MISP
/
misp-modules
mirror of https://github.com/MISP/misp-modules
2
0
Fork 0
Code Issues Releases Wiki Activity

fix: Testing if there is some screenshot data before trying to fetch it

pull/322/head
chrisr3d 2019-07-25 17:43:11 +02:00
parent e2a0f27d75
commit 4c8fe9d8ef
No known key found for this signature in database
GPG Key ID: 6BBED1B63A6D639F
1 changed files with 6 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
misp_modules/lib/joe_parser.py
View File

@ -146,7 +146,9 @@ class JoeParser():
relationship_type='initiates')) relationship_type='initiates'))
def parse_screenshot(self): def parse_screenshot(self):
screenshotdata = self.data['behavior']['screenshotdata']['interesting']['$'] screenshotdata = self.data['behavior']['screenshotdata']
if screenshotdata:
screenshotdata = screenshotdata['interesting']['$']
attribute = {'type': 'attachment', 'value': 'screenshot.jpg', attribute = {'type': 'attachment', 'value': 'screenshot.jpg',
'data': screenshotdata, 'disable_correlation': True} 'data': screenshotdata, 'disable_correlation': True}
self.misp_event.add_attribute(**attribute) self.misp_event.add_attribute(**attribute)