Warning

This documentation is still a work in progress. If you have any issues or questions, please ask on the maec-discussion mailing list or file a bug in our issue tracker.

maec.utils.merge Module

Functions

maec.utils.merge.merge_documents(input_list, output_file)

Merge a list of input MAEC documents and write them to an output file

maec.utils.merge.merge_malware_subjects(malware_subject_list)

Merge a list of input Malware Subjects

maec.utils.merge.merge_packages(package_list, namespace=None)

Merge a list of input MAEC Packages and return a merged Package instance.

maec.utils.merge.update_relationships(malware_subject_list, id_mappings)

Update any existing Malware Subject relationships to account for merged Malware Subjects

maec.utils.merge.merge_binned_malware_subjects(merged_malware_subject, binned_list, id_mappings_dict)

Merge a list of input binned (related) Malware Subjects

maec.utils.merge.create_mappings(mapping_dict, original_malware_subject_list, merged_malware_subject)

Map the IDs of a list of existing Malware Subjects to the new merged Malware Subject

maec.utils.merge.merge_findings_bundles(findings_bundles_list)

Merge two or more Malware Subject Findings Bundles

maec.utils.merge.deduplicate_vocabulary_list(entity_list, value_name='value')

Deduplicate a simple list of MAEC/CybOX vocabulary entries

maec.utils.merge.merge_entities(entity_list)

Merge a list of MAEC/CybOX entities

maec.utils.merge.bin_malware_subjects(malware_subject_list, default_hash_type='md5')

Bin a list of Malware Subjects by hash Default = MD5

maec.utils.merge.dict_merge(target, *args)

Merge multiple dictionaries into one