typedb-cti

What the README says you get

• API
  STIX bundle loadera loading tool capable of ingesting a STIX bundle from a JSON file
• Data
  STIX 2.1 schemaa TypeDB schema designed to represent the STIX™ Version 2.1 standard
• Data
  TypeDB 3.x compatibleThis repository is compatible with TypeDB 3.x
• Data
  STIX domain objectsDefines the STIX Domain Objects (SDOs)
• Data
  STIX cyber-observable objectsDefines the STIX Cyber-observable Objects (SCOs)
• Data
  STIX meta objectsDefines the STIX meta objects (e.g., `marking-definition`)
• Data
  STIX relationship objectsDefines the STIX Relationship Objects (SROs)
• Data
  Linking property relationsmodel the *linking properties* often found on SDOs and SCOs
• Data
  Controlled vocabulariescontrolled vocabularies (enums) specified by the STIX standard
• Data
  Kill chain phase entitiesglobally unique kill_chain_phase entities, instead of attributes/structs
• Deploy
  Schema init tooluse the demo tool to initialize the database and schema
• Deploy
  Console setup scriptYou can also initialise the schema through TypeDB Console
• Testing
  Salt Typhoon sample dataTry ingesting `sample/salt_typhoon_stix.json` for a small dataset
• Testing
  Sample TypeQL queriesHere's how to write some basic TypeQL queries to answer some questions

Extracted from the kit's README by a local AI model (deepseek-flash) on Sep 29, 2026. Every item is checked against an exact README quote. A README claim is the maker's description, not something we tested.