diff --git a/lookyloo/lookyloo.py b/lookyloo/lookyloo.py index 6902b8bb..0c285d51 100644 --- a/lookyloo/lookyloo.py +++ b/lookyloo/lookyloo.py @@ -1182,6 +1182,7 @@ class Lookyloo(): screenshot: MISPAttribute = event.add_attribute('attachment', 'screenshot_landing_page.png', data=self.get_screenshot(cache.uuid), disable_correlation=True) # type: ignore[assignment] + screenshot.first_seen = cache.timestamp # If the last object attached to tht event is a file, it is the rendered page if event.objects and event.objects[-1].name == 'file': event.objects[-1].add_reference(screenshot, 'rendered-as', 'Screenshot of the page') diff --git a/lookyloo/modules/misp.py b/lookyloo/modules/misp.py index 49690699..c20d7705 100644 --- a/lookyloo/modules/misp.py +++ b/lookyloo/modules/misp.py @@ -107,6 +107,7 @@ class MISPs(Mapping, AbstractModule): # type: ignore[type-arg] lookyloo_link: MISPAttribute = event.add_attribute('link', f'https://{public_domain}/tree/{cache.uuid}') # type: ignore[assignment] if not is_public_instance: lookyloo_link.distribution = 0 + lookyloo_link.first_seen = cache.timestamp initial_obj.add_reference(lookyloo_link, 'captured-by', 'Capture on lookyloo') redirects: list[URLObject] = []