mirror of https://github.com/MISP/misp-modules
fix: Returning tags & galaxies with results
- Tags may exist with the current version of the parser - Galaxies are not yet expected from the parser, nevertheless the principle is we want to return them as well if ever we have some galaxies from parsing a JoeSandbox report. Can be removed if we never galaxies at allpull/306/head
parent
b52e17fa8d
commit
de966eac51
|
@ -317,7 +317,7 @@ class JoeParser():
|
|||
if self.references:
|
||||
self.build_references()
|
||||
event = json.loads(self.misp_event.to_json())['Event']
|
||||
self.results = {key: event[key] for key in ('Attribute', 'Object') if (key in event and event[key])}
|
||||
self.results = {key: event[key] for key in ('Attribute', 'Object', 'Tag', 'Galaxy') if (key in event and event[key])}
|
||||
|
||||
@staticmethod
|
||||
def parse_timestamp(timestamp):
|
||||
|
|
Loading…
Reference in New Issue