****************************************************
GFI Sandbox XML -> MAEC XML Converter Script
Copyright (c) 2014 - The MITRE Corporation
****************************************************
BY USING THE GFI SANDBOX TO MAEC SCRIPT, YOU SIGNIFY YOUR ACCEPTANCE OF THE TERMS AND
CONDITIONS OF USE. IF YOU DO NOT AGREE TO THESE TERMS, DO NOT USE THE SCRIPT.
For more information, please refer to the terms.txt file.
#################################################################
#Generates MAEC Output from a GFI Sandbox v4 XML file #
#Compatible with MAEC Schema v4.1 & CybOX v2.1 #
# #
#v0.22 - BETA #
#Updated 02/24/2014 #
# #
#################################################################
# MAEC - http://maec.mitre.org #
# ThreatTrack (GFI) Sandbox - ################
# http://www.threattracksecurity.com/enterprise-security/sandbox-software.aspx #
################################################################################
--------------------------------------------------------------------------------
--Included Files----------------------------------------------------------------
README: this file.
gfisandbox_to_maec.py: the GFI Sandbox XML to MAEC XML Python converter script.
gfi_sandbox.py: the GFI Sandbox Python bindings which the script imports.
gfi_parser.py: the GFI parser class.
\gfi: the GFI parser classes which the script imports.
terms.txt: the terms of use for this script.
--------------------------------------------------------------------------------
--Dependencies------------------------------------------------------------------
There are three dependencies for this script:
1) The Python lxml library >= v3.2.x, http://lxml.de/
1) The python-maec library >= v4.1.0.0, https://pypi.python.org/pypi/maec
2) The python-cybox library >= v2.1.0.0, https://pypi.python.org/pypi/cybox
--------------------------------------------------------------------------------
--Usage Notes-------------------------------------------------------------------
There are three main command line parameters for this script:
-i: the path to the input GFI Sandbox XML file
-o: the path to the output MAEC XML file
There is one additional, optional parameter that may be specified before the main paramters:
-v: print verbose error output (tracebacks)
To use the script, run the following command:
python gfisandbox_to_maec.py -i <gfisandbox_file> -o <maec_file>
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------