idaholab/cape2stix

Cutshaw, Michael [Idaho National Laboratory (INL), Idaho Falls, ID (United States)] (0000000184936030); Beckman, BryanR [Idaho National Laboratory] (0000000319634508); Flack, MicahA; Priest, ZacharyM [Idaho National Laboratory (INL), Idaho Falls, ID (United States)] (0000000322848056)

doi:10.11578/dc.20230621.5

DOE OSTI · code-108625

idaholab/cape2stix

Cutshaw, Michael [Idaho National Laboratory (INL), Idaho Falls, ID (United States)] (0000000184936030)·Beckman, BryanR [Idaho National Laboratory] (0000000319634508)·Flack, MicahA·Priest, ZacharyM [Idaho National Laboratory (INL), Idaho Falls, ID (United States)] (0000000322848056)

View original source ↗Read source document ↗Export metadata ↓

Abstract

This software allows for the conversion, extraction, and transformation of malware behavior data from "Malware Configuration And Payload Extraction" (CAPEv2) sandbox reports, to Structured Threat Information eXpression (STIX). This allows for further analysis to be performed, sharing of threat data, and transit to a graph database.

Keep this discovery

Explore connections, maps & timelines

BibTeX RIS

Cutshaw, Michael [Idaho National Laboratory (INL), Idaho Falls, ID (United States)] (0000000184936030), Beckman, BryanR [Idaho National Laboratory] (0000000319634508), Flack, MicahA, Priest, ZacharyM [Idaho National Laboratory (INL), Idaho Falls, ID (United States)] (0000000322848056). 2023-06-19. idaholab/cape2stix. https://doi.org/10.11578/dc.20230621.5

Cite the original work for its findings. Save a collection to share your selection of sources.