MISP
/
mail_to_misp
mirror of https://github.com/MISP/mail_to_misp
2
0
Fork 0
Code Issues Releases Wiki Activity

some "fixes"

pull/38/head
Sascha Rommelfangen 2019-07-18 12:46:31 +02:00
parent f19006e56d
commit 96594e97ec
2 changed files with 8 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
mail2misp/mail2misp.py
View File

@ -246,7 +246,7 @@ class Mail2MISP():
if self.debug:
syslog.syslog(domainname)
if domainname in self.config.internallist: # Add link to internal reference
if domainname.decode('utf-8') in self.config.internallist: # Add link to internal reference
attribute = self.misp_event.add_attribute('link', entry, category='Internal reference',
to_ids=False, enforceWarninglist=False)
if email_object:
@ -368,14 +368,15 @@ class Mail2MISP():
self.sighting(value, source)
return event
def update_event(self, event_id=None):
def update_event(self, eid=None):
'''Update event on the remote MISP instance.'''
if self.offline:
return self.misp_event.to_json()
event = self.misp.update_event(self.misp_event, event_id=event_id)
if self.config.sighting:
for value, source in self.sightings_to_add:
self.sighting(value, source)
event = self.misp.update_event(eid, self.misp_event)
syslog.syslog(str(event))
#if self.config.sighting:
# for value, source in self.sightings_to_add:
# self.sighting(value, source)
return event

3
mail_to_misp.py
View File

@ -68,8 +68,7 @@ if __name__ == '__main__':
mail2misp.process_body_iocs()
if args.event:
misp_event = args.event
mail2misp.update_event(event_id=misp_event)
mail2misp.update_event(eid=args.event)
else:
mail2misp.add_event()
syslog.syslog("Job finished.")