MISP
/
PyMISP
mirror of https://github.com/MISP/PyMISP
2
0
Fork 0
Code Issues Releases Wiki Activity

Merge pull request #61 from RichieB2B/ncsc-nl/speedup-et2misp 

Speed up et2misp
pull/30/head
Alexandre Dulaunoy 2016-08-18 11:54:15 +02:00 committed by GitHub
parent a4acc5d147 7cbda22667
commit 95847a8e0d
1 changed files with 8 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
examples/et2misp.py Normal file → Executable file
View File

@ -2,7 +2,7 @@
# -*- coding: utf-8 -*- # -*- coding: utf-8 -*-
# #
# Copy Emerging Threats Block IPs list to several MISP events # Copy Emerging Threats Block IPs list to several MISP events
# Because of the large size of the list the first run will take about 30 mins # Because of the large size of the list the first run will take a minute
# Running it again will update the MISP events if changes are detected # Running it again will update the MISP events if changes are detected
# #
# This script requires PyMISP 2.4.50 or later # This script requires PyMISP 2.4.50 or later
@ -78,9 +78,13 @@ def update_et_event(name):
et_data[name].pop(k, None) et_data[name].pop(k, None)
# Add new attributes to MISP event # Add new attributes to MISP event
for k,v in et_data[name].items(): ipdst = []
r = mymisp.add_ipdst(et_event, k, comment=v) for i,k in enumerate(et_data[name].items(), 1-len(et_data[name])):
echeck(r, et_event['Event']['id']) ipdst.append(k[0])
if i % 100 == 0:
r = mymisp.add_ipdst(et_event, ipdst)
echeck(r, et_event['Event']['id'])
ipdst = []
# Update revision number # Update revision number
et_drev['value'] = et_rev et_drev['value'] = et_rev