MISP
/
misp-modules
mirror of https://github.com/MISP/misp-modules
2
0
Fork 0
Code Issues Releases Wiki Activity

add as number with onyphe

pull/193/head
Sebdraven 2018-06-08 18:31:08 +02:00
parent cad35b5332
commit 04032d110c
1 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
misp_modules/modules/expansion/onyphe.py
View File

@ -55,14 +55,17 @@ def handle_expansion(api, ip, misperrors):
categories = list(set([item['@category'] for item in result['results']])) categories = list(set([item['@category'] for item in result['results']]))
result_filtered = {"results": []} result_filtered = {"results": []}
urls_pasties = [] urls_pasties = []
asn_list = []
for r in result['results']: for r in result['results']:
if r['@category'] == 'pastries': if r['@category'] == 'pastries':
if r['@type'] == 'pastebin': if r['@type'] == 'pastebin':
urls_pasties.append('https://pastebin.com/raw/%s' % r['key']) urls_pasties.append('https://pastebin.com/raw/%s' % r['key'])
elif r['@category'] == 'synscan':
ans_list = r['asn']
result_filtered['results'].append({'types': ['url'], 'values': urls_pasties}) result_filtered['results'].append({'types': ['url'], 'values': urls_pasties})
result_filtered['results'].append({'types': ['AS'], 'values': asn_list})
return result_filtered return result_filtered