STIX 2 Utilities

Modified on: Wed, 5 May, 2021 at 1:44 AM

Overview

Structured Threat Information Expression (STIX™) is a language and serialization format used to exchange cyber threat intelligence (CTI). The Maltego STIX 2 Utilities Transforms make it easy to query and visualize structured threat information from different systems based on STIX.


This Hub item contains standard STIX 2 Entity definitions and a set of helper Transforms to pivot between these Entities and the relations they have to other STIX objects via their properties.


To make full use of STIX threat intelligence in Maltego, a supplementary integration into a STIX-compatible system (for example, OpenCTI) is also needed.The development of STIX2 entities for Maltego was initially started by ANSSI and was subsequently supported by Maltego. The project is available as open source software at https://github.com/amr-cossi/maltego-stix2.


Read more about STIX 2 Utilities on our website here and be sure to catch our blog post, Unleashing the Power of Cyber Threat Intelligence with Maltego, STIX and OpenCTI


STIX 2 Utilities Transforms

Identity to Aliases [STIX2]

Description

STIX2: Identity to Aliases


Transform Meta Info

InformationValue
Display NameIdentity to Aliases [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2identityexplodexopenctialiases
Input Entitiesmaltego.STIX2.identity
Output EntitiesPhrase
Short DescriptionSTIX2: Identity to Aliases

Threat Actor to Aliases [STIX2]

Description

STIX2: Threat Actor to Aliases


Transform Meta Info

InformationValue
Display NameThreat Actor to Aliases [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2threatactorexplodealiases
Input Entitiesmaltego.STIX2.threat-actor
Output EntitiesPhrase
Short DescriptionSTIX2: Threat Actor to Aliases

Intrusion Set to Aliases [STIX2]

Description

STIX2: Intrusion Set to Aliases


Transform Meta Info

InformationValue
Display NameIntrusion Set to Aliases [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2intrusionsetexplodealiases
Input Entitiesmaltego.STIX2.intrusion-set
Output EntitiesPhrase
Short DescriptionSTIX2: Intrusion Set to Aliases

Campaign to Aliases [STIX2]

Description

STIX2: Campaign to Aliases


Transform Meta Info

InformationValue
Display NameCampaign to Aliases [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2campaignexplodealiases
Input Entitiesmaltego.STIX2.campaign
Output EntitiesPhrase
Short DescriptionSTIX2: Campaign to Aliases

Malware to Aliases [STIX2]

Description

STIX2: Malware to Aliases


Transform Meta Info

InformationValue
Display NameMalware to Aliases [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2malwareexplodealiases
Input Entitiesmaltego.STIX2.malware
Output EntitiesPhrase
Short DescriptionSTIX2: Malware to Aliases

Infrastructure to Aliases [STIX2]

Description

STIX2: Infrastructure to Aliases


Transform Meta Info

InformationValue
Display NameInfrastructure to Aliases [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2infrastructureexplodealiases
Input Entitiesmaltego.STIX2.infrastructure
Output EntitiesPhrase
Short DescriptionSTIX2: Infrastructure to Aliases

Incident to Aliases [STIX2]

Description

STIX2: Incident to Aliases


Transform Meta Info

InformationValue
Display NameIncident to Aliases [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2incidentexplodealiases
Input Entitiesmaltego.STIX2.incident
Output EntitiesPhrase
Short DescriptionSTIX2: Incident to Aliases

Attack Pattern to Aliases [STIX2]

Description

STIX2: Attack Pattern to Aliases


Transform Meta Info

InformationValue
Display NameAttack Pattern to Aliases [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2attackpatternexplodealiases
Input Entitiesmaltego.STIX2.attack-pattern
Output EntitiesPhrase
Short DescriptionSTIX2: Attack Pattern to Aliases

Tool to Aliases [STIX2]

Description

STIX2: Tool to Aliases


Transform Meta Info

InformationValue
Display NameTool to Aliases [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2toolexplodealiases
Input Entitiesmaltego.STIX2.tool
Output EntitiesPhrase
Short DescriptionSTIX2: Tool to Aliases

Report to Creator [STIX2]

Description

STIX2: Report to Creator


Transform Meta Info

InformationValue
Display NameReport to Creator [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2reportexplodecreatedbyref
Input Entitiesmaltego.STIX2.report
Output EntitiesPhrase
Short DescriptionSTIX2: Report to Creator

Vulnerability to Creator [STIX2]

Description

STIX2: Vulnerability to Creator


Transform Meta Info

InformationValue
Display NameVulnerability to Creator [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2vulnerabilityexplodecreatedbyref
Input Entitiesmaltego.STIX2.vulnerability
Output EntitiesPhrase
Short DescriptionSTIX2: Vulnerability to Creator

Opinion to Creator [STIX2]

Description

STIX2: Opinion to Creator


Transform Meta Info

InformationValue
Display NameOpinion to Creator [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2opinionexplodecreatedbyref
Input Entitiesmaltego.STIX2.opinion
Output EntitiesPhrase
Short DescriptionSTIX2: Opinion to Creator

Tool to Creator [STIX2]

Description

STIX2: Tool to Creator


Transform Meta Info

InformationValue
Display NameTool to Creator [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2toolexplodecreatedbyref
Input Entitiesmaltego.STIX2.tool
Output EntitiesPhrase
Short DescriptionSTIX2: Tool to Creator

Campaign to Creator [STIX2]

Description

STIX2: Campaign to Creator


Transform Meta Info

InformationValue
Display NameCampaign to Creator [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2campaignexplodecreatedbyref
Input Entitiesmaltego.STIX2.campaign
Output EntitiesPhrase
Short DescriptionSTIX2: Campaign to Creator

Infrastructure to Creator [STIX2]

Description

STIX2: Infrastructure to Creator


Transform Meta Info

InformationValue
Display NameInfrastructure to Creator [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2infrastructureexplodecreatedbyref
Input Entitiesmaltego.STIX2.infrastructure
Output EntitiesPhrase
Short DescriptionSTIX2: Infrastructure to Creator

Identity to Creator [STIX2]

Description

STIX2: Identity to Creator


Transform Meta Info

InformationValue
Display NameIdentity to Creator [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2identityexplodecreatedbyref
Input Entitiesmaltego.STIX2.identity
Output EntitiesPhrase
Short DescriptionSTIX2: Identity to Creator

Malware to Creator [STIX2]

Description

STIX2: Malware to Creator


Transform Meta Info

InformationValue
Display NameMalware to Creator [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2malwareexplodecreatedbyref
Input Entitiesmaltego.STIX2.malware
Output EntitiesPhrase
Short DescriptionSTIX2: Malware to Creator

Malware Analysis to Creator [STIX2]

Description

STIX2: Malware Analysis to Creator


Transform Meta Info

InformationValue
Display NameMalware Analysis to Creator [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2malwareanalysisexplodecreatedbyref
Input Entitiesmaltego.STIX2.malware-analysis
Output EntitiesPhrase
Short DescriptionSTIX2: Malware Analysis to Creator

Indicator to Creator [STIX2]

Description

STIX2: Indicator to Creator


Transform Meta Info

InformationValue
Display NameIndicator to Creator [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2indicatorexplodecreatedbyref
Input Entitiesmaltego.STIX2.indicator
Output EntitiesPhrase
Short DescriptionSTIX2: Indicator to Creator

Intrusion Set to Creator [STIX2]

Description

STIX2: Intrusion Set to Creator


Transform Meta Info

InformationValue
Display NameIntrusion Set to Creator [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2intrusionsetexplodecreatedbyref
Input Entitiesmaltego.STIX2.intrusion-set
Output EntitiesPhrase
Short DescriptionSTIX2: Intrusion Set to Creator

Location to Creator [STIX2]

Description

STIX2: Location to Creator


Transform Meta Info

InformationValue
Display NameLocation to Creator [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2locationexplodecreatedbyref
Input Entitiesmaltego.STIX2.location
Output EntitiesPhrase
Short DescriptionSTIX2: Location to Creator

Note to Creator [STIX2]

Description

STIX2: Note to Creator


Transform Meta Info

InformationValue
Display NameNote to Creator [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2noteexplodecreatedbyref
Input Entitiesmaltego.STIX2.note
Output EntitiesPhrase
Short DescriptionSTIX2: Note to Creator

Threat Actor to Creator [STIX2]

Description

STIX2: Threat Actor to Creator


Transform Meta Info

InformationValue
Display NameThreat Actor to Creator [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2threatactorexplodecreatedbyref
Input Entitiesmaltego.STIX2.threat-actor
Output EntitiesPhrase
Short DescriptionSTIX2: Threat Actor to Creator

Observed Data to Creator [STIX2]

Description

STIX2: Observed Data to Creator


Transform Meta Info

InformationValue
Display NameObserved Data to Creator [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2observeddataexplodecreatedbyref
Input Entitiesmaltego.STIX2.observed-data
Output EntitiesPhrase
Short DescriptionSTIX2: Observed Data to Creator

Attack Pattern to Creator [STIX2]

Description

STIX2: Attack Pattern to Creator


Transform Meta Info

InformationValue
Display NameAttack Pattern to Creator [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2attackpatternexplodecreatedbyref
Input Entitiesmaltego.STIX2.attack-pattern
Output EntitiesPhrase
Short DescriptionSTIX2: Attack Pattern to Creator

Grouping to Creator [STIX2]

Description

STIX2: Grouping to Creator


Transform Meta Info

InformationValue
Display NameGrouping to Creator [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2groupingexplodecreatedbyref
Input Entitiesmaltego.STIX2.grouping
Output EntitiesPhrase
Short DescriptionSTIX2: Grouping to Creator

Course Of Action to Creator [STIX2]

Description

STIX2: Course Of Action to Creator


Transform Meta Info

InformationValue
Display NameCourse Of Action to Creator [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2courseofactionexplodecreatedbyref
Input Entitiesmaltego.STIX2.course-of-action
Output EntitiesPhrase
Short DescriptionSTIX2: Course Of Action to Creator

Sighting to Creator [STIX2]

Description

STIX2: Sighting to Creator


Transform Meta Info

InformationValue
Display NameSighting to Creator [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2sightingexplodecreatedbyref
Input Entitiesmaltego.STIX2.sighting
Output EntitiesPhrase
Short DescriptionSTIX2: Sighting to Creator

Relationship to Creator [STIX2]

Description

STIX2: Relationship to Creator


Transform Meta Info

InformationValue
Display NameRelationship to Creator [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2relationshipexplodecreatedbyref
Input Entitiesmaltego.STIX2.relationship
Output EntitiesPhrase
Short DescriptionSTIX2: Relationship to Creator

Incident to Creator [STIX2]

Description

STIX2: Incident to Creator


Transform Meta Info

InformationValue
Display NameIncident to Creator [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2incidentexplodecreatedbyref
Input Entitiesmaltego.STIX2.incident
Output EntitiesPhrase
Short DescriptionSTIX2: Incident to Creator

File to Hashes [STIX2]

Description

STIX2: File to Hashes


Transform Meta Info

InformationValue
Display NameFile to Hashes [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2fileexplodehashes
Input Entitiesmaltego.STIX2.file
Output EntitiesPhrase
Short DescriptionSTIX2: File to Hashes

Report to Labels [STIX2]

Description

STIX2: Report to Labels


Transform Meta Info

InformationValue
Display NameReport to Labels [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2reportexplodelabels
Input Entitiesmaltego.STIX2.report
Output EntitiesPhrase
Short DescriptionSTIX2: Report to Labels

Vulnerability to Labels [STIX2]

Description

STIX2: Vulnerability to Labels


Transform Meta Info

InformationValue
Display NameVulnerability to Labels [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2vulnerabilityexplodelabels
Input Entitiesmaltego.STIX2.vulnerability
Output EntitiesPhrase
Short DescriptionSTIX2: Vulnerability to Labels

Opinion to Labels [STIX2]

Description

STIX2: Opinion to Labels


Transform Meta Info

InformationValue
Display NameOpinion to Labels [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2opinionexplodelabels
Input Entitiesmaltego.STIX2.opinion
Output EntitiesPhrase
Short DescriptionSTIX2: Opinion to Labels

Tool to Labels [STIX2]

Description

STIX2: Tool to Labels


Transform Meta Info

InformationValue
Display NameTool to Labels [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2toolexplodelabels
Input Entitiesmaltego.STIX2.tool
Output EntitiesPhrase
Short DescriptionSTIX2: Tool to Labels

Campaign to Labels [STIX2]

Description

STIX2: Campaign to Labels


Transform Meta Info

InformationValue
Display NameCampaign to Labels [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2campaignexplodelabels
Input Entitiesmaltego.STIX2.campaign
Output EntitiesPhrase
Short DescriptionSTIX2: Campaign to Labels

Infrastructure to Labels [STIX2]

Description

STIX2: Infrastructure to Labels


Transform Meta Info

InformationValue
Display NameInfrastructure to Labels [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2infrastructureexplodelabels
Input Entitiesmaltego.STIX2.infrastructure
Output EntitiesPhrase
Short DescriptionSTIX2: Infrastructure to Labels

Identity to Labels [STIX2]

Description

STIX2: Identity to Labels


Transform Meta Info

InformationValue
Display NameIdentity to Labels [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2identityexplodelabels
Input Entitiesmaltego.STIX2.identity
Output EntitiesPhrase
Short DescriptionSTIX2: Identity to Labels

Malware to Labels [STIX2]

Description

STIX2: Malware to Labels


Transform Meta Info

InformationValue
Display NameMalware to Labels [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2malwareexplodelabels
Input Entitiesmaltego.STIX2.malware
Output EntitiesPhrase
Short DescriptionSTIX2: Malware to Labels

Malware Analysis to Labels [STIX2]

Description

STIX2: Malware Analysis to Labels


Transform Meta Info

InformationValue
Display NameMalware Analysis to Labels [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2malwareanalysisexplodelabels
Input Entitiesmaltego.STIX2.malware-analysis
Output EntitiesPhrase
Short DescriptionSTIX2: Malware Analysis to Labels

Indicator to Labels [STIX2]

Description

STIX2: Indicator to Labels


Transform Meta Info

InformationValue
Display NameIndicator to Labels [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2indicatorexplodelabels
Input Entitiesmaltego.STIX2.indicator
Output EntitiesPhrase
Short DescriptionSTIX2: Indicator to Labels

Intrusion Set to Labels [STIX2]

Description

STIX2: Intrusion Set to Labels


Transform Meta Info

InformationValue
Display NameIntrusion Set to Labels [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2intrusionsetexplodelabels
Input Entitiesmaltego.STIX2.intrusion-set
Output EntitiesPhrase
Short DescriptionSTIX2: Intrusion Set to Labels

Location to Labels [STIX2]

Description

STIX2: Location to Labels


Transform Meta Info

InformationValue
Display NameLocation to Labels [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2locationexplodelabels
Input Entitiesmaltego.STIX2.location
Output EntitiesPhrase
Short DescriptionSTIX2: Location to Labels

Note to Labels [STIX2]

Description

STIX2: Note to Labels


Transform Meta Info

InformationValue
Display NameNote to Labels [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2noteexplodelabels
Input Entitiesmaltego.STIX2.note
Output EntitiesPhrase
Short DescriptionSTIX2: Note to Labels

Threat Actor to Labels [STIX2]

Description

STIX2: Threat Actor to Labels


Transform Meta Info

InformationValue
Display NameThreat Actor to Labels [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2threatactorexplodelabels
Input Entitiesmaltego.STIX2.threat-actor
Output EntitiesPhrase
Short DescriptionSTIX2: Threat Actor to Labels

Observed Data to Labels [STIX2]

Description

STIX2: Observed Data to Labels


Transform Meta Info

InformationValue
Display NameObserved Data to Labels [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2observeddataexplodelabels
Input Entitiesmaltego.STIX2.observed-data
Output EntitiesPhrase
Short DescriptionSTIX2: Observed Data to Labels

Attack Pattern to Labels [STIX2]

Description

STIX2: Attack Pattern to Labels


Transform Meta Info

InformationValue
Display NameAttack Pattern to Labels [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2attackpatternexplodelabels
Input Entitiesmaltego.STIX2.attack-pattern
Output EntitiesPhrase
Short DescriptionSTIX2: Attack Pattern to Labels

Grouping to Labels [STIX2]

Description

STIX2: Grouping to Labels


Transform Meta Info

InformationValue
Display NameGrouping to Labels [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2groupingexplodelabels
Input Entitiesmaltego.STIX2.grouping
Output EntitiesPhrase
Short DescriptionSTIX2: Grouping to Labels

Course Of Action to Labels [STIX2]

Description

STIX2: Course Of Action to Labels


Transform Meta Info

InformationValue
Display NameCourse Of Action to Labels [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2courseofactionexplodelabels
Input Entitiesmaltego.STIX2.course-of-action
Output EntitiesPhrase
Short DescriptionSTIX2: Course Of Action to Labels

Sighting to Labels [STIX2]

Description

STIX2: Sighting to Labels


Transform Meta Info

InformationValue
Display NameSighting to Labels [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2sightingexplodelabels
Input Entitiesmaltego.STIX2.sighting
Output EntitiesPhrase
Short DescriptionSTIX2: Sighting to Labels

Relationship to Labels [STIX2]

Description

STIX2: Relationship to Labels


Transform Meta Info

InformationValue
Display NameRelationship to Labels [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2relationshipexplodelabels
Input Entitiesmaltego.STIX2.relationship
Output EntitiesPhrase
Short DescriptionSTIX2: Relationship to Labels

Incident to Labels [STIX2]

Description

STIX2: Incident to Labels


Transform Meta Info

InformationValue
Display NameIncident to Labels [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2incidentexplodelabels
Input Entitiesmaltego.STIX2.incident
Output EntitiesPhrase
Short DescriptionSTIX2: Incident to Labels

Grouping to Objects [STIX2]

Description

STIX2: Grouping to Objects


Transform Meta Info

InformationValue
Display NameGrouping to Objects [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2groupingexplodeobjectrefs
Input Entitiesmaltego.STIX2.grouping
Output EntitiesPhrase
Short DescriptionSTIX2: Grouping to Objects

Note to Objects [STIX2]

Description

STIX2: Note to Objects


Transform Meta Info

InformationValue
Display NameNote to Objects [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2noteexplodeobjectrefs
Input Entitiesmaltego.STIX2.note
Output EntitiesPhrase
Short DescriptionSTIX2: Note to Objects

Observed data to Objects [STIX2]

Description

STIX2: Observed data to Objects


Transform Meta Info

InformationValue
Display NameObserved data to Objects [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2observeddataexplodeobjectrefs
Input Entitiesmaltego.STIX2.observed-data
Output EntitiesPhrase
Short DescriptionSTIX2: Observed data to Objects

Opinion to Objects [STIX2]

Description

STIX2: Opinion to Objects


Transform Meta Info

InformationValue
Display NameOpinion to Objects [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2opinionexplodeobjectrefs
Input Entitiesmaltego.STIX2.opinion
Output EntitiesPhrase
Short DescriptionSTIX2: Opinion to Objects

Report to Objects [STIX2]

Description

STIX2: Report to Objects


Transform Meta Info

InformationValue
Display NameReport to Objects [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2reportexplodeobjectrefs
Input Entitiesmaltego.STIX2.report
Output EntitiesPhrase
Short DescriptionSTIX2: Report to Objects

Malware to Operating System [STIX2]

Description

STIX2: Malware to Operating System


Transform Meta Info

InformationValue
Display NameMalware to Operating System [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2malwareexplodeoperatingsystemrefs
Input Entitiesmaltego.STIX2.malware
Output EntitiesPhrase
Short DescriptionSTIX2: Malware to Operating System

Malware to Samples [STIX2]

Description

STIX2: Malware to Samples


Transform Meta Info

InformationValue
Display NameMalware to Samples [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2malwareexplodesamplerefs
Input Entitiesmaltego.STIX2.malware
Output EntitiesPhrase
Short DescriptionSTIX2: Malware to Samples

Malware Analysis to Installed Softwares [STIX2]

Description

STIX2: Malware Analysis to Installed Softwares


Transform Meta Info

InformationValue
Display NameMalware Analysis to Installed Softwares [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2malwareanalysisexplodeinstalledsoftwarerefs
Input Entitiesmaltego.STIX2.malware-analysis
Output EntitiesPhrase
Short DescriptionSTIX2: Malware Analysis to Installed Softwares

Malware Analysis to Observables [STIX2]

Description

STIX2: Malware Analysis to Observables


Transform Meta Info

InformationValue
Display NameMalware Analysis to Observables [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2malwareanalysisexplodeanalysisscorefs
Input Entitiesmaltego.STIX2.malware-analysis
Output EntitiesPhrase
Short DescriptionSTIX2: Malware Analysis to Observables

Malware Analysis to Sample [STIX2]

Description

STIX2: Malware Analysis to Sample


Transform Meta Info

InformationValue
Display NameMalware Analysis to Sample [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2malwareanalysisexplodesampleref
Input Entitiesmaltego.STIX2.malware-analysis
Output EntitiesPhrase
Short DescriptionSTIX2: Malware Analysis to Sample

Sighting to Of [STIX2]

Description

STIX2: Sighting to Of


Transform Meta Info

InformationValue
Display NameSighting to Of [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2sightingexplodesightingofref
Input Entitiesmaltego.STIX2.sighting
Output EntitiesPhrase
Short DescriptionSTIX2: Sighting to Of

Sighting to Observed data [STIX2]

Description

STIX2: Sighting to Observed data


Transform Meta Info

InformationValue
Display NameSighting to Observed data [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2sightingexplodeobserveddatarefs
Input Entitiesmaltego.STIX2.sighting
Output EntitiesPhrase
Short DescriptionSTIX2: Sighting to Observed data

Sighting to Where [STIX2]

Description

STIX2: Sighting to Where


Transform Meta Info

InformationValue
Display NameSighting to Where [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2sightingexplodewheresightedrefs
Input Entitiesmaltego.STIX2.sighting
Output EntitiesPhrase
Short DescriptionSTIX2: Sighting to Where

Directory to Contains [STIX2]

Description

STIX2: Directory to Contains


Transform Meta Info

InformationValue
Display NameDirectory to Contains [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2directoryexplodecontainsrefs
Input Entitiesmaltego.STIX2.directory
Output EntitiesPhrase
Short DescriptionSTIX2: Directory to Contains

Domain Name to Resolves [STIX2]

Description

STIX2: Domain Name to Resolves


Transform Meta Info

InformationValue
Display NameDomain Name to Resolves [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2domainnameexploderesolvestorefs
Input Entitiesmaltego.STIX2.domain-name
Output EntitiesPhrase
Short DescriptionSTIX2: Domain Name to Resolves

