"S.S/\5r?"S0S1\5r@"S2S3\5rA"S4S5\5rB"S6S7\5rC"S8S9\5rD"S:S;\5rE"S<S=\5rF"S>S?\5rG"S@SA\5rH"SBSC\5rI"SDSE\5rJ"SFSG\5rK"SHSI\5rL"SJSK\5rM"SLSM\5rN"SNSO\5rO"SPSQ\5rP"SRSS\5rQSUSTjrRg)VzSTIX 2.1 Cyber Observable Objects. Embedded observable object types, such as Email MIME Component, which is embedded in Email Message objects, inherit from ``_STIXBase21`` instead of _Observable and do not have a ``_type`` attribute. ) OrderedDictN)_custom_observable_builder)AtLeastOnePropertyErrorDependentPropertiesError)BinaryPropertyBooleanPropertyDictionaryPropertyEmbeddedObjectProperty EnumPropertyExtensionsProperty FloatPropertyHashesProperty HexProperty IDPropertyIntegerProperty ListPropertyOpenVocabPropertyReferencePropertyStringPropertyTimestampProperty TypeProperty) _Extension _Observable _STIXBase21)CustomExtensionGranularMarking) ACCOUNT_TYPEENCRYPTION_ALGORITHMHASHING_ALGORITHMNETWORK_SOCKET_ADDRESS_FAMILYNETWORK_SOCKET_TYPEWINDOWS_INTEGRITY_LEVELWINDOWS_PEBINARY_TYPEWINDOWS_REGISTRY_DATATYPEWINDOWS_SERVICE_START_TYPEWINDOWS_SERVICE_STATUSWINDOWS_SERVICE_TYPEc$^\rSrSrSrSr\"S\"\SS94S\"SS94S \ "\SS94S \"54S \ "54S \"54S \ "\ SS94S\ "\54S\"54S\"\"SSS954S\"\54S\"SS94S\"SS94/ 5rS S /rU4SjrSrU=r$)ArtifactzFor more detailed information on this object's properties, see `the STIX 2.1 specification `__. artifacttype2.1 spec_versionr1fixedid mime_type payload_binurlhashesencryption_algorithmdecryption_keyobject_marking_refsmarking-definition valid_typesr1granular_markingsdefangedcgNFrCO/home/james-whalen/.local/lib/python3.13/site-packages/stix2/v21/observables.pyArtifact.0UrDdefault extensionscx>[[U] 5 URSS/5 UR S/S/5 g)Nr6r7r8)superr+_check_object_constraints$_check_mutually_exclusive_properties_check_properties_dependencyself __class__s rErN"Artifact._check_object_constraints5s7 h79 11=%2HI ))8*ug>rDrC)__name__ __module__ __qualname____firstlineno____doc___typerrrrrrr!r r rrrr r _properties_id_contributing_propertiesrN__static_attributes__ __classcell__rSs@rEr+r+s E e%89 e45 z%e45 n&' ()  ! >"3%HI .B!CD >+,  ->K_ns-t uv l?;< _];< )u=>K$,]";??rDr+c\rSrSrSrSr\"S\"\SS94S\"SS94S \ "\SS94S \ "S S 94S \"54S\"54S\ "\ "SSS954S\ "\ 54S\"SS94S\"SS94/ 5rS /rSrg)AutonomousSystem;zFor more detailed information on this object's properties, see `the STIX 2.1 specification `__. autonomous-systemr.r/r0r1r2r4numberTrequirednamerirr;r<r=r?r@cgrBrCrCrDrErFAutonomousSystem.JrHrDrIrKrCN)rUrVrWrXrYrZrrrrrrrrr r r[r\r]rCrDrErara;s E e%89 e45 z%e45 ?D12 !"  !  ->K_ns-t uv l?;< _];< )u=>  K$,*rDrac\rSrSrSrSr\"S\"\SS94S\"SS94S \ "\SS94S \"S S 94S \"54S\ "54S\ "54S\ "54S\ "\ "SS/SS954S\ "\ "SSS954S\ "\ 54S\"SS94S\"SS94/ 5rS /rSrg) DirectoryPzFor more detailed information on this object's properties, see `the STIX 2.1 specification `__. directoryr.r/r0r1r2r4pathTrepath_encctimemtimeatime contains_refsfiler=r;r<r?r@cgrBrCrCrDrErFDirectory.crHrDrIrKrCN)rUrVrWrXrYrZrrrrrrrrr r r[r\r]rCrDrErlrlPs E e%89 e45 z%e45 ./ ^%& #%& #%& #%& ,'8fkEZin'opq  ->K_ns-t uv l?;< _];< )u=>K $*(rDrlc\rSrSrSrSr\"S\"\SS94S\"SS94S \ "\SS94S \"S S 94S \ "\ "/SQSS954S\ "\ "SSS954S\ "\ 54S\ "SS94S\"SS94/ 5rS /rSrg) DomainNameizFor more detailed information on this object's properties, see `the STIX 2.1 specification `__. domain-namer.r/r0r1r2r4valueTreresolves_to_refs) ipv4-addr ipv6-addrr{r=r;r<r?r@cgrBrCrCrDrErFDomainName.wrHrDrIrKrCNrUrVrWrXrYrZrrrrrrrr r r[r\r]rCrDrEryryis E e%89 e45 z%e45 .$/0 \*;HqAF+GH I  ->K_ns-t uv l?;< _];< )u=>  K$+)rDryc\rSrSrSrSr\"S\"\SS94S\"SS94S \ "\SS94S \"S S 94S \"54S\ "SSS94S\ "\ "SSS954S\ "\ 54S\ "SS94S\"SS94/ 5rS /rSrg) EmailAddress}zFor more detailed information on this object's properties, see `the STIX 2.1 specification `__. email-addrr.r/r0r1r2r4r|Tre display_namebelongs_to_ref user-accountr=r;r<r?r@cgrBrCrCrDrErFEmailAddress.rHrDrIrKrCN)rUrVrWrXrYrZrrrrrrrr r r[r\r]rCrDrErr}s E e%89 e45 z%e45 .$/0 )* ,V[\]  ->K_ns-t uv l?;< _];< )u=>  K$+)rDrc ^\rSrSrSr\"S\"54S\"SS/SS94S \"54S \"54/5rU4S jr S r U=r $) EmailMIMEComponentzFor more detailed information on this object's properties, see `the STIX 2.1 specification `__. body body_raw_refr-rur/r= content_typecontent_dispositioncP>[[U] 5 URSS/5 g)Nrr)rMrrN_check_at_least_one_propertyrQs rErN,EmailMIMEComponent._check_object_constraintss$  $AC ))6>*BCrDrC) rUrVrWrXrYrrrr[rNr]r^r_s@rErrs\ !" * F7KZ_`a )*  01 KDDrDrc^\rSrSrSrSr\"S\"\SS94S\"SS94S \ "\SS94S \ "S S 94S \ "54S\"54S\ "SSS94S\ "SSS94S\ "\ "SSS954S\ "\ "SSS954S\ "\ "SSS954S\"54S\"54S\ "\54S\"SS94S\"54S\ "\"\S954S\ "SSS94S\ "\ "S SS954S!\ "\54S"\ "S#S$94S%\"SS94/5r/S&QrU4S'jrS(rU=r$)) EmailMessagezFor more detailed information on this object's properties, see `the STIX 2.1 specification `__. z email-messager.r/r0r1r2r4 is_multipartTredaterfrom_refrr= sender_refto_refscc_refsbcc_refs message_idsubjectreceived_linesadditional_header_fieldsrbody_multipartr. raw_email_refr-r;r<r?r@cgrBrCrCrDrErFEmailMessage.rHrDrIrK)rrrc>[[U] 5 URS/S/5 UR S5SLa.UR S5(a[ UR S/5egg)NrrTr)rr)rMrrNrPgetrrSrQs rErN&EmailMessage._check_object_constraintssd lD;= ))>*:=M>DV(WXY + QVWX  ->K_ns-t uv l?;< _];< )u=>-K0#BWWrDrc Z\rSrSrSrSr\"S\"\"SS/SS9S S 94S \ "54/5r S r g ) ArchiveExtzFor more detailed information on this object's properties, see `the STIX 2.1 specification `__. z archive-extrtrurnr/r=TrecommentrCN) rUrVrWrXrYrZrrrrr[r]rCrDrErrsI E ,'8fkEZin'oz~ A N$%KrDrc V\rSrSrSr\"S\"SS94S\"\SS94S \ "54/5r S r g ) AlternateDataStreamzFor more detailed information on this object's properties, see `the STIX 2.1 specification `__. rgTrer8r/r0sizerCN) rUrVrWrXrYrrrr!rr[r]rCrDrErrs@ ./ >"3%HI "#KrDrc V\rSrSrSrSr\"S\"54S\"\ "\ S954/5r Sr g) NTFSExtzFor more detailed information on this object's properties, see `the STIX 2.1 specification `__. zntfs-extsidalternate_data_streamsrrCN) rUrVrWrXrYrZrrrr rr[r]rCrDrErrs< E  ! !<0FL_0`#abKrDrc z\rSrSrSrSr\"S\"54S\"54S\ "SS94S \"54S \"54/5r S r g ) PDFExtzFor more detailed information on this object's properties, see `the STIX 2.1 specification `__. zpdf-extversion is_optimizeddocument_info_dictr/r0pdfid0pdfid1rCN) rUrVrWrXrYrZrrr r r[r]rCrDrErrsW E N$% *+ 1uEF >#$ >#$ KrDrc j\rSrSrSrSr\"S\"54S\"54S\"54S\"SS 94/5r S r g ) RasterImageExtzFor more detailed information on this object's properties, see `the STIX 2.1 specification `__. zraster-image-ext image_height image_widthbits_per_pixel exif_tagsr/r0rCN) rUrVrWrXrYrZrrr r[r]rCrDrErrsL E *+ )* ?,- (e<= KrDrc \^\rSrSrSr\"/S\"54PS\"54PS\"54PS\"SS94PS \"SS94PS \"SS94PS \"54PS \"54PS \"54PS\"54PS\"54PS\"54PS\"54PS\"54PS\"54PS\"54PS\"54PS\"54PS\"54PS\"SS94PS\"SS94PS\"54PS\"54PS\"54PS\"SS94PS\"SS94PS\"54PS \"54PS!\"54PS"\"54PS#\"\ S$S%94P5r U4S&jr S'r U=r $)(WindowsPEOptionalHeaderTypei zFor more detailed information on this object's properties, see `the STIX 2.1 specification `__. magic_hexmajor_linker_versionminor_linker_version size_of_coderminsize_of_initialized_datasize_of_uninitialized_dataaddress_of_entry_point base_of_code base_of_data image_basesection_alignmentfile_alignmentmajor_os_versionminor_os_versionmajor_image_versionminor_image_versionmajor_subsystem_versionminor_subsystem_versionwin32_version_value_hex size_of_imagesize_of_headers checksum_hex subsystem_hexdll_characteristics_hexsize_of_stack_reservesize_of_stack_commitsize_of_heap_reservesize_of_heap_commitloader_flags_hexnumber_of_rva_and_sizesr8r/r0cJ>[[U] 5 UR5 g)N)rMrrNrrQs rErN5WindowsPEOptionalHeaderType._check_object_constraints3s )4JL ))+rDrC)rUrVrWrXrYrrrrr!r[rNr]r^r_s@rErr s[  km$  !23  !23  Q/0  $_%;<  &1'=>  "?#45  *+  *+  ()  o/0  ?,-  _./  _./   12   12! " #O$56# $ #O$56% & #KM2' ( /a01) * O23+ , '- . +-(/ 0 #KM21 2 !/a"893 4 Q!785 6 !237 8  129 : []+; < #O$56= > >"3%HI?  