MISP
/
PyMISP
mirror of https://github.com/MISP/PyMISP
2
0
Fork 0
Code Issues Releases Wiki Activity

new: Added ability to disable correlation on attributes

pull/41/head
Hannah Ward 2017-01-16 09:52:35 +00:00
parent cfb8572ab1
commit 78cef06963
No known key found for this signature in database
GPG Key ID: 6F3BAD60DE190290
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
pymisp/mispevent.py
View File

@ -77,6 +77,7 @@ class MISPAttribute(object):
self.sig = None self.sig = None
self.SharingGroup = [] self.SharingGroup = []
self.ShadowAttribute = [] self.ShadowAttribute = []
self.disable_correlation = False
def _serialize(self): def _serialize(self):
return '{type}{category}{to_ids}{uuid}{timestamp}{comment}{deleted}{value}'.format( return '{type}{category}{to_ids}{uuid}{timestamp}{comment}{deleted}{value}'.format(
@ -171,6 +172,9 @@ class MISPAttribute(object):
if kwargs.get('sig'): if kwargs.get('sig'):
self.sig = kwargs['sig'] self.sig = kwargs['sig']
# If the user wants to disable correlation, let them. Defaults to False.
self.disable_correlation = kwargs.get("disable_correlation", False)
def _prepare_new_malware_sample(self): def _prepare_new_malware_sample(self):
if '|' in self.value: if '|' in self.value:
# Get the filename, ignore the md5, because humans. # Get the filename, ignore the md5, because humans.
@ -205,7 +209,7 @@ class MISPAttribute(object):
def _json(self): def _json(self):
to_return = {'type': self.type, 'category': self.category, 'to_ids': self.to_ids, to_return = {'type': self.type, 'category': self.category, 'to_ids': self.to_ids,
'distribution': self.distribution, 'value': self.value, 'distribution': self.distribution, 'value': self.value,
'comment': self.comment} 'comment': self.comment, 'disable_correlation': self.disable_correlation}
if self.sig: if self.sig:
to_return['sig'] = self.sig to_return['sig'] = self.sig
if self.sharing_group_id: if self.sharing_group_id: