From f73b961330f96b65b85bb7de7ff6af80724a12b6 Mon Sep 17 00:00:00 2001 From: "Dermott, Scott" Date: Thu, 7 Apr 2022 14:44:22 +0100 Subject: [PATCH] * Fix for @chrisr3d - [joesandbox_query] Changed the import_pe param to `import_executable` --- misp_modules/modules/expansion/joesandbox_query.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/misp_modules/modules/expansion/joesandbox_query.py b/misp_modules/modules/expansion/joesandbox_query.py index f90d5db..e303512 100644 --- a/misp_modules/modules/expansion/joesandbox_query.py +++ b/misp_modules/modules/expansion/joesandbox_query.py @@ -21,7 +21,7 @@ def handler(q=False): apiurl = request['config'].get('apiurl') or 'https://jbxcloud.joesecurity.org/api' apikey = request['config'].get('apikey') parser_config = { - "import_pe": request["config"].get('import_executable', "false") == "true", + "import_executable": request["config"].get('import_executable', "false") == "true", "mitre_attack": request["config"].get('import_mitre_attack', "false") == "true", }