MISP
/
misp-modules
mirror of https://github.com/MISP/misp-modules
2
0
Fork 0
Code Issues Releases Wiki Activity

Merge pull request #364 from cudeso/master 

2nd fix for VT Public module
pull/367/head
Christian Studer 2020-01-21 10:01:54 +01:00 committed by GitHub
parent a88f19942f 036933ea14
commit c0bcb5ab4a
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
misp_modules/modules/expansion/virustotal_public.py
View File

@ -85,8 +85,10 @@ class DomainQuery(VirusTotalParser):
whois_object = MISPObject(whois) whois_object = MISPObject(whois)
whois_object.add_attribute('text', type='text', value=query_result[whois]) whois_object.add_attribute('text', type='text', value=query_result[whois])
self.misp_event.add_object(**whois_object) self.misp_event.add_object(**whois_object)
siblings = (self.parse_siblings(domain) for domain in query_result['domain_siblings']) if 'domain_siblings' in query_result:
self.parse_resolutions(query_result['resolutions'], query_result['subdomains'], siblings) siblings = (self.parse_siblings(domain) for domain in query_result['domain_siblings'])
if 'subdomains' in query_result:
self.parse_resolutions(query_result['resolutions'], query_result['subdomains'], siblings)
self.parse_urls(query_result) self.parse_urls(query_result)
def parse_siblings(self, domain): def parse_siblings(self, domain):