check the pattern parsing

[priamai]

Hello @brettforbes, I discovered that we can already leverage the ANTLR parsing engine.
Look into this code in particular the last part:

https://github.com/os-threat/Stix-ORM/blob/patterns/test/test_patterns.py

For example:
pattern = TreePattern("[domain-name:value = 'http://xyz.com/download']")

Produces a dict tree:

pattern:
  observation:
    objects: {domain-name}
    join:
    qualifiers:
    expressions:
      - comparison:
          object: domain-name
          path: [value]
          negated:
          operator: '='
          value: http://xyz.com/download

Will this be enough to produce the queries?

[brettforbes]

lets talk at kanban, might be

[priamai]

I will put some examples for domains, url and IP address as queries strings.

[priamai]

Hello, I made a simplified example here.