2015-08-11 17:14:16 +02:00
|
|
|
#!/usr/bin/env python
|
|
|
|
# -*- coding: utf-8 -*-
|
|
|
|
|
|
|
|
from pymisp import PyMISP
|
2015-11-06 11:16:32 +01:00
|
|
|
from keys import misp_url, misp_key
|
2015-08-11 17:14:16 +02:00
|
|
|
import argparse
|
|
|
|
|
|
|
|
|
|
|
|
# Usage for pipe masters: ./last.py -l 5h | jq .
|
|
|
|
|
|
|
|
|
|
|
|
def init(url, key):
|
2016-08-18 00:23:49 +02:00
|
|
|
return PyMISP(url, key, True, 'json', debug=True)
|
2015-08-11 17:14:16 +02:00
|
|
|
|
|
|
|
|
|
|
|
def up_event(m, event, content):
|
|
|
|
with open(content, 'r') as f:
|
|
|
|
result = m.update_event(event, f.read())
|
2016-08-18 00:23:49 +02:00
|
|
|
print(result)
|
2015-08-11 17:14:16 +02:00
|
|
|
|
|
|
|
if __name__ == '__main__':
|
|
|
|
parser = argparse.ArgumentParser(description='Get an event from a MISP instance.')
|
|
|
|
parser.add_argument("-e", "--event", required=True, help="Event ID to get.")
|
|
|
|
parser.add_argument("-i", "--input", required=True, help="Input file")
|
|
|
|
|
|
|
|
args = parser.parse_args()
|
|
|
|
|
2015-11-06 11:16:32 +01:00
|
|
|
misp = init(misp_url, misp_key)
|
2015-08-11 17:14:16 +02:00
|
|
|
|
|
|
|
up_event(misp, args.event, args.input)
|