Automated way to download the STIX bundle for each post?

Obstracts
1

I am currently using the Download Bundle button below the graph, but it is getting tedious doing it for all posts.

image
image1775×1514 452 KB

I know there is a post objects request on the API, but how do I filter out objects like I can in the web app?

2

You can use the type filter on feeds/<ID>/posts/<ID>/objects

image
image1418×1003 122 KB

e.g. for the post in the screenshot, only include Indicator, Report and Relationship objects

curl -X 'GET' \
  'https://api.obstracts.com/v1/feeds/ecfdd2cb-9727-52c9-bf18-9266b2e2fd61/posts/1abba9ed-3886-5ad7-8d0c-ffcbce9c4b0d/objects/?types=indicator,relationship,report' \
  -H 'accept: application/json' \
  -H 'API-KEY: HIDDEN'

Note, this won’t return a proper STIX bundle (we have pagination on the endpoint). However the objects list is formatted in the same way as the objects property in STIX Bundles.