MISP
/
misp-modules
mirror of https://github.com/MISP/misp-modules
2
0
Fork 0
Code Issues Releases Wiki Activity

fix: [crowdsec] Kepping the original attribute used to query the module unchanged

pull/617/head
Christian Studer 2023-05-26 15:14:44 +02:00
parent 52ce2cf043
commit 51339c2a82
No known key found for this signature in database
GPG Key ID: 6BBED1B63A6D639F
1 changed files with 0 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
misp_modules/modules/expansion/crowdsec.py
View File

@ -80,7 +80,6 @@ def _handler_v2(request_data):
) )
tag = f'crowdsec:behavior="{behavior["name"]}"' tag = f'crowdsec:behavior="{behavior["name"]}"'
ip_attribute.add_tag(tag) ip_attribute.add_tag(tag)
misp_attribute.add_tag(tag)
for feature, values in crowdsec_cti['classifications'].items(): for feature, values in crowdsec_cti['classifications'].items():
field = feature[:-1] field = feature[:-1]
for value in values: for value in values:
@ -89,7 +88,6 @@ def _handler_v2(request_data):
) )
tag = f'crowdsec:{field}="{value["name"]}"' tag = f'crowdsec:{field}="{value["name"]}"'
ip_attribute.add_tag(tag) ip_attribute.add_tag(tag)
misp_attribute.add_tag(tag)
crowdsec_context_object.add_attribute( crowdsec_context_object.add_attribute(
"attack-details", "attack-details",
", ".join( ", ".join(