fix: Returning tags & galaxies with results

- Tags may exist with the current version of the
  parser
- Galaxies are not yet expected from the parser,
  nevertheless the principle is we want to return
  them as well if ever we have some galaxies from
  parsing a JoeSandbox report. Can be removed if
  we never galaxies at all
pull/306/head
chrisr3d 3 years ago
parent b52e17fa8d
commit de966eac51
No known key found for this signature in database
GPG Key ID: 6BBED1B63A6D639F
  1. 2
      misp_modules/lib/joe_parser.py

@ -317,7 +317,7 @@ class JoeParser():
if self.references:
self.build_references()
event = json.loads(self.misp_event.to_json())['Event']
self.results = {key: event[key] for key in ('Attribute', 'Object') if (key in event and event[key])}
self.results = {key: event[key] for key in ('Attribute', 'Object', 'Tag', 'Galaxy') if (key in event and event[key])}
@staticmethod
def parse_timestamp(timestamp):

Loading…
Cancel
Save