MISP
/
PyMISP
mirror of https://github.com/MISP/PyMISP
2
0
Fork 0
Code Issues Releases Wiki Activity

[openioc] Allow the use of types in openioc content tags

pull/409/head
0x3c7 2019-06-18 16:10:20 +02:00
parent 409ee532ba
commit efd8b80adb
No known key found for this signature in database
GPG Key ID: EFBE1131B58AFF51
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
pymisp/tools/openioc.py
View File

@ -217,6 +217,10 @@ def set_values(value1, value2=None):
# construct attribut composite type
compositeMapping = '{}|{}'.format(value1.find('context')['search'], value2.find('context')['search'])
mapping = get_mapping(compositeMapping, mappingDict=iocMispCompositeMapping)
else:
content_type = value1.find('content').get('type', None)
if content_type:
mapping = get_mapping(value1.find('context')['search'] + '/' + content_type)
else:
mapping = get_mapping(value1.find('context')['search'])