mirror of https://github.com/MISP/misp-modules
new: [action module] samples added for testing
parent
0c0b40e26f
commit
cac0c19eed
|
@ -1 +1 @@
|
|||
__all__ = ['testaction']
|
||||
__all__ = ['testaction', 'blockaction', 'writeaction']
|
||||
|
|
|
@ -0,0 +1,63 @@
|
|||
import json
|
||||
import base64
|
||||
|
||||
misperrors = {'error': 'Error'}
|
||||
|
||||
# config fields that your code expects from the site admin
|
||||
moduleconfig = {
|
||||
|
||||
};
|
||||
|
||||
# blocking modules break the exection of the chain of actions (such as publishing)
|
||||
blocking = True
|
||||
|
||||
# returns either "boolean" or "data"
|
||||
# Boolean is used to simply signal that the execution has finished.
|
||||
# For blocking modules the actual boolean value determines whether we break execution
|
||||
returns = 'boolean'
|
||||
|
||||
|
||||
# the list of hook-points that it can hook
|
||||
hooks = ['publish']
|
||||
|
||||
|
||||
moduleinfo = {'version': '0.1', 'author': 'Andras Iklody',
|
||||
'description': 'This module is merely a test, always returning true. Triggers on event publishing.',
|
||||
'module-type': ['action']}
|
||||
|
||||
|
||||
def handler(q=False):
|
||||
if q is False:
|
||||
return False
|
||||
r = {"data": False, "error": "Barf."}
|
||||
return r
|
||||
|
||||
|
||||
def introspection():
|
||||
modulesetup = {}
|
||||
try:
|
||||
responseType
|
||||
modulesetup['responseType'] = responseType
|
||||
except NameError:
|
||||
pass
|
||||
try:
|
||||
inputSource
|
||||
modulesetup['resultType'] = resultType
|
||||
except NameError:
|
||||
pass
|
||||
try:
|
||||
hooks
|
||||
modulesetup['hooks'] = hooks
|
||||
except NameError:
|
||||
pass
|
||||
try:
|
||||
hooks
|
||||
modulesetup['blocking'] = blocking
|
||||
except NameError:
|
||||
pass
|
||||
return modulesetup
|
||||
|
||||
|
||||
def version():
|
||||
moduleinfo['config'] = moduleconfig
|
||||
return moduleinfo
|
|
@ -0,0 +1,68 @@
|
|||
import json
|
||||
import base64
|
||||
|
||||
misperrors = {'error': 'Error'}
|
||||
|
||||
# config fields that your code expects from the site admin
|
||||
moduleconfig = {
|
||||
|
||||
};
|
||||
|
||||
# blocking modules break the exection of the chain of actions (such as publishing)
|
||||
blocking = False
|
||||
|
||||
# returns either "boolean" or "data"
|
||||
# Boolean is used to simply signal that the execution has finished.
|
||||
# For blocking modules the actual boolean value determines whether we break execution
|
||||
returns = 'boolean'
|
||||
|
||||
|
||||
# the list of hook-points that it can hook
|
||||
hooks = ['publish']
|
||||
|
||||
|
||||
moduleinfo = {'version': '0.1', 'author': 'Andras Iklody',
|
||||
'description': 'This module is merely a test, writing a tmp file with the event info.',
|
||||
'module-type': ['action']}
|
||||
|
||||
|
||||
def handler(q=False):
|
||||
if q is False:
|
||||
return False
|
||||
request = json.loads(q)
|
||||
data = request["data"]
|
||||
f = open("/var/www/MISP7/app/tmp/output.txt","w+")
|
||||
f.write(data["Event"]["info"])
|
||||
f.close()
|
||||
r = {"data": True}
|
||||
return r
|
||||
|
||||
|
||||
def introspection():
|
||||
modulesetup = {}
|
||||
try:
|
||||
responseType
|
||||
modulesetup['responseType'] = responseType
|
||||
except NameError:
|
||||
pass
|
||||
try:
|
||||
inputSource
|
||||
modulesetup['resultType'] = resultType
|
||||
except NameError:
|
||||
pass
|
||||
try:
|
||||
hooks
|
||||
modulesetup['hooks'] = hooks
|
||||
except NameError:
|
||||
pass
|
||||
try:
|
||||
hooks
|
||||
modulesetup['blocking'] = blocking
|
||||
except NameError:
|
||||
pass
|
||||
return modulesetup
|
||||
|
||||
|
||||
def version():
|
||||
moduleinfo['config'] = moduleconfig
|
||||
return moduleinfo
|
Loading…
Reference in New Issue