MISP
/
MISP-Taxii-Server
mirror of https://github.com/MISP/MISP-Taxii-Server
2
0
Fork 0
Code Issues Releases Wiki Activity

Adding deduplication as an optional item

pull/82/head
haraksin 2020-05-13 13:41:12 -07:00
parent 277dfcdb97
commit c55f9994c6
1 changed files with 26 additions and 19 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
misp_taxii_hooks/hooks.py
View File

@ -34,11 +34,17 @@ else:
else:
print("Unknown misp API key. Set OPENTAXII_CONFIG or MISP_API.")
misp_api = "UNKNOWN"
if "MISP_DEDUP" in os.environ:
misp_dedup = os.environ["MISP_DEDUP"]
else:
print("Unknown misp deduplication setting. Set OPENTAXII_CONFIG or MISP_DEDUP.")
misp_dedup = "UNKNOWN"
CONFIG = {
"misp" : {
"url" : misp_url,
"api" : misp_api
"api" : misp_api,
"dedup" : misp_dedup
}
}
@ -64,6 +70,7 @@ def post_stix(manager, content_block, collection_ids, service_id):
log.info("STIX loaded succesfully.")
values = [x.value for x in package.attributes]
log.info("Extracted %s", values)
if CONFIG['MISP_DEDUP'] == "true" or CONFIG['MISP_DEDUP'] == "True" or CONFIG['MISP_DEDUP'] == "TRUE" or CONFIG['MISP_DEDUP'] == "UNKNOWN":
for attrib in values:
log.info("Checking for existence of %s", attrib)
search = MISP.search("attributes", values=str(attrib))