The STIX 2.1 Exporter Operation for ThreatQ enables an analyst to export an object and its relationships to STIX 2.1 format.

The operation includes the following actions:

• Create Bundle - creates a STIX 2.1 bundle from an object and its relationships.
• Create Sighting - creates a STIX 2.1 sighting from an object and its relationships.
  See the Actions chapter for further details on these actions.

The integration’s actions are compatible with the following object types:

• Adversary
• Attack Pattern
• Campaign
• Course Of Action
• Event
• Exploit Target
• Identity
• Incident
• Indicator
• Intrusion Set
• Malware
• Report
• Tool
• Vulnerability