KD,,rDrc d\rSrSrSr\"S\"SS94S\"SS94S \"54S \ "\ S S 94/5r S r g)WindowsPESectioni8zFor more detailed information on this object's properties, see `the STIX 2.1 specification `__. rgTrerrrentropyr8r/r0rCN) rUrVrWrXrYrrrrrr!r[r]rCrDrErr8sL ./ Q'( MO$ >"3%HI KrDrc\rSrSrSrSr\"S\"\SS94S\ "54S\ "54S \ "S S 94S \ "S S94S\ "54S\ "S S 94S\ "S S 94S\ "54S\ "\SS94S\"\S94S\"\"\S954/ 5rSrg)WindowsPEBinaryExtiEzFor more detailed information on this object's properties, see `the STIX 2.1 specification `__. zwindows-pebinary-extpe_typeTreimphash machine_hexnumber_of_sectionsrrtime_date_stampsecond) precisionpointer_to_symbol_table_hexnumber_of_symbolssize_of_optional_headercharacteristics_hexfile_header_hashesr/r0optional_headerrsectionsrCN)rUrVrWrXrYrZrrr%rrrrrr!r rrrr[r]rCrDrErrEs #E %&;dKL N$%  & 156 -AB & 6 o!45 "O$:;  . ~.?eTU 28STU \"8>N"OPQ  KrDrc^\rSrSrSrSr\"S\"\SS94S\"SS94S \ "\SS94S \ "\ SS94S \ "S S 94S\"54S\"54S\ "54S\"54S\"54S\"54S\"54S\"SSS94S\"\"S/SS954S\"SSS94S\"\"SSS954S\"\54S\"S S!94S"\"SS94/5r/S#QrU4S$jrS%rU=r$)&Filei[zFor more detailed information on this object's properties, see `the STIX 2.1 specification `__. rur.r/r0r1r2r4r8rrrrgname_encmagic_number_hexr5rqrrrsparent_directory_refrnr=rtSCO content_refr-r;r<r?r@cgrBrCrCrDrErF File.srHrDrIrK)r8rgrrKcP>[[U] 5 URSS/5 g)Nr8rg)rMrrNrrQs rErNFile._check_object_constraintsxs# dD35 ))8V*<=rDrC)rUrVrWrXrYrZrrrrrr!rrrrrrr r r[r\rNr]r^r_s@rErr[s@ E e%89 e45 z%e45 >"3%HI Q'( !" ^%& []+ n&' #%& #%& #%& !2{Y^!_` ,'8eW[`'abc )juUV  ->K_ns-t uv l?;< _];< )u=>'K*#[>>rDrc\rSrSrSrSr\"S\"\SS94S\"SS94S \ "\SS94S \"S S 94S \ "\ "SSS954S\ "\ "SSS954S\ "\ "SSS954S\ "\ 54S\ "SS94S\"SS94/ 5rS /rSrg) IPv4Addressi}zFor more detailed information on this object's properties, see `the STIX 2.1 specification `__. r~r.r/r0r1r2r4r|Trer}mac-addrr=belongs_to_refsrcr;r<r?r@cgrBrCrCrDrErFIPv4Address.rHrDrIrKrCNrrCrDrEr r } E e%89 e45 z%e45 .$/0 \*; af*ghi L):GZin)opq  ->K_ns-t uv l?;< _];< )u=>  K$+)rDr c\rSrSrSrSr\"S\"\SS94S\"SS94S \ "\SS94S \"S S 94S \ "\ "SSS954S\ "\ "SSS954S\ "\ "SSS954S\ "\ 54S\ "SS94S\"SS94/ 5rS /rSrg) IPv6AddressizFor more detailed information on this object's properties, see `the STIX 2.1 specification `__. rr.r/r0r1r2r4r|Trer}r r=r rcr;r<r?r@cgrBrCrCrDrErFIPv6Address.rHrDrIrKrCNrrCrDrErrrrDrc\rSrSrSrSr\"S\"\SS94S\"SS94S \ "\SS94S \"S S 94S \ "\ "SSS954S\ "\ 54S\ "SS94S\"SS94/5rS /rSrg) MACAddressizFor more detailed information on this object's properties, see `the STIX 2.1 specification `__. r r.r/r0r1r2r4r|Trer;r<r=r?r@cgrBrCrCrDrErFMACAddress.rHrDrIrKrCNrrCrDrErrs E e%89 e45 z%e45 .$/0  ->K_ns-t uv l?;< _];< )u=>  K$+)rDrc\rSrSrSrSr\"S\"\SS94S\"SS94S \ "\SS94S \"S S 94S \ "\ "SSS954S\ "\ 54S\ "SS94S\"SS94/5rS /rSrg)MutexizFor more detailed information on this object's properties, see `the STIX 2.1 specification `__. mutexr.r/r0r1r2r4rgTrer;r<r=r?r@cgrBrCrCrDrErFMutex.rHrDrIrKrCNrrCrDrErrs E e%89 e45 z%e45 ./  ->K_ns-t uv l?;< _];< )u=>  K$*(rDrc \rSrSrSrSr\"S\"SS94S\"SS94S\"54S \"S S 94S \ "54S \ "SS S94/5r Sr g)HTTPRequestExtizFor more detailed information on this object's properties, see `the STIX 2.1 specification `__. zhttp-request-extrequest_methodTre request_valuerequest_versionrequest_headerr/r0message_body_lengthmessage_body_data_refr-r=rCN) rUrVrWrXrYrZrrr rrr[r]rCrDrErrsl E >489 .$78 N,- -5AB  12 "3 Y^"_` KrDrcH\rSrSrSrSr\"S\"SS94S\"SS94/5rSr g ) ICMPExtizFor more detailed information on this object's properties, see `the STIX 2.1 specification `__. zicmp-ext icmp_type_hexTre icmp_code_hexrCN rUrVrWrXrYrZrrr[r]rCrDrEr'r's7 E +t45 +t45KrDr'c ^\rSrSrSrSr\"S\"\SS94S\ "54S\ "54S \ "S S 94S \"\ 54S \ "SS94S\ "54/5r U4SjrSrU=r$) SocketExtizFor more detailed information on this object's properties, see `the STIX 2.1 specification `__. z socket-extaddress_familyTre is_blocking is_listeningoptionsr/r0 socket_typesocket_descriptorrr socket_handlec>[[U] 5 URS5nUbd/SQnUR 5HKup4USUR S5S-U;a [ S5e[U[5(aMB[ S5e gg)Nr0)SO_ICMP_ICMP6_IP_IPV6_MCAST_TCP_IRLMP__rzIncorrect options keyz Options value must be an integer) rMr,rNritemsfind ValueError isinstanceint)rRr0acceptable_prefixeskeyvalrSs rErN#SocketExt._check_object_constraintss i8:((9%  "h #MMO) )*2EE$%<==!#s++$%GHH , rDrC)rUrVrWrXrYrZrr r"r r r#rr[rNr]r^r_s@rEr,r,s E <(EPTUV )* *+ &E:;  %89: o!45 /+,K I IrDr,cL\rSrSrSrSr\"S\"54S\"54/5rSr g)TCPExtizFor more detailed information on this object's properties, see `the STIX 2.1 specification `__. ztcp-ext src_flags_hex dst_flags_hexrCNr*rCrDrErHrHs1 E +-( +-(KrDrHc^\rSrSrSrSr\"S\"\SS94S\"SS94S \ "\SS94S \ "54S \ "54S \ "54S \ "/SQSS94S\ "/SQSS94S\ "SSS94S\ "SSS94S\"\SS94S\ "SS94S\ "SS94S\ "SS94S\ "SS94S\"SS94S\ "S SS94S!\ "S SS94S"\"\ "SSS954S#\ "SSS94S$\"\ "S%SS954S&\"\54S'\ "S(S)94S*\"SS94/5r/S+QrU4S,jrS-rU=r$).NetworkTrafficizFor more detailed information on this object's properties, see `the STIX 2.1 specification `__. network-trafficr.r/r0r1r2r4startend is_activesrc_ref)r~rr r{r=dst_refsrc_portri)rmaxdst_port protocolsTresrc_byte_countrdst_byte_count src_packets dst_packetsipfixsrc_payload_refr-dst_payload_refencapsulates_refsencapsulated_by_refr;r<r?r@cgrBrCrCrDrErFNetworkTraffic.0rHrDrIrK)rNrOrQrRrSrUrVrKc>[[U] 