diff --git a/misp_modules/modules/expansion/virustotal_public.py b/misp_modules/modules/expansion/virustotal_public.py index f95b8e4..ed7fd0e 100644 --- a/misp_modules/modules/expansion/virustotal_public.py +++ b/misp_modules/modules/expansion/virustotal_public.py @@ -76,7 +76,7 @@ class DomainQuery(VirusTotalParser): def parse_report(self, query_result): hash_type = 'sha256' whois = 'whois' - for feature_type in ('referrer', 'downloaded'): + for feature_type in ('referrer', 'downloaded', 'communicating'): for feature in ('undetected_{}_samples', 'detected_{}_samples'): for sample in query_result[feature.format(feature_type)]: self.misp_event.add_attribute(hash_type, sample[hash_type])