Moved object constructor into their own folder

pull/204/head
Sami Mokaddem 2018-03-12 15:22:58 +01:00
parent d898bb3857
commit 38c22ba954
2 changed files with 33 additions and 1 deletions

View File

@ -0,0 +1,32 @@
#!/usr/bin/env python3
import time
from pymisp.tools.abstractgenerator import AbstractMISPObjectGenerator
class CowrieMISPObject(AbstractMISPObjectGenerator):
def __init__(self, dico_val, **kargs):
self._dico_val = dico_val
self.name = "cowrie"
# Enforce attribute date with timestamp
super(CowrieMISPObject, self).__init__('cowrie',
default_attributes_parameters={'timestamp': int(time.time())},
**kargs)
self.generate_attributes()
def generate_attributes(self):
skip_list = ['time', 'duration', 'isError', 'ttylog']
for object_relation, value in self._dico_val.items():
if object_relation in skip_list or 'log_' in object_relation:
continue
# cast to datetime
if object_relation == 'timestamp':
# Date already in ISO format, removing trailing Z
value = value.rstrip('Z')
if isinstance(value, dict):
self.add_attribute(object_relation, **value)
else:
self.add_attribute(object_relation, value=value)

View File

@ -45,7 +45,7 @@ Tag=[
] ]
# MISP Object constructor # MISP Object constructor
from CowrieMISPObject import CowrieMISPObject from ObjectConstructor.CowrieMISPObject import CowrieMISPObject
from pymisp.tools import GenericObjectGenerator from pymisp.tools import GenericObjectGenerator
constructor_dict = { constructor_dict = {