Email Address to Belongs [STIX2]

Description

STIX2: Email Address to Belongs


Transform Meta Info

InformationValue
Display NameEmail Address to Belongs [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2emailaddrexplodebelongstoref
Input Entitiesmaltego.STIX2.email-addr
Output EntitiesPhrase
Short DescriptionSTIX2: Email Address to Belongs

Email Message to From [STIX2]

Description

STIX2: Email Message to From


Transform Meta Info

InformationValue
Display NameEmail Message to From [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2emailmessageexplodefromref
Input Entitiesmaltego.STIX2.email-message
Output EntitiesPhrase
Short DescriptionSTIX2: Email Message to From

Email Message to Sender [STIX2]

Description

STIX2: Email Message to Sender


Transform Meta Info

InformationValue
Display NameEmail Message to Sender [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2emailmessageexplodesenderref
Input Entitiesmaltego.STIX2.email-message
Output EntitiesPhrase
Short DescriptionSTIX2: Email Message to Sender

Email Message to To [STIX2]

Description

STIX2: Email Message to To


Transform Meta Info

InformationValue
Display NameEmail Message to To [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2emailmessageexplodetorefs
Input Entitiesmaltego.STIX2.email-message
Output EntitiesPhrase
Short DescriptionSTIX2: Email Message to To

Email Message to CC [STIX2]

Description

STIX2: Email Message to CC


Transform Meta Info

InformationValue
Display NameEmail Message to CC [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2emailmessageexplodeccrefs
Input Entitiesmaltego.STIX2.email-message
Output EntitiesPhrase
Short DescriptionSTIX2: Email Message to CC

Email Message to BCC [STIX2]

Description

STIX2: Email Message to BCC


Transform Meta Info

InformationValue
Display NameEmail Message to BCC [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2emailmessageexplodebccrefs
Input Entitiesmaltego.STIX2.email-message
Output EntitiesPhrase
Short DescriptionSTIX2: Email Message to BCC

Email Message to Raw email [STIX2]

Description

STIX2: Email Message to Raw email


Transform Meta Info

InformationValue
Display NameEmail Message to Raw email [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2emailmessageexploderawemailref
Input Entitiesmaltego.STIX2.email-message
Output EntitiesPhrase
Short DescriptionSTIX2: Email Message to Raw email

File to Parent directory [STIX2]

Description

STIX2: File to Parent directory


Transform Meta Info

InformationValue
Display NameFile to Parent directory [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2fileexplodeparentdirectoryref
Input Entitiesmaltego.STIX2.file
Output EntitiesPhrase
Short DescriptionSTIX2: File to Parent directory

File to Contains [STIX2]

Description

STIX2: File to Contains


Transform Meta Info

InformationValue
Display NameFile to Contains [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2fileexplodecontainsrefs
Input Entitiesmaltego.STIX2.file
Output EntitiesPhrase
Short DescriptionSTIX2: File to Contains

File to Content [STIX2]

Description

STIX2: File to Content


Transform Meta Info

InformationValue
Display NameFile to Content [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2fileexplodecontentref
Input Entitiesmaltego.STIX2.file
Output EntitiesPhrase
Short DescriptionSTIX2: File to Content

IPv4 Address to Resolves [STIX2]

Description

STIX2: IPv4 Address to Resolves


Transform Meta Info

InformationValue
Display NameIPv4 Address to Resolves [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2ipv4addrexploderesolvestorefs
Input Entitiesmaltego.STIX2.ipv4-addr
Output EntitiesPhrase
Short DescriptionSTIX2: IPv4 Address to Resolves

IPv4 Address to Belongs [STIX2]

Description

STIX2: IPv4 Address to Belongs


Transform Meta Info

InformationValue
Display NameIPv4 Address to Belongs [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2ipv4addrexplodebelongstorefs
Input Entitiesmaltego.STIX2.ipv4-addr
Output EntitiesPhrase
Short DescriptionSTIX2: IPv4 Address to Belongs

IPv6 Address to Resolves [STIX2]

Description

STIX2: IPv6 Address to Resolves


Transform Meta Info

InformationValue
Display NameIPv6 Address to Resolves [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2ipv6addrexploderesolvestorefs
Input Entitiesmaltego.STIX2.ipv6-addr
Output EntitiesPhrase
Short DescriptionSTIX2: IPv6 Address to Resolves

IPv6 Address to Belongs [STIX2]

Description

STIX2: IPv6 Address to Belongs


Transform Meta Info

InformationValue
Display NameIPv6 Address to Belongs [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2ipv6addrexplodebelongstorefs
Input Entitiesmaltego.STIX2.ipv6-addr
Output EntitiesPhrase
Short DescriptionSTIX2: IPv6 Address to Belongs

