STIXProject / stix-to-html

Convert STIX XML to HTML

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

A few MAEC output bugs

ikiril01 opened this issue · comments

  • In the Analysis (Package schema) element, the child elements of the Dynamic_Analysis_Metadata element such as Command_Line, Analysis_Duration, etc. are not displayed and instead the data in the parent element is displayed as a single string.
  • When displaying the Malware_Instance_Object_Attributes (Instance Object Attributes) for a Bundle, the auto-generated ID for the Object is displayed in the ID column, even if there is none in the input file. If there is no such ID, we should just display "No ID" or something of the like.
  • The same issue as the one above applies to AV_Classifications (e.g. in the bundle_av_classifications example), except in this case AV_Classification elements cannot have IDs, so we should just remove this column when displaying them.
  • When displaying Strategic and Tactical Objectives in a Capability, we do not need to display the "Strategic Objective" and "Tactical Objective" labels above each entry, since they are already present in the row heading to the left.
  • It looks like there's still some debugging text that is displayed, e.g. ### META ANALYSIS ###, for the Meta_Analysis element in the Malware_Subject/Findings_Bundles element

Actions Equivalencies and their nested Action references need to be cleaned up too
(repeated labels, confusing layout, etc):

action_equivalency_sample

splitting out the second and third bullets into their own issue. both relate to not showing autogenerated (by the stix-to-html xslt) ids.