PyMISP/examples/get.py

49 lines
1.1 KiB
Python
Raw Normal View History

#!/usr/bin/env python
# -*- coding: utf-8 -*-
from pymisp import PyMISP
2016-08-02 15:17:42 +02:00
from keys import misp_url, misp_key, misp_verifycert
import argparse
import os
import json
# Usage for pipe masters: ./last.py -l 5h | jq .
2016-08-02 15:17:42 +02:00
proxies = {
'http': 'http://127.0.0.1:8123',
'https': 'http://127.0.0.1:8123',
}
proxies = None
def init(url, key):
2016-08-02 15:17:42 +02:00
return PyMISP(url, key, misp_verifycert, 'json', proxies=proxies)
def get_event(m, event, out=None):
result = m.get_event(event)
r = result.json()
if out is None:
print(json.dumps(r) + '\n')
else:
with open(out, 'w') as f:
f.write(json.dumps(r) + '\n')
if __name__ == '__main__':
2016-08-02 15:17:42 +02:00
parser = argparse.ArgumentParser(description='Get an event from a MISP instance.')
parser.add_argument("-e", "--event", required=True, help="Event ID to get.")
parser.add_argument("-o", "--output", help="Output file")
args = parser.parse_args()
if args.output is not None and os.path.exists(args.output):
print('Output file already exists, abord.')
exit(0)
2015-11-06 11:06:37 +01:00
misp = init(misp_url, misp_key)
get_event(misp, args.event, args.output)