Network Traffic to Src [STIX2]

Description

STIX2: Network Traffic to Src


Transform Meta Info

InformationValue
Display NameNetwork Traffic to Src [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2networktrafficexplodesrcref
Input Entitiesmaltego.STIX2.network-traffic
Output EntitiesPhrase
Short DescriptionSTIX2: Network Traffic to Src

Network Traffic to Dst [STIX2]

Description

STIX2: Network Traffic to Dst


Transform Meta Info

InformationValue
Display NameNetwork Traffic to Dst [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2networktrafficexplodedstref
Input Entitiesmaltego.STIX2.network-traffic
Output EntitiesPhrase
Short DescriptionSTIX2: Network Traffic to Dst

Network Traffic to Src payload [STIX2]

Description

STIX2: Network Traffic to Src payload


Transform Meta Info

InformationValue
Display NameNetwork Traffic to Src payload [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2networktrafficexplodesrcpayloadref
Input Entitiesmaltego.STIX2.network-traffic
Output EntitiesPhrase
Short DescriptionSTIX2: Network Traffic to Src payload

Network Traffic to Dst payload [STIX2]

Description

STIX2: Network Traffic to Dst payload


Transform Meta Info

InformationValue
Display NameNetwork Traffic to Dst payload [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2networktrafficexplodedstpayloadref
Input Entitiesmaltego.STIX2.network-traffic
Output EntitiesPhrase
Short DescriptionSTIX2: Network Traffic to Dst payload

Network Traffic to Encapsulates [STIX2]

Description

STIX2: Network Traffic to Encapsulates


Transform Meta Info

InformationValue
Display NameNetwork Traffic to Encapsulates [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2networktrafficexplodeencapsulatesrefs
Input Entitiesmaltego.STIX2.network-traffic
Output EntitiesPhrase
Short DescriptionSTIX2: Network Traffic to Encapsulates

Network Traffic to Encapsulated by [STIX2]

Description

STIX2: Network Traffic to Encapsulated by


Transform Meta Info

InformationValue
Display NameNetwork Traffic to Encapsulated by [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2networktrafficexplodeencapsulatedbyref
Input Entitiesmaltego.STIX2.network-traffic
Output EntitiesPhrase
Short DescriptionSTIX2: Network Traffic to Encapsulated by

Process to Opened connections [STIX2]

Description

STIX2: Process to Opened connections


Transform Meta Info

InformationValue
Display NameProcess to Opened connections [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2processexplodeopenedconnectionrefs
Input Entitiesmaltego.STIX2.process
Output EntitiesPhrase
Short DescriptionSTIX2: Process to Opened connections

Process to Creator user [STIX2]

Description

STIX2: Process to Creator user


Transform Meta Info

InformationValue
Display NameProcess to Creator user [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2processexplodecreatoruserref
Input Entitiesmaltego.STIX2.process
Output EntitiesPhrase
Short DescriptionSTIX2: Process to Creator user

Process to Image [STIX2]

Description

STIX2: Process to Image


Transform Meta Info

InformationValue
Display NameProcess to Image [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2processexplodeimageref
Input Entitiesmaltego.STIX2.process
Output EntitiesPhrase
Short DescriptionSTIX2: Process to Image

Process to Parent [STIX2]

Description

STIX2: Process to Parent


Transform Meta Info

InformationValue
Display NameProcess to Parent [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2processexplodeparentref
Input Entitiesmaltego.STIX2.process
Output EntitiesPhrase
Short DescriptionSTIX2: Process to Parent

Process to Children [STIX2]

Description

STIX2: Process to Children


Transform Meta Info

InformationValue
Display NameProcess to Children [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2processexplodechildrefs
Input Entitiesmaltego.STIX2.process
Output EntitiesPhrase
Short DescriptionSTIX2: Process to Children

Windows Registry Key to Creator user [STIX2]

Description

STIX2: Windows Registry Key to Creator user


Transform Meta Info

InformationValue
Display NameWindows Registry Key to Creator user [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2windowsregistrykeyexplodecreatoruserref
Input Entitiesmaltego.STIX2.windows-registry-key
Output EntitiesPhrase
Short DescriptionSTIX2: Windows Registry Key to Creator user

AS to STIX2 [STIX2]

Description

STIX2: AS to STIX2


Transform Meta Info

InformationValue
Display NameAS to STIX2 [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2autonomoussystemconverttostix
Input Entitiesmaltego.AS
Output EntitiesPhrase
Short DescriptionSTIX2: AS to STIX2

Domain to STIX2 [STIX2]

