MISP
/
misp-modules
mirror of https://github.com/MISP/misp-modules
2
0
Fork 0
Code Issues Releases Wiki Activity

chg: [joe] skip not existing system in behavior

pull/560/head
Alexandre Dulaunoy 2022-03-05 15:24:29 +01:00
parent 0295268c43
commit db902275b3
No known key found for this signature in database
GPG Key ID: 09E2CD4944E6CBCD
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
misp_modules/lib/joe_parser.py
View File

@ -167,6 +167,8 @@ class JoeParser():
self.misp_event.add_attribute(**attribute) self.misp_event.add_attribute(**attribute)
def parse_system_behavior(self): def parse_system_behavior(self):
if not 'system' in self.data['behavior']:
return
system = self.data['behavior']['system'] system = self.data['behavior']['system']
if system.get('processes'): if system.get('processes'):
process_activities = {'fileactivities': self.parse_fileactivities, process_activities = {'fileactivities': self.parse_fileactivities,