mirror of https://github.com/MISP/misp-modules
Removed extraneous comments and unused imports
parent
dc4c09f751
commit
717be2b859
|
@ -1,9 +1,6 @@
|
||||||
"""
|
"""
|
||||||
Export module for converting MISP events into Endgame EQL queries
|
Export module for converting MISP events into Endgame EQL queries
|
||||||
"""
|
"""
|
||||||
import base64
|
|
||||||
import csv
|
|
||||||
import io
|
|
||||||
import json
|
import json
|
||||||
import logging
|
import logging
|
||||||
|
|
||||||
|
@ -16,16 +13,10 @@ moduleinfo = {
|
||||||
"module-type": ["expansion"]
|
"module-type": ["expansion"]
|
||||||
}
|
}
|
||||||
|
|
||||||
# Map of MISP fields => ThreatConnect fields
|
# Map of MISP fields => Endgame fields
|
||||||
fieldmap = {
|
fieldmap = {
|
||||||
# "domain": "Host",
|
|
||||||
# "domain|ip": "Host|Address",
|
|
||||||
# "hostname": "hostname",
|
|
||||||
"ip-src": "source_address",
|
"ip-src": "source_address",
|
||||||
"ip-dst": "destination_address",
|
"ip-dst": "destination_address",
|
||||||
# "ip-src|port": "Address",
|
|
||||||
# "ip-dst|port": "Address",
|
|
||||||
# "url": "URL",
|
|
||||||
"filename": "file_name"
|
"filename": "file_name"
|
||||||
}
|
}
|
||||||
|
|
||||||
|
@ -80,13 +71,6 @@ def introspection():
|
||||||
Output
|
Output
|
||||||
Dictionary of supported MISP attributes
|
Dictionary of supported MISP attributes
|
||||||
"""
|
"""
|
||||||
# modulesetup = {
|
|
||||||
# "responseType": "application/txt",
|
|
||||||
# "outputFileExtension": "txt",
|
|
||||||
# "userConfig": {},
|
|
||||||
# "inputSource": []
|
|
||||||
# }
|
|
||||||
# return modulesetup
|
|
||||||
return mispattributes
|
return mispattributes
|
||||||
|
|
||||||
|
|
||||||
|
@ -97,5 +81,4 @@ def version():
|
||||||
Output
|
Output
|
||||||
moduleinfo: metadata output containing all potential configuration values
|
moduleinfo: metadata output containing all potential configuration values
|
||||||
"""
|
"""
|
||||||
#moduleinfo["config"] = moduleconfig
|
|
||||||
return moduleinfo
|
return moduleinfo
|
||||||
|
|
|
@ -2,7 +2,6 @@
|
||||||
Export module for converting MISP events into Endgame EQL queries
|
Export module for converting MISP events into Endgame EQL queries
|
||||||
"""
|
"""
|
||||||
import base64
|
import base64
|
||||||
import csv
|
|
||||||
import io
|
import io
|
||||||
import json
|
import json
|
||||||
import logging
|
import logging
|
||||||
|
|
Loading…
Reference in New Issue