From c40e7764625c99ac48a73391fa18d810d57a0aff Mon Sep 17 00:00:00 2001 From: Christophe Vandeplas Date: Wed, 12 Jun 2019 12:38:58 +0300 Subject: [PATCH] chg: [transform] improved performance EventTo containing attachments --- src/MISP_maltego/transforms/eventtoattributes.py | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/src/MISP_maltego/transforms/eventtoattributes.py b/src/MISP_maltego/transforms/eventtoattributes.py index 591e255..b8d71fa 100644 --- a/src/MISP_maltego/transforms/eventtoattributes.py +++ b/src/MISP_maltego/transforms/eventtoattributes.py @@ -35,8 +35,11 @@ class EventToTransform(Transform): self.config = config maltego_misp_event = request.entity self.misp = get_misp_connection(config) - self.event_json = self.misp.get_event(maltego_misp_event.id) # FIXME get it without attachments # FIXME use search + includeAttachments:0, eventid: as request body - if not self.event_json.get('Event'): + event_id = maltego_misp_event.id + search_result = self.misp.search(controller='events', eventid=event_id, withAttachments=False) + if search_result.get('response'): + self.event_json = search_result['response'].pop() + else: return False self.response += event_to_entity(self.event_json)