diff --git a/misp_modules/modules/expansion/ipgeolocation.py b/misp_modules/modules/expansion/ipgeolocation.py index 783f53f..45719bb 100644 --- a/misp_modules/modules/expansion/ipgeolocation.py +++ b/misp_modules/modules/expansion/ipgeolocation.py @@ -53,6 +53,7 @@ def handler(q=False): mapping = get_mapping() for field, relation in mapping.items(): ipObject.add_attribute(relation, query[field]) + ipObject.add_reference(input_attribute.uuid, 'locates') misp_event.add_object(ipObject) # Return the results in MISP format event = json.loads(misp_event.to_json()) @@ -61,9 +62,6 @@ def handler(q=False): } # return {'error' : 'Completed Response'} - - - def get_mapping(): return { 'isp':'ISP',