From c32d7722757beb5fc44fe32da1fd32553a55f29f Mon Sep 17 00:00:00 2001 From: Usama015 Date: Tue, 20 Jun 2023 14:26:53 +0500 Subject: [PATCH] updated --- .../modules/expansion/ipgeolocation.py | 19 +++++++++++++++++-- 1 file changed, 17 insertions(+), 2 deletions(-) diff --git a/misp_modules/modules/expansion/ipgeolocation.py b/misp_modules/modules/expansion/ipgeolocation.py index 45719bb..0451eb3 100644 --- a/misp_modules/modules/expansion/ipgeolocation.py +++ b/misp_modules/modules/expansion/ipgeolocation.py @@ -15,6 +15,22 @@ moduleinfo = { } moduleconfig = ['apiKey'] +_IPGEO_MAPPING ={ + 'isp':'ISP', + 'asn':'asn', + 'city':'city', + 'country_name':'country', + 'country_code2':'country-code', + 'latitude':'latitude', + 'longitude':'longitude', + 'organization':'organization', + 'continent_name':'region', + 'continent_code':'region-code', + 'state_prov':'state', + 'zipcode':'zipcode', + 'ip':'ip-src' + } + def handler(q=False): # Input checks @@ -50,8 +66,7 @@ def handler(q=False): ipObject = MISPObject('ip-api-address') # Correct - mapping = get_mapping() - for field, relation in mapping.items(): + for field, relation in _IPGEO_MAPPING.items(): ipObject.add_attribute(relation, query[field]) ipObject.add_reference(input_attribute.uuid, 'locates') misp_event.add_object(ipObject)