STIX 2.1 Validator

Validate STIX 2.1 JSON bundles using the official stix2-validator library.

Requirements

Install the validator library before use:

pip install stix2-validator --break-system-packages

Usage

Validate a Single File

python scripts/validate_stix.py /path/to/bundle.json

Validate a Directory

python scripts/validate_stix.py /path/to/stix_files/

Add -r for recursive subdirectory scanning.

Options

JSON Output

For integration with other tools, use --json:

python scripts/validate_stix.py bundle.json --json

Returns structured output:

{
  "file": "bundle.json",
  "valid": false,
  "errors": [
    {"id": "indicator--abc123", "type": "", "message": "'pattern_type' is a required property"}
  ],
  "warnings": []
}

Error Categories

The validator checks for:

• Schema errors: Missing required properties, invalid property types
• Format errors: Malformed UUIDs, invalid timestamps, incorrect ID formats
• Reference errors: Unresolved object references (with --enforce-refs)
• Semantic errors: Invalid STIX patterns, constraint violations

Exit Codes

• 0: All files valid
• 1: Validation errors found or file not found