MISP
/
misp-modules
mirror of https://github.com/MISP/misp-modules
2
0
Fork 0
Code Issues Releases Wiki Activity

Update yeti.py 

change relation type and misp event init
pull/488/head
Sebdraven 2021-03-19 11:15:27 +01:00
parent 0618e288d3
commit c9bc97c9f9
1 changed files with 9 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
misp_modules/modules/expansion/yeti.py
View File

@ -69,7 +69,7 @@ class Yeti():
obs = self.search(self.attribute['value'])
values = []
types = []
self.misp_event.add_attribute(**self.attribute)
for obs_to_add in self.get_neighboors(obs['id']):
object_misp = self.get_object(obs_to_add)
self.misp_event.add_object(object_misp)
@ -90,8 +90,13 @@ class Yeti():
def __get_attribute(self, obj_yeti):
typ_attribute = self.misp_mapping[obj_yeti['type']]
attr_misp = {'type':typ_attribute, 'value': obj_yeti['value'],
'object_relation': 'pdns'}
attr_misp = {'type':typ_attribute, 'value': obj_yeti['value']}
if typ_attribute == 'ip-src' or typ_attribute =='ip-dst':
attr_misp['object_relation'] = 'ip'
elif 'domain' == typ_attribute:
attr_misp['object_relation'] = 'domain'
else:
attr_misp['object_relation'] = None
return attr_misp
def handler(q=False):