mirror of https://github.com/MISP/PyMISP
Moved object constructor into their own folder
parent
d898bb3857
commit
38c22ba954
|
@ -0,0 +1,32 @@
|
|||
#!/usr/bin/env python3
|
||||
|
||||
import time
|
||||
|
||||
from pymisp.tools.abstractgenerator import AbstractMISPObjectGenerator
|
||||
|
||||
|
||||
class CowrieMISPObject(AbstractMISPObjectGenerator):
|
||||
def __init__(self, dico_val, **kargs):
|
||||
self._dico_val = dico_val
|
||||
self.name = "cowrie"
|
||||
|
||||
# Enforce attribute date with timestamp
|
||||
super(CowrieMISPObject, self).__init__('cowrie',
|
||||
default_attributes_parameters={'timestamp': int(time.time())},
|
||||
**kargs)
|
||||
self.generate_attributes()
|
||||
|
||||
def generate_attributes(self):
|
||||
skip_list = ['time', 'duration', 'isError', 'ttylog']
|
||||
for object_relation, value in self._dico_val.items():
|
||||
if object_relation in skip_list or 'log_' in object_relation:
|
||||
continue
|
||||
# cast to datetime
|
||||
if object_relation == 'timestamp':
|
||||
# Date already in ISO format, removing trailing Z
|
||||
value = value.rstrip('Z')
|
||||
|
||||
if isinstance(value, dict):
|
||||
self.add_attribute(object_relation, **value)
|
||||
else:
|
||||
self.add_attribute(object_relation, value=value)
|
|
@ -45,7 +45,7 @@ Tag=[
|
|||
]
|
||||
|
||||
# MISP Object constructor
|
||||
from CowrieMISPObject import CowrieMISPObject
|
||||
from ObjectConstructor.CowrieMISPObject import CowrieMISPObject
|
||||
from pymisp.tools import GenericObjectGenerator
|
||||
|
||||
constructor_dict = {
|
||||
|
|
Loading…
Reference in New Issue