From fcb4d41d635165bfe2d38617db69c7ab7ba98f7f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Rapha=C3=ABl=20Vinot?= Date: Tue, 8 Jun 2021 10:09:11 -0700 Subject: [PATCH] new: Exclude decayed attributes in search Fix #753 --- pymisp/api.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/pymisp/api.py b/pymisp/api.py index 0b8bdfc..e515f24 100644 --- a/pymisp/api.py +++ b/pymisp/api.py @@ -2317,6 +2317,7 @@ class PyMISP: include_correlations: Optional[bool] = None, includeCorrelations: Optional[bool] = None, include_decay_score: Optional[bool] = None, includeDecayScore: Optional[bool] = None, object_name: Optional[str] = None, + exclude_decayed: Optional[bool] = None, pythonify: Optional[bool] = False, **kwargs) -> Union[Dict, str, List[Union[MISPEvent, MISPAttribute, MISPObject]]]: '''Search in the MISP instance @@ -2356,6 +2357,7 @@ class PyMISP: :param include_decay_score: Include the decay score at attribute level. :param include_correlations: [JSON Only - attribute] Include the correlations of the matching attributes. :param object_name: [objects controller only] Search for objects with that name + :param exclude_decayed: [attributes controller only] Exclude the decayed attributes from the response :param pythonify: Returns a list of PyMISP Objects instead of the plain json output. Warning: it might use a lot of RAM Deprecated: @@ -2455,6 +2457,7 @@ class PyMISP: query['includeDecayScore'] = self._make_misp_bool(include_decay_score) query['includeCorrelations'] = self._make_misp_bool(include_correlations) query['object_name'] = object_name + query['excludeDecayed'] = self._make_misp_bool(exclude_decayed) url = urljoin(self.root_url, f'{controller}/restSearch') if return_format == 'stix-xml': response = self._prepare_request('POST', url, data=query, output_type='xml')