Comparator

The MAEC Comparator is a python-maec API (formerly implemented as a separate utility), currently implemented in the Bundle module (bundle/bundle.py) that permits for some basic comparisons to be made between two or more MAEC Bundles. Currently this works at the Object-level (including those embedded as Associated Objects in Actions), but we plan on adding support for comparison between other MAEC entities in the near future.

Features

Currently the comparator allows for the following comparisons to be made:

• Find all unique Objects in one or more MAEC Bundles
• Find all intersecting* Objects between two or more MAEC Bundles

*By intersecting, we mean those of the same type with certain matching properties (the set on which to match can be specified - see below), while ignoring those that are not relevant for such a comparison (e.g., ids and descriptions). For example, two File Objects with the same File_Path would be considered an intersection.

Specifying Matching Attributes

For performing intersections among Objects in two more MAEC Bundles, it is important to be able to control the set of properties that one cares to match on, especially when dealing with some of the more complicated Objects. As such, we've created a relatively simple way to define the set of Objects and their respective properties to match on.

Limitations

Output Format

Interface