diff --git a/examples/get_csv.py b/examples/get_csv.py index 33baf62..5921e53 100755 --- a/examples/get_csv.py +++ b/examples/get_csv.py @@ -1,9 +1,9 @@ -#!/usr/bin/env python +#!/usr/bin/env python3 # -*- coding: utf-8 -*- import argparse -from pymisp import PyMISP +from pymisp import ExpandedPyMISP from keys import misp_url, misp_key, misp_verifycert @@ -14,12 +14,20 @@ if __name__ == '__main__': parser.add_argument("-o", "--object_attribute", nargs='+', help="Object attribute column names") parser.add_argument("-t", "--misp_types", nargs='+', help="MISP types to fetch (ip-src, hostname, ...)") parser.add_argument("-c", "--context", action='store_true', help="Add event level context (tags...)") - parser.add_argument("-i", "--ignore", action='store_true', help="Returns the attributes even if the event isn't published, or the attribute doesn't have the to_ids flag") parser.add_argument("-f", "--outfile", help="Output file to write the CSV.") args = parser.parse_args() - pymisp = PyMISP(misp_url, misp_key, misp_verifycert, debug=True) - response = pymisp.get_csv(args.event_id, args.attribute, args.object_attribute, args.misp_types, args.context, args.ignore) + pymisp = ExpandedPyMISP(misp_url, misp_key, misp_verifycert, debug=True) + attr = [] + if args.attribute: + attr += args.attribute + if args.object_attribute: + attr += args.object_attribute + if not attr: + attr = None + print(args.context) + response = pymisp.search(return_format='csv', eventid=args.event_id, requested_attributes=attr, + type_attribute=args.misp_types, include_context=args.context) if args.outfile: with open(args.outfile, 'w') as f: