MISP
/
misp-modules
mirror of https://github.com/MISP/misp-modules
2
0
Fork 0
Code Issues Releases Wiki Activity

Merge pull request #425 from elhoim/elhoim-patch-1 

Disable correlation for detection-ratio attribute in virustotal.py
pull/426/head
Alexandre Dulaunoy 2020-08-24 10:32:11 +02:00 committed by GitHub
parent 7021a0d657 b5d7c9c7a3
commit c1815beff2
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
misp_modules/modules/expansion/virustotal.py
View File

@ -175,7 +175,7 @@ class VirusTotalParser(object):
vt_object = MISPObject('virustotal-report')
vt_object.add_attribute('permalink', type='link', value=query_result['permalink'])
detection_ratio = '{}/{}'.format(query_result['positives'], query_result['total'])
vt_object.add_attribute('detection-ratio', type='text', value=detection_ratio)
vt_object.add_attribute('detection-ratio', type='text', value=detection_ratio, disable_correlation=True)
self.misp_event.add_object(**vt_object)
return vt_object.uuid