fixed indent

pull/409/head
Jesse Hedden 2020-06-25 15:22:54 -07:00
parent 2d31b4e037
commit 9e1bc5681b
1 changed files with 32 additions and 29 deletions

View File

@ -91,40 +91,43 @@ class TruSTARParser:
trustar_obj.add_attribute("REPORT_LINK", attribute_type="link", value=link) trustar_obj.add_attribute("REPORT_LINK", attribute_type="link", value=link)
self.misp_event.add_object(**trustar_obj) self.misp_event.add_object(**trustar_obj)
def handler(q=False):
"""
MISP handler function. A user's API key and secret will be retrieved from the MISP
request and used to create a TruSTAR API client. If enclave IDs are provided, only
those enclaves will be queried for data. Otherwise, all of the enclaves a user has
access to will be queried.
"""
if q is False: def handler(q=False):
return False """
MISP handler function. A user's API key and secret will be retrieved from the MISP
request and used to create a TruSTAR API client. If enclave IDs are provided, only
those enclaves will be queried for data. Otherwise, all of the enclaves a user has
access to will be queried.
"""
request = json.loads(q) if q is False:
return False
config = request.get('config', {}) request = json.loads(q)
if not config.get('user_api_key') or not config.get('user_api_secret'):
misperrors['error'] = "Your TruSTAR API key and secret are required for indicator enrichment."
return misperrors
attribute = request['attribute'] config = request.get('config', {})
trustar_parser = TruSTARParser(attribute, config) if not config.get('user_api_key') or not config.get('user_api_secret'):
misperrors['error'] = "Your TruSTAR API key and secret are required for indicator enrichment."
return misperrors
try: attribute = request['attribute']
summaries = list( trustar_parser = TruSTARParser(attribute, config)
trustar_parser.ts_client.get_indicator_summaries([attribute['value']], page_size=MAX_PAGE_SIZE))
except Exception as e:
misperrors['error'] = "Unable to retrieve TruSTAR summary data: {}".format(e)
return misperrors
trustar_parser.parse_indicator_summary(summaries) try:
return trustar_parser.get_results() summaries = list(
trustar_parser.ts_client.get_indicator_summaries([attribute['value']], page_size=MAX_PAGE_SIZE))
except Exception as e:
misperrors['error'] = "Unable to retrieve TruSTAR summary data: {}".format(e)
return misperrors
def introspection(): trustar_parser.parse_indicator_summary(summaries)
return mispattributes return trustar_parser.get_results()
def version():
moduleinfo['config'] = moduleconfig def introspection():
return moduleinfo return mispattributes
def version():
moduleinfo['config'] = moduleconfig
return moduleinfo