5 URSS/5 UR S5nUR S5nUR S5nU(a!USLaSn[ UR U55eU(a!USLaS n[ UR U55eU(a*U(a"X!:aS n[ UR U55eggg) NrQrRrNrOrPFz4{0.id} 'is_active' must be False if 'end' is presentTz9{0.id} if 'is_active' is True, 'end' must not be includedz5{0.id} 'end' must be greater than or equal to 'start')rMrLrNrrr@format)rRrNrOrPmsgrSs rErN(NetworkTraffic._check_object_constraints5s nd=? ))9i*@A!hhuoHH[) 9E)HCSZZ-. . 9$MCSZZ-. . SS[ICSZZ-. .)S5rDrC)rUrVrWrXrYrZrrrrrr rrrr rr r[r\rNr]r^r_s@rErLrLs E e%89 e45 z%e45 #%& !#$ o'( %2gv{|} %2gv{|} _67 _67 l>DAB ?q12 ?q12 A./ A./ $%89 -*SXYZ -*SXYZ l+O^c de  ->K_ns-t uv l?;< _];< )u=>1K4#|//rDrLc \rSrSrSrSr\"S\"54S\"54S\"54S\"54S\"54S \ "S S 94S \ "\ 54/5r S r g)WindowsProcessExtiJzFor more detailed information on this object's properties, see `the STIX 2.1 specification `__. windows-process-ext aslr_enabled dep_enabledpriority owner_sid window_title startup_infor/r0integrity_levelrCN)rUrVrWrXrYrZrr rr r r$r[r]rCrDrErgrgJsp "E *+ )* ^%& n&' )* +?@ L)@ABKrDrgc\rSrSrSrSr\"S\"54S\"\54S\"54S\"54S\ "\ 54S \"\ "S S S 954S \ "\ 54S\ "\ 54/5rSrg)WindowsServiceExti[zFor more detailed information on this object's properties, see `the STIX 2.1 specification `__. zwindows-service-ext service_name descriptionsr group_name start_typeservice_dll_refsrur/r= service_typeservice_statusrCN)rUrVrWrXrYrZrrrr r'rr)r(r[r]rCrDrErqrq[s "E )* n56 )* ~'( |$>?@ \*;]b*cde &:;< <(>?@  KrDrqc^\rSrSrSrSr\"S\"\SS94S\"SS94S \ "\SS94S \ "54S \ "54S \ "54S \"54S\"54S\ "SS94S\"\"SSS954S\"SSS94S\"SSS94S\"SSS94S\"\"SSS954S\"\"SSS954S\"\54S\ "SS94S\"SS94/5r/rU4S jrS!rU=r$)"ProcessimzFor more detailed information on this object's properties, see `the STIX 2.1 specification `__. processr.r/r0r1r2r4 is_hiddenpid created_timecwd command_lineenvironment_variablesopened_connection_refsrMr=creator_user_refr image_refru parent_ref child_refsr;r<r?r@cgrBrCrCrDrErFProcess.rHrDrIrKcb>[[U] 5 UR5 SUR S05;aUR SR5 gg![ aJnSU;aUeSUR S05;a"UR SR5 SnAgSnAgSnAff=f)NrhrK)rMrzrNrrrKr)rR enclosing_excrSs rErN!Process._check_object_constraintss gt68 Z  - - /$r(BB 56SSUC& Z4'##(DHH\2,FFOO$9:WWYYG  ZsAA B.$;B))B.rC)rUrVrWrXrYrZrrrrr rrr rrrr r[r\rNr]r^r_s@rErzrzms@ E e%89 e45 z%e45 o'( !" *,-  ! )* "4%"HI !<0AN_ns0t#uv .>X]^_ 'FOP (YUST |$5)Z_$`ab  ->K_ns-t uv l?;< _];< )u=>'K*#% Z ZrDrzc\rSrSrSrSr\"S\"\SS94S\"SS94S \ "\SS94S \"S S 94S \"54S\"54S\ "\54S\"54S\"54S\ "\ "SSS954S\ "\ 54S\ "SS94S\"SS94/ 5r/SQrSrg)SoftwareizFor more detailed information on this object's properties, see `the STIX 2.1 specification `__. softwarer.r/r0r1r2r4rgTrecpeswid languagesvendorrr;r<r=r?r@cgrBrCrCrDrErFSoftware.rHrDrIrK)rgrrrrrCNrrCrDrErrs E e%89 e45 z%e45 ./  ! !" l>23 >#$ N$%  ->K_ns-t uv l?;< _];< )u=>K#OrDrc\rSrSrSrSr\"S\"\SS94S\"SS94S \ "\SS94S \"S S 94S \ "\ "SSS954S\ "\ 54S\ "SS94S\"SS94/5rS /rSrg)URLizFor more detailed information on this object's properties, see `the STIX 2.1 specification `__. r7r.r/r0r1r2r4r|Trer;r<r=r?r@cgrBrCrCrDrErF URL.rHrDrIrKrCNrrCrDrErrs E e%89 e45 z%e45 .$/0  ->K_ns-t uv l?;< _];< )u=>  K$+)rDrcn\rSrSrSrSr\"S\"54S\"\ 54S\ "54S\ "54/5r Sr g ) UNIXAccountExtizFor more detailed information on this object's properties, see `the STIX 2.1 specification `__. zunix-account-extgidgroupshome_dirshellrCN) rUrVrWrXrYrZrrrrr[r]rCrDrErrsK E !" </0 ^%& ."# KrDrc\rSrSrSrSr\"S\"\SS94S\"SS94S \ "\SS94S \"54S \"54S \"54S \ "\ 54S\"54S\ "54S\ "54S\ "54S\ "54S\ "54S\ "54S\ "54S\ "54S\ "54S\"\"SSS954S\"\54S\ "SS94S\"SS94/5r/S QrS!rg")# UserAccountizFor more detailed information on this object's properties, see `the STIX 2.1 specification `__. rr.r/r0r1r2r4user_id credential account_login account_typeris_service_account is_privilegedcan_escalate_privs is_disabledaccount_createdaccount_expirescredential_last_changedaccount_first_loginaccount_last_loginr;r<r=r?r@cgrBrCrCrDrErFUserAccount.rHrDrIrK)rrrrCN)rUrVrWrXrYrZrrrrrrr rrrrr r[r\r]rCrDrErrs2 E e%89 e45 z%e45 N$% ~'( .*+ *<89 )* 01 /+, 01 )* -/0 -/0 "$5$78  1 34 023  ->K_ns-t uv l?;< _];< )u=>+K.#OrDrc^\rSrSrSrSr\"S\"54S\"54S\"\ 54/5r Sr g) WindowsRegistryValueTypeizFor more detailed information on this object's properties, see `the STIX 2.1 specification `__. zwindows-registry-value-typergdata data_typerCN) rUrVrWrXrYrZrrr r&r[r]rCrDrErrsA *E !" !" l#<=>KrDrc\rSrSrSrSr\"S\"\SS94S\"SS94S \ "\SS94S \"54S \ "\ "\ S 954S \ "54S\"SSS94S\"54S\ "\"SSS954S\ "\54S\"SS94S\"SS94/ 5rS S /rSrg)WindowsRegistryKeyizFor more detailed information on this object's properties, see `the STIX 2.1 specification `__. zwindows-registry-keyr.r/r0r1r2r4rDvaluesr modified_timerrr=number_of_subkeysr;r<r?r@cgrBrCrCrDrErFWindowsRegistryKey.rHrDrIrKrCN)rUrVrWrXrYrZrrrrrr rrrrrr r r[r\r]rCrDrErrs #E e%89 e45 z%e45  ! < 6X]^_ o/0  ->K_ns-t uv l?;< _];< )u=>K$)("3rDrc,\rSrSrSrSr\"S\"54S\"54S\"54S\"54S\"54S \"54S \"54S \"54S \"54S \"54S\"54S\"54S\"54S\"54S\"54S\"54/5r Sr g)X509V3ExtensionsTypeizFor more detailed information on this object's properties, see `the STIX 2.1 specification `__. zx509-v3-extensions-typebasic_constraintsname_constraintspolicy_constraints key_usageextended_key_usagesubject_key_identifierauthority_key_identifiersubject_alternative_nameissuer_alternative_namesubject_directory_attributescrl_distribution_pointsinhibit_any_policy#private_key_usage_period_not_before"private_key_usage_period_not_aftercertificate_policiespolicy_mappingsrCN) rUrVrWrXrYrZrrrr[r]rCrDrErrs &E n./ ^-. ~/0 n&' ~/0 !>#34 #^%56 #^%56 "N$45 ')9: "N$45 ~/0 .0A0CD -/@/BC !12 N,-!KrDrc^\rSrSrSrSr\"S\"\SS94S\"SS94S \ "\SS94S \ "54S \ "\ SS94S \"54S \"54S\"54S\"54S\ "54S\ "54S\"54S\"54S\"54S\"54S\"\S94S\"\"SSS954S\"\54S\ "SS94S\"SS94/5rS S /rU4S jrS!rU=r$)"X509Certificatei1zFor more detailed information on this object's properties, see `the STIX 2.1 specification `__. zx509-certificater.r/r0r1r2r4is_self_signedr8r serial_numbersignature_algorithmissuervalidity_not_beforevalidity_not_afterrsubject_public_key_algorithmsubject_public_key_modulussubject_public_key_exponentx509_v3_extensionsrr;r<r=r?r@cgrBrCrCrDrErFX509Certificate.JrHrDrIrKcT>[[U] 5 /SQnURU5 g)N) rr8rrrrrrrrrrr)rMrrNr)rRatt_listrSs rErN)X509Certificate._check_object_constraintsOs' ot>@  ))(3rDrC)rUrVrWrXrYrZrrrrr rr!rrr rrrrr r[r\rNr]r^r_s@rErr1s9 E e%89 e45 z%e45 ?,- >"3%HI N$% .*+  01 >#$  1 34 023 N$% ')9: %~'78 &(9: 5;OPQ  ->K_ns-t uv l?;< _];< )u=>)K,$,_"= 4 4rDrc ^^^^UUUU4SjnU$)aCustom STIX Cyber Observable Object type decorator. Example: >>> from stix2.v21 import CustomObservable >>> from stix2.properties import IntegerProperty, StringProperty >>> @CustomObservable('x-custom-observable', [ ... ('property1', StringProperty(required=True)), ... ('property2', IntegerProperty()), ... ]) ... class MyNewObservableType(): ... pass c>[[R"S[TSS94S[ SS94S[ TSS94/TS[ [SSS 954S [ [54S [S S 94S[SS94/55nT(aN[T0S9"SS55nTRS5SnURSS5nSU-UlTUl[!UTUS["T5$)Nr.r/r0r1r2r4r;r<r=r?r@cgrBrCrCrDrErF3CustomObservable..wrapper..vsrDrIrK)r. propertiesc\rSrSrSrSrg)8CustomObservable..wrapper..NameExtensioni|znew-scorCN)rUrVrWrXextension_typer]rCrDrE NameExtensionr|s!*rDrz--r-ExtensionDefinition)list itertoolschainrrrrrrr r rsplitreplacerUwith_extensionrr)clsr[r extensionextension_nameid_contrib_propsrr.s rEwrapper!CustomObservable..wrapperjs OO\$UCD#^%%@A:d?@ *L9JWkz:A-BC(,*GH!GH!#55#IJ    .R @ + +A +',,T215I!))#r2I%:Y%FM "!/C )#t[%VfggrDrC)r.rrrrs```` rECustomObservabler\shh6 NrD)zx-custom-observableNNN)SrY collectionsrrcustomr exceptionsrrrrr r r r r rrrrrrrrrrrbaserrrcommonrrvocabrr r!r"r#r$r%r&r'r(r)r+rarlryrrrrrrrrrrrrr rrrrr'r,rHrLrgrqrzrrrrrrrrrrCrDrErs$/J764?{?:-{-*+ +2,,(,;,*DD"%W;%WP   +  j  Z  Z ),+),X { ,>;>D,+,*,+,*,,&+K+& Z  j I I< Z 4/[4/n " $)Zk)ZXO{O0,+,& Z O+O@ { 440;4(4k(4V)rD