Creating objects from real files. about python-cybox HOT 4 CLOSED

Thanks for the suggestion!

There is already a script to convert an email message to a CybOX object (https://github.com/CybOXProject/Tools/blob/master/scripts/email_to_cybox/email_to_cybox.py), but it predates the python-cybox library and will probably be mostly rewritten.

I hadn't thought about adding the functionality to parse emails directly to the python-cybox library, but I agree it would be useful.

from python-cybox.

I think features that allow to create objects from files are essential if you want people using Cybox. The script Email_to_cybox is a good example that saves a lot of time. It should be same for the other objects.

The real question is whether these functionalities should be integrated into python-cybox or into another package called python-cybox-tools for example ?

The advantage of the integrated directly into the base library is to have a single package. The issue is that this package may have many dependencies if this kind of functionality is integrated:

• Parsing of packets (scapy, pcap)
• Parsing of flows (pysilk, pynetflow)
• Parsing of personnel (ldif, vobj)
• A very long list...

My 2 cents

from python-cybox.

We've been having the same discussion internally this morning (essentially, python-cybox vs. python-cybox-tools). For emails, it's a bit harder of a decision since email.message.Message is in the Python Standard Library, but as you said, the others introduce a large amount of dependencies that we probably don't want on the basic python-cybox library.

For now, we aren't going to move the code entirely into python-cybox, though we may add something to examples/ (which doesn't get installed, but whose purpose to demonstrate how to use the API).

from python-cybox.

We aren't going to support this in the foreseeable future, so I'm going to close this issue.

from python-cybox.