MISP
/
misp-modules
mirror of https://github.com/MISP/misp-modules
2
0
Fork 0
Code Issues Releases Wiki Activity

WIP

pull/679/head
Daniel Pascual 2024-08-08 16:58:17 +02:00
parent f6305f4041
commit d720c38b0f
1 changed files with 7 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
misp_modules/modules/expansion/google_threat_intelligence.py
View File

@ -117,19 +117,20 @@ class GoogleThreatIntelligenceParser:
type='text', type='text',
value=ratio, value=ratio,
disable_correlation=True) disable_correlation=True)
report_dict = report.to_dict()
gti_object.add_attribute( gti_object.add_attribute(
'threat-score', type='text', 'threat-score', type='text',
value=get_key( value=get_key(report_dict,
report, 'attributes.gti_assessment.threat_score.value')) 'attributes.gti_assessment.threat_score.value'))
gti_object.add_attribute( gti_object.add_attribute(
'verdict', type='text', 'verdict', type='text',
value=get_key( value=get_key(report_dict,
report, 'attributes.gti_assessment.verdict.value').replace( 'attributes.gti_assessment.verdict.value').replace(
'VERDICT_', '')) 'VERDICT_', ''))
gti_object.add_attribute( gti_object.add_attribute(
'severity', type='text', 'severity', type='text',
value=get_key( value=get_key(report_dict,
report, 'attributes.gti_assessment.severity.value').replace( 'attributes.gti_assessment.severity.value').replace(
'SEVERITY_', '')) 'SEVERITY_', ''))
self.misp_event.add_object(**gti_object) self.misp_event.add_object(**gti_object)
return gti_object.uuid return gti_object.uuid