From c2fedc38504abce22cafd4327c804f59e09b4d31 Mon Sep 17 00:00:00 2001 From: Jakub Onderka Date: Fri, 25 Sep 2020 10:25:38 +0200 Subject: [PATCH] new: Parse date from email --- pymisp/tools/emailobject.py | 2 ++ 1 file changed, 2 insertions(+) diff --git a/pymisp/tools/emailobject.py b/pymisp/tools/emailobject.py index e3d8835..7d31410 100644 --- a/pymisp/tools/emailobject.py +++ b/pymisp/tools/emailobject.py @@ -97,6 +97,8 @@ class EMailObject(AbstractMISPObjectGenerator): self.add_attribute('x-mailer', value=self.__email['X-Mailer']) if 'Thread-Index' in self.__email: self.add_attribute('thread-index', value=self.__email['Thread-Index']) + if 'Date' in self.__email: + self.add_attribute('send-date', self._sanitize_timestamp(self.__email['Date'])) # TODO: email-header: all headers in one bloc # TODO: BCC? # TODO: received headers sometimes have TO email addresses