diff --git a/app/files/scripts/stix2misp.py b/app/files/scripts/stix2misp.py index fcb6403aa..903fe43b7 100644 --- a/app/files/scripts/stix2misp.py +++ b/app/files/scripts/stix2misp.py @@ -202,6 +202,9 @@ class StixParser(): def buildExternalDict(self): self.dictTimestampAndDate() self.eventInfo() + if hasattr(self.event.stix_header, 'description'): + self.misp_event.add_attribute(**{'type': 'comment', 'value': self.event.stix_header.description.value, + 'comment': 'Imported from STIX header description'}) if self.event.indicators: self.parse_external_indicators(self.event.indicators) if self.event.observables: