From 41bbbeddfb1603ecebc138b1835138f0de71534a Mon Sep 17 00:00:00 2001 From: chrisr3d Date: Thu, 25 Jul 2019 17:44:32 +0200 Subject: [PATCH] fix: Testing if file & registry activities fields exist before trying to parse it --- misp_modules/lib/joe_parser.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/misp_modules/lib/joe_parser.py b/misp_modules/lib/joe_parser.py index 4b4c4c1..d980f4e 100644 --- a/misp_modules/lib/joe_parser.py +++ b/misp_modules/lib/joe_parser.py @@ -167,7 +167,8 @@ class JoeParser(): process_object.add_attribute('start-time', **{'type': 'datetime', 'value': start_time}) self.misp_event.add_object(**process_object) for field, to_call in process_activities.items(): - to_call(process_object.uuid, process[field]) + if process.get(field): + to_call(process_object.uuid, process[field]) self.references[self.analysisinfo_uuid].append(dict(referenced_uuid=process_object.uuid, relationship_type='calls')) self.process_references[(general['targetid'], general['path'])] = process_object.uuid