From 0650126d6a8117efb03ff9ae2c3f21d1911a442d Mon Sep 17 00:00:00 2001
From: Jesse Hedden <jhedden@trustar.co>
Date: Tue, 10 Nov 2020 17:20:03 -0800
Subject: [PATCH] fixed typo causing firstSeen and lastSeen to not be pulled
 from enrichment data

---
 misp_modules/modules/expansion/trustar_enrich.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/misp_modules/modules/expansion/trustar_enrich.py b/misp_modules/modules/expansion/trustar_enrich.py
index ab472af..1724441 100644
--- a/misp_modules/modules/expansion/trustar_enrich.py
+++ b/misp_modules/modules/expansion/trustar_enrich.py
@@ -39,7 +39,7 @@ class TruSTARParser:
 
     # Relevant fields from each TruSTAR endpoint
     SUMMARY_FIELDS = ["severityLevel", "source", "score", "attributes"]
-    METADATA_FIELDS = ["sightings", "first_seen", "last_seen", "tags"]
+    METADATA_FIELDS = ["sightings", "firstSeen", "lastSeen", "tags"]
 
     REPORT_BASE_URL = "https://station.trustar.co/constellation/reports/{}"