Browse Source

Quick fix for everything getting classified as external analysis

With the OR statement everything gets classified as external analysis when not running with --urlsonly.
pull/49/head
eidurorng 9 months ago
parent
commit
5ccb365f93
  1. 2
      mail2misp/mail2misp.py

2
mail2misp/mail2misp.py

@ -284,7 +284,7 @@ class Mail2MISP():
to_ids=False, enforceWarninglist=False)
if email_object:
email_object.add_reference(attribute.uuid, 'contains')
elif domainname in self.config.externallist or self.urlsonly is False: # External analysis
elif domainname in self.config.externallist and self.urlsonly is False: # External analysis
attribute = self.misp_event.add_attribute('link', entry, category='External analysis',
to_ids=False, enforceWarninglist=False)
if email_object:

Loading…
Cancel
Save