MISP
/
misp-modules
mirror of https://github.com/MISP/misp-modules
2
0
Fork 0
Code Issues Releases Wiki Activity

Now parsing all the transaction attributes

pull/168/head
chrisr3d 2018-02-27 11:08:37 +01:00
parent a02dbd6a8d
commit cad62464c5
No known key found for this signature in database
GPG Key ID: 6BBED1B63A6D639F
1 changed files with 18 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
misp_modules/modules/import_mod/goamlimport.py
View File

@ -88,15 +88,29 @@ class GoAmlParser():
self.misp_event.timestamp = self.dict.get('submission_date')
def itterate(self, tree, aml_type):
elementDict = {}
element_dict = {}
for element in tree:
tag = element.tag
mapping = goAMLobjects.get(aml_type)
if tag in mapping.get('nodes'):
elementDict[tag] = self.itterate(element, tag)
if aml_type == 'transaction':
self.fill_transaction(element, element_dict, tag)
element_dict[tag] = self.itterate(element, tag)
elif tag in mapping.get('leaves'):
elementDict[tag] = element.text
return elementDict
try:
element_dict[goAMLmapping[aml_type][tag]] = element.text
except KeyError:
pass
return element_dict
@staticmethod
def fill_transaction(element, element_dict, tag):
if 't_from' in tag:
element_dict['from-funds-code'] = element.find('from_funds_code').text
element_dict['from-country'] = element.find('from_country').text
if 't_to' in tag:
element_dict['to-funds-code'] = element.find('to_funds_code').text
element_dict['to-country'] = element.find('to_country').text
def handler(q=False):
if q is False: