How to run STIX2 on Ubuntu 21.04?

cn flag

I am new to Linux and Ubuntu. I am slowly familiarising myself with simple commands and functioning primarily on a cut and paste as per instructions.I have managed to generate json files using the mvt-ios instructions. I now have to use STIX2 for analysis of files. Any suggestions on how to setup and run STIX2 on Ubuntu 21.04. Many thanks

Following is a basic usage of check-backup:

mvt-ios check-backup --output /path/to/output/ /path/to/backup/udid/

This command will create a few JSON files containing the results from the extraction. If you do not specify a --output option, mvt-ios will just process the data without storing results on disk.

Through the --iocs argument you can specify a STIX2 file defining a list of malicious indicators to check against the records extracted from the backup by mvt. Any matches will be highlighted in the terminal output as well as saved in the output folder using a "_detected" suffix to the JSON file name.

N0rbert avatar
zw flag
What do you mean by STIX2? ?
user1399099 avatar
cn flag
Knud Larsen avatar
by flag
Getting Started with STIX 2.1

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.