mirror of https://github.com/MISP/PyMISP
32 lines
1.1 KiB
Python
Executable File
32 lines
1.1 KiB
Python
Executable File
#!/usr/bin/env python3
|
|
# -*- coding: utf-8 -*-
|
|
|
|
from pymisp import PyMISP
|
|
from pymisp.tools import EMailObject
|
|
import traceback
|
|
from keys import misp_url, misp_key, misp_verifycert
|
|
import glob
|
|
import argparse
|
|
|
|
|
|
if __name__ == '__main__':
|
|
parser = argparse.ArgumentParser(description='Extract indicators out of binaries and add MISP objects to a MISP instance.')
|
|
parser.add_argument("-e", "--event", required=True, help="Event ID to update.")
|
|
parser.add_argument("-p", "--path", required=True, help="Path to process (expanded using glob).")
|
|
args = parser.parse_args()
|
|
|
|
pymisp = PyMISP(misp_url, misp_key, misp_verifycert, debug=True)
|
|
|
|
for f in glob.glob(args.path):
|
|
try:
|
|
eo = EMailObject(f)
|
|
except Exception as e:
|
|
traceback.print_exc()
|
|
continue
|
|
|
|
if eo:
|
|
template_id = pymisp.get_object_template_id(eo.template_uuid)
|
|
response = pymisp.add_object(args.event, template_id, eo)
|
|
for ref in eo.ObjectReference:
|
|
r = pymisp.add_object_reference(ref)
|