MISP
/
mail_to_misp
mirror of https://github.com/MISP/mail_to_misp
2
0
Fork 0
Code Issues Releases Wiki Activity

fixed a bug with upload_sample()

slight_refactoring
Sascha Rommelfangen 2017-12-21 10:51:55 +01:00
parent 5a24782f11
commit cbe35f8b1a
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
mail_to_misp.py
View File

@ -164,7 +164,7 @@ for removeword in removelist:
email_subject = re.sub(removeword, "", email_subject) email_subject = re.sub(removeword, "", email_subject)
def init(url, key): def init(url, key):
return PyMISP(url, key, misp_verifycert, 'json') return PyMISP(url, key, misp_verifycert, 'json', debug=True)
# Evaluate classification # Evaluate classification
@ -313,11 +313,13 @@ if stdin_used:
_, output_path = tempfile.mkstemp() _, output_path = tempfile.mkstemp()
output = open(output_path, 'wb') output = open(output_path, 'wb')
output.write(part.get_payload(decode=True)) output.write(part.get_payload(decode=True))
output.close()
attachment = part.get_payload(decode=True) attachment = part.get_payload(decode=True)
if debug:
syslog.syslog(str(attachment)[:200])
event_id = misp_event.id event_id = misp_event.id
misp.upload_sample(filename, output_path, event_id, distribution=None, to_ids=True) misp.upload_sample(filename, output_path, event_id, distribution=None, to_ids=True)
file_hash = hashlib.sha256(open(output_path, 'rb').read()).hexdigest() file_hash = hashlib.sha256(open(output_path, 'rb').read()).hexdigest()
sight(sighting, file_hash) sight(sighting, file_hash)
output.close()
syslog.syslog("Job finished.") syslog.syslog("Job finished.")