MISP
/
MISP
mirror of https://github.com/MISP/MISP
2
2
Fork 0
Code Issues Releases Wiki Activity

chg: [analyst-data:push] Added support of sync-filtering rules

notes
Sami Mokaddem 2024-02-06 10:13:16 +01:00
parent 9d18007b2e
commit e5d000143a
No known key found for this signature in database
GPG Key ID: 164C473F627A06FA
1 changed files with 19 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
app/Model/AnalystData.php
View File

@ -524,6 +524,9 @@ class AnalystData extends AppModel
if (!$this->Event->checkDistributionForPush($analystData, $server, $type)) {
unset($dataForPush[$type][$i]);
}
if (!$this->isPushableForServerSyncRules($analystData[$type], $server)) {
unset($dataForPush[$type][$i]);
}
}
}
return $dataForPush;
@ -548,6 +551,22 @@ class AnalystData extends AppModel
return $sgIDs;
}
private function isPushableForServerSyncRules(array $analystData, array $server): bool
{
$push_rules = json_decode($server['Server']['push_rules'], true);
if (!empty($push_rules['orgs']['OR'])) {
if (!in_array($analystData['Orgc']['id'], $push_rules['orgs']['OR'])) {
return false;
}
}
if (!empty($push_rules['orgs']['NOT'])) {
if (in_array($analystData['Orgc']['id'], $push_rules['orgs']['NOT'])) {
return false;
}
}
return true;
}
/**
* Get an array of analyst data that the remote is willing to get and returns analyst data that should be pushed.