mirror of https://github.com/MISP/misp-galaxy
23 lines
815 B
Python
23 lines
815 B
Python
|
#!/usr/bin/env python3
|
||
|
|
# -*- coding: utf-8 -*-
|
||
|
|
|
||
|
|
import json
|
||
|
|
import argparse
|
||
|
|
import uuid
|
||
|
|
|
||
|
|
parser = argparse.ArgumentParser(description='Add missing attribution-confidence in threat-actor clusters')
|
||
|
|
parser.add_argument("-f", "--filename", required=True, help="name of the cluster")
|
||
|
|
args = parser.parse_args()
|
||
|
|
|
||
|
|
with open(args.filename) as json_file:
|
||
|
|
data = json.load(json_file)
|
||
|
|
json_file.close()
|
||
|
|
|
||
|
|
for value in data['values']:
|
||
|
|
if value.get('meta'):
|
||
|
|
if not value.get('meta').get('attribution-confidence') and (value.get('meta').get('cfr-suspected-state-sponsor') or value.get('meta').get('country')):
|
||
|
|
value.get('meta')['attribution-confidence'] = 50
|
||
|
|
|
||
|
|
with open(args.filename, 'w') as json_file:
|
||
|
|
json.dump(data, json_file, indent=2, sort_keys=True, ensure_ascii=False)
|