MISP
/
misp-galaxy
mirror of https://github.com/MISP/misp-galaxy
2
0
Fork 0
Code Issues Releases Wiki Activity

Add [tidal] relations for associated objects

pull/941/head
niclas 2024-02-26 09:40:42 +01:00
parent 5062c61620
commit a0f3ed5873
1 changed files with 22 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

30
tools/tidal-api/models/cluster.py
View File

@ -215,15 +215,22 @@ class GroupCluster(Cluster):
) )
for associated_group in entry.get("associated_groups"): for associated_group in entry.get("associated_groups"):
meta = AssociatedGroupsMeta( associated_meta = AssociatedGroupsMeta(
id=associated_group.get("id"), id=associated_group.get("id"),
owner_id=associated_group.get("owner_id"), owner_id=associated_group.get("owner_id"),
owner=associated_group.get("owner_name"), owner=associated_group.get("owner_name"),
) )
associated_related = []
associated_related.append(
{
"dest-uuid": entry.get("id"),
"type": "similar",
}
)
value = ClusterValue( value = ClusterValue(
description=associated_group.get("description"), description=associated_group.get("description"),
meta=meta, meta=associated_meta,
related=[], related=associated_related,
uuid=associated_group.get("associated_group_id"), uuid=associated_group.get("associated_group_id"),
value=associated_group.get("name"), value=associated_group.get("name"),
) )
@ -302,15 +309,22 @@ class SoftwareCluster(Cluster):
) )
for associated_software in entry.get("associated_software"): for associated_software in entry.get("associated_software"):
meta = AssociatedSoftwareMeta( associated_meta = AssociatedSoftwareMeta(
id=associated_software.get("id"), id=associated_software.get("id"),
owner_id=associated_software.get("owner_id"), owner_id=associated_software.get("owner_id"),
owner=associated_software.get("owner_name"), owner=associated_software.get("owner_name"),
) )
associated_related = []
associated_related.append(
{
"dest-uuid": entry.get("id"),
"type": "similar",
}
)
value = ClusterValue( value = ClusterValue(
description=associated_software.get("description"), description=associated_software.get("description"),
meta=meta, meta=associated_meta,
related=[], related=associated_related,
uuid=associated_software.get("associated_software_id"), uuid=associated_software.get("associated_software_id"),
value=associated_software.get("name"), value=associated_software.get("name"),
) )
@ -363,7 +377,7 @@ class TechniqueCluster(Cluster):
) )
for sub_technique in entry.get("sub_technique"): for sub_technique in entry.get("sub_technique"):
meta = SubTechniqueMeta( sub_meta = SubTechniqueMeta(
source=sub_technique.get("source"), source=sub_technique.get("source"),
technique_attack_id=sub_technique.get("technique_attack_id"), technique_attack_id=sub_technique.get("technique_attack_id"),
) )
@ -377,7 +391,7 @@ class TechniqueCluster(Cluster):
) )
sub_value = ClusterValue( sub_value = ClusterValue(
description=sub_technique.get("description"), description=sub_technique.get("description"),
meta=meta, meta=sub_meta,
related=sub_related, related=sub_related,
uuid=sub_technique.get("id"), uuid=sub_technique.get("id"),
value=sub_technique.get("name"), value=sub_technique.get("name"),