Description

STIX2: Domain to STIX2


Transform Meta Info

InformationValue
Display NameDomain to STIX2 [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2domainnameconverttostix
Input Entitiesmaltego.Domain
Output EntitiesPhrase
Short DescriptionSTIX2: Domain to STIX2

EmailAddress to STIX2 [STIX2]

Description

STIX2: EmailAddress to STIX2


Transform Meta Info

InformationValue
Display NameEmailAddress to STIX2 [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2emailaddrconverttostix
Input Entitiesmaltego.EmailAddress
Output EntitiesPhrase
Short DescriptionSTIX2: EmailAddress to STIX2

ConversationEmail to STIX2 [STIX2]

Description

STIX2: ConversationEmail to STIX2


Transform Meta Info

InformationValue
Display NameConversationEmail to STIX2 [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2emailmessageconverttostix
Input Entitiesmaltego.ConversationEmail
Output EntitiesPhrase
Short DescriptionSTIX2: ConversationEmail to STIX2

Organization to STIX2 [STIX2]

Description

STIX2: Organization to STIX2


Transform Meta Info

InformationValue
Display NameOrganization to STIX2 [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2identityconverttostix
Input Entitiesmaltego.Organization
Output EntitiesPhrase
Short DescriptionSTIX2: Organization to STIX2

IPv4Address to STIX2 [STIX2]

Description

STIX2: IPv4Address to STIX2


Transform Meta Info

InformationValue
Display NameIPv4Address to STIX2 [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2ipv4addrconverttostix
Input Entitiesmaltego.IPv4Address
Output EntitiesPhrase
Short DescriptionSTIX2: IPv4Address to STIX2

Location to STIX2 [STIX2]

Description

STIX2: Location to STIX2


Transform Meta Info

InformationValue
Display NameLocation to STIX2 [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2locationconverttostix
Input Entitiesmaltego.Location
Output EntitiesPhrase
Short DescriptionSTIX2: Location to STIX2

MacAddress to STIX2 [STIX2]

Description

STIX2: MacAddress to STIX2


Transform Meta Info

InformationValue
Display NameMacAddress to STIX2 [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2macaddrconverttostix
Input Entitiesmaltego.MacAddress
Output EntitiesPhrase
Short DescriptionSTIX2: MacAddress to STIX2

URL to STIX2 [STIX2]

Description

STIX2: URL to STIX2


Transform Meta Info

InformationValue
Display NameURL to STIX2 [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2urlconverttostix
Input Entitiesmaltego.URL
Output EntitiesPhrase
Short DescriptionSTIX2: URL to STIX2

Alias to STIX2 [STIX2]

Description

STIX2: Alias to STIX2


Transform Meta Info

InformationValue
Display NameAlias to STIX2 [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2useraccountconverttostix
Input Entitiesmaltego.Alias
Output EntitiesPhrase
Short DescriptionSTIX2: Alias to STIX2

X509Certificate to STIX2 [STIX2]

Description

STIX2: X509Certificate to STIX2


Transform Meta Info

InformationValue
Display NameX509Certificate to STIX2 [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2x509certificateconverttostix
Input Entitiesmaltego.X509Certificate
Output EntitiesPhrase
Short DescriptionSTIX2: X509Certificate to STIX2

IPv6Address to STIX2 [STIX2]

Description

STIX2: IPv6Address to STIX2


Transform Meta Info

InformationValue
Display NameIPv6Address to STIX2 [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2ipv6addrconverttostix
Input Entitiesmaltego.IPv6Address
Output EntitiesPhrase
Short DescriptionSTIX2: IPv6Address to STIX2

Incident to STIX2 [STIX2]

Description

STIX2: Incident to STIX2


Transform Meta Info

InformationValue
Display NameIncident to STIX2 [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2incidentconverttostix
Input Entitiesmaltego.Incident
Output EntitiesPhrase
Short DescriptionSTIX2: Incident to STIX2

Event to STIX2 [STIX2]

Description

STIX2: Event to STIX2


Transform Meta Info

InformationValue
Display NameEvent to STIX2 [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2campaignconverttostix
Input Entitiesmaltego.Event
Output EntitiesPhrase
Short DescriptionSTIX2: Event to STIX2

CVE to STIX2 [STIX2]

Description

STIX2: CVE to STIX2


Transform Meta Info

InformationValue
Display NameCVE to STIX2 [STIX2]
OwnerANSSI
AuthorMaltego, ANSSI
Data SourceSTIX2
Transform Namestix2vulnerabilityconverttostix
Input Entitiesmaltego.CVE
Output EntitiesPhrase
Short DescriptionSTIX2: CVE to STIX2

Did you find it helpful? Yes No

Send feedback
Sorry we couldn't be helpful. Help us improve this article with your feedback.