ParseError: Can't parse unknown object type 'infrastructure'!

[MrDynmt]

I am unable to parse the infrastructure type in the same way that I am able to parse the threat-actor and tool type. Here is the dictionary I attempt to parse: {'parent_type': 'generic',
'type': 'infrastructure',
'sourcereliability': '2',
'actionable': '2',
'relevance': '2',
'info': 'https://cert.gov.ua/article/6123309',
'name': 'pre-compromised server',
'labels': 'White'}
Here is the error I get: ParseError: Can't parse unknown object type 'infrastructure'! For custom types, use the CustomObject decorator.

[chisholm]

You didn't give any sample code showing what you tried, but I suspect you didn't give a STIX specification version so the library tried to detect it and came up with 2.0. But infrastructure is a 2.1 SDO. You might try adding property "spec_version": "2.1" to your dictionary (that's a required property for 2.1 SDOs anyway).

[MrDynmt]

Will do, thank you for the quick response.

…

On Tue, Dec 17, 2024, 8:17 PM chisholm ***@***.***> wrote: You didn't give any sample code showing what you tried, but I suspect you didn't give a STIX specification version so the library tried to detect it and came up with 2.0. But infrastructure is a 2.1 SDO. You might try adding property "spec_version": "2.1" to your dictionary (that's a required property for 2.1 SDOs anyway). — Reply to this email directly, view it on GitHub <#617 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AEDNA6RTQQMITKYKDOZHAX32GDSNBAVCNFSM6AAAAABTZTQVAOVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDKNJQGIZDEOBRGE> . You are receiving this because you authored the thread.Message ID: ***@***.***>