Skip to content
This repository was archived by the owner on Dec 5, 2025. It is now read-only.

Commit c6b346c

Browse files
committed
[client] Fix marking definition ID generation
1 parent a3098ff commit c6b346c

File tree

1 file changed

+13
-0
lines changed

1 file changed

+13
-0
lines changed

pycti/entities/opencti_marking_definition.py

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -26,6 +26,19 @@ def __init__(self, opencti):
2626

2727
@staticmethod
2828
def generate_id(definition_type, definition):
29+
# Handle static IDs from OpenCTI
30+
if definition_type == "TLP":
31+
if definition == "TLP:CLEAR" or definition == "TLP:WHITE":
32+
return "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
33+
if definition == "TLP:GREEN":
34+
return "marking-definition--34098fce-860f-48ae-8e50-ebd3cc5e41da"
35+
if definition == "TLP:AMBER":
36+
return "marking-definition--f88d31f6-486f-44da-b317-01333bde0b82"
37+
if definition == "TLP:AMBER+STRICT":
38+
return "marking-definition--826578e1-40ad-459f-bc73-ede076f81f37"
39+
if definition == "TLP:RED":
40+
return "marking-definition--5e57c739-391a-4eb3-b6be-7d15ca92d5ed"
41+
# Generate IDs
2942
data = {"definition_type": definition_type, "definition": definition}
3043
data = canonicalize(data, utf8=False)
3144
id = str(uuid.uuid5(uuid.UUID("00abedb4-aa42-466c-9c01-fed23315a9b7"), data))

0 commit comments

Comments
 (0)