MISP
/
PyMISP
mirror of https://github.com/MISP/PyMISP
2
0
Fork 0
Code Issues Releases Wiki Activity

new: Parse date from email

pull/631/head
Jakub Onderka 2020-09-25 10:25:38 +02:00
parent 942f6e9e06
commit c2fedc3850
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
pymisp/tools/emailobject.py
View File

@ -97,6 +97,8 @@ class EMailObject(AbstractMISPObjectGenerator):
self.add_attribute('x-mailer', value=self.__email['X-Mailer'])
if 'Thread-Index' in self.__email:
self.add_attribute('thread-index', value=self.__email['Thread-Index'])
if 'Date' in self.__email:
self.add_attribute('send-date', self._sanitize_timestamp(self.__email['Date']))
# TODO: email-header: all headers in one bloc
# TODO: BCC?
# TODO: received headers sometimes have TO email addresses