From ab6598931d036c86a79e1e157667a12408796a72 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Rapha=C3=ABl=20Vinot?= Date: Wed, 13 Nov 2024 12:06:54 +0100 Subject: [PATCH] fix: Add first_seen to screenshot and lookyloo URL --- lookyloo/lookyloo.py | 1 + lookyloo/modules/misp.py | 1 + 2 files changed, 2 insertions(+) diff --git a/lookyloo/lookyloo.py b/lookyloo/lookyloo.py index 6902b8bb..0c285d51 100644 --- a/lookyloo/lookyloo.py +++ b/lookyloo/lookyloo.py @@ -1182,6 +1182,7 @@ class Lookyloo(): screenshot: MISPAttribute = event.add_attribute('attachment', 'screenshot_landing_page.png', data=self.get_screenshot(cache.uuid), disable_correlation=True) # type: ignore[assignment] + screenshot.first_seen = cache.timestamp # If the last object attached to tht event is a file, it is the rendered page if event.objects and event.objects[-1].name == 'file': event.objects[-1].add_reference(screenshot, 'rendered-as', 'Screenshot of the page') diff --git a/lookyloo/modules/misp.py b/lookyloo/modules/misp.py index 49690699..c20d7705 100644 --- a/lookyloo/modules/misp.py +++ b/lookyloo/modules/misp.py @@ -107,6 +107,7 @@ class MISPs(Mapping, AbstractModule): # type: ignore[type-arg] lookyloo_link: MISPAttribute = event.add_attribute('link', f'https://{public_domain}/tree/{cache.uuid}') # type: ignore[assignment] if not is_public_instance: lookyloo_link.distribution = 0 + lookyloo_link.first_seen = cache.timestamp initial_obj.add_reference(lookyloo_link, 'captured-by', 'Capture on lookyloo') redirects: list[URLObject] = []