MISP
/
MISP
mirror of https://github.com/MISP/MISP
2
2
Fork 0
Code Issues Releases Wiki Activity

fix: [stix2 export] Fixed user account pattern creation

pull/4861/head v2.4.110
chrisr3d 2019-07-08 16:56:34 +02:00
parent 152746a05a
commit 5d1c6ce467
No known key found for this signature in database
GPG Key ID: 6BBED1B63A6D639F
1 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
app/files/scripts/stix2/misp2stix2.py
View File

@ -1280,15 +1280,21 @@ class StixBuilder():
return {'0': observable}
def resolve_user_account_pattern(self, attributes, object_id):
mapping = objectsMapping['user-account']['to_call']
mapping = objectsMapping['user-account']['pattern']
extension_pattern = "extensions.'unix-account-ext'.{}"
attributes = self.parse_user_account_attributes(attributes, object_id)
pattern = []
if 'group' in attributes:
i = 0
for group in attributes.pop('group'):
pattern.append(mapping.format(extension_pattern.format('groups[{}]'.format(i)), group))
i += 1
for relation, value in attributes.items():
try:
pattern_part = mapping.format(userAccountMapping[relation], value)
except KeyError:
try:
pattern_part = mapping.format('extensions.unix-account-ext.{}'.format(unixAccountExtensionMapping[relation]), value)
pattern_part = mapping.format(extension_pattern.format(unixAccountExtensionMapping[relation]), value)
except KeyError:
continue
pattern.append(pattern_part)