diff --git a/USAGE-CAPEC.md b/USAGE-CAPEC.md index 44a2aaf821..013a66074a 100644 --- a/USAGE-CAPEC.md +++ b/USAGE-CAPEC.md @@ -51,6 +51,8 @@ from stix2 import FileSystemStore fs = FileSystemStore('./CAPEC', allow_custom=True) ``` +As of this writing, `allow_custom` must be set to `True`. This is because the CAPEC data uses several custom properties which are not part of the STIX 2.0 specification (`x_capec_prerequisites`, `x_capec_example_instances`, etc). + To perform a query, we must define a [Filter](http://stix2.readthedocs.io/en/latest/guide/datastore.html#Filters). As of this writing, a filter must, at a minimum, specify object `id`'s or an object `type`. The following filter can be used to retrieve all CAPEC attack patterns: ```python @@ -96,4 +98,4 @@ def get_mitigations_by_attack_pattern(src, ap_stix_id): ap = get_attack_pattern_by_capec_id(fs, '66')[0] get_mitigations_by_attack_pattern(fs, ap.id) -``` \ No newline at end of file +```