MISP
/
misp-modules
mirror of https://github.com/MISP/misp-modules
2
0
Fork 0
Code Issues Releases Wiki Activity

change history dns

pull/208/head
Sebdraven 2018-07-11 11:47:10 +02:00
parent 560dacbf7e
commit 64e7f9c8b6
1 changed files with 15 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
misp_modules/modules/expansion/dnstrails.py
View File

@ -396,11 +396,23 @@ def __history_dns(results, domain, type_serv, service):
if 'records' in results:
for record in results['records']:
if 'values' in record:
for item in record['values']:
print(item)
values = record['values']
if type(values) is list:
for item in record['values']:
r.append(
{'types': ['domain|ip'],
'values': [item[type_serv]],
'categories': ['Network activity'],
'comment': 'history %s of %s last seen: %s first seen: %s' %
(service, domain, record['last_seen'],
record['first_seen'])
}
)
else:
r.append(
{'types': ['domain|ip'],
'values': [item[type_serv]],
'values': [values[type_serv]],
'categories': ['Network activity'],
'comment': 'history %s of %s last seen: %s first seen: %s' %
(service, domain, record['last_seen'],