yara rules conversion to STIX2 indicator's object #11156
Unanswered
wehbemariam
asked this question in
Q&A
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
-
Hello,
Is there a tool that converts yara rules conversion to STIX 2.1objects while fully respecting the STIX 2 specification (i.e. generating well-structured indicator objects with proper fields like pattern, pattern_type, valid_from, and appropriate observable mappings). To be compatible with tools like stix2 Python library or OpenCTI.
I tried the converter https://github.com/muchdogesec/yara2stix but unfortunately it produces output that does not align properly with the STIX 2.1 standard and lacks semantic structure.
I’d be very grateful if anyone knows such a tool or has worked on it and could share it or even point me toward documentation, examples, or prototypes.
Thank you
Beta Was this translation helpful? Give feedback.
All reactions