool) X509CertificateOption

+ func X509CertificateOptionExtension(name string, value interface{}) X509CertificateOption

+ func X509CertificateOptionGranularMarking(gm *GranularMarking) X509CertificateOption

+ func X509CertificateOptionHashes(s Hashes) X509CertificateOption

+ func X509CertificateOptionIssuer(s string) X509CertificateOption

+ func X509CertificateOptionObjectMarking(om []Identifier) X509CertificateOption

+ func X509CertificateOptionSelfSigned(s bool) X509CertificateOption

+ func X509CertificateOptionSerialNumber(s string) X509CertificateOption

+ func X509CertificateOptionSignatureAlgorithm(s string) X509CertificateOption

+ func X509CertificateOptionSpecVersion(ver string) X509CertificateOption

+ func X509CertificateOptionSubject(s string) X509CertificateOption

+ func X509CertificateOptionSubjectPublicKeyAlgorithm(s string) X509CertificateOption

+ func X509CertificateOptionSubjectPublicKeyExponent(s int64) X509CertificateOption

+ func X509CertificateOptionSubjectPublicKeyModulus(s string) X509CertificateOption

+ func X509CertificateOptionV3Extensions(s X509v3Extension) X509CertificateOption

+ func X509CertificateOptionValidityNotAfter(s *Timestamp) X509CertificateOption

+ func X509CertificateOptionValidityNotBefore(s *Timestamp) X509CertificateOption

+ func X509CertificateOptionVersion(s string) X509CertificateOption

+ type X509v3Extension struct

+ AuthorityKeyIdentifier string

+ BasicConstraints string

+ CRLDistributionPoints string

+ CertificatePolicies string

+ ExtendedKeyUsage string

+ InhibitAnyPolicy string

+ IssuerAltName string

+ KeyUsage string

+ NameConstraints string

+ PolicyConstraints string

+ PolicyMappings string

+ PrivateKeyUsagePeriodNotAfter *Timestamp

+ PrivateKeyUsagePeriodNotBefore *Timestamp

+ SubjectAltName string

+ SubjectDirectoryAttributes string

+ SubjectKeyIdentifier string

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL