Interface API

The following use cases should be supported by STIX-ORM. Code snippets are provided below for each use case...

Create Feeds

Create a feeds object initially without any feeds attached

Create Feed

Create a feed object initially with empty content field. Add the feed object to the top level feeds object.

Add initial content to Feed

Get the Feed object by ID or Name, then add a list of object references to observed data.

Get Feed by ID or Name

Get the feed object and list all of the contents. Retrieve all the observed data objects. Retrieve all the references objects.

Get Feed and Add new content

Get the feed as before and append new observed data and their references.

Get Feed and edit existing content

Get the feed as before but this time:

• remove observed data and its reference (or should we set a flag to "revoked")?
• edit an existing observed data (first observed - last observed and counts)

Check existence

I want to see if a Feeds or Feed object already exist by name.