From fe778dd57616616e0fb0a46b025e3110fc1b76b8 Mon Sep 17 00:00:00 2001 From: Alexandre Dulaunoy Date: Thu, 11 May 2023 15:18:26 +0200 Subject: [PATCH] fix: [crowdsec] set default version and expansion added --- misp_modules/modules/expansion/crowdsec.py | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/misp_modules/modules/expansion/crowdsec.py b/misp_modules/modules/expansion/crowdsec.py index 4432c4e..064e08c 100644 --- a/misp_modules/modules/expansion/crowdsec.py +++ b/misp_modules/modules/expansion/crowdsec.py @@ -4,12 +4,12 @@ from pymisp import MISPEvent, MISPObject import pycountry import requests -mispattributes = {"input": ["ip-dst", "ip-src"], "output": ["text"]} +mispattributes = {"input": ["ip-dst", "ip-src"], "output": ["text"], 'format': 'misp_standard'} moduleinfo = { "version": "1.0", "author": "Shivam Sandbhor ", "description": "Module to access CrowdSec CTI API.", - "module-type": ["hover"], + "module-type": ["hover", "expansion"], } moduleconfig = ["api_key", "api_version"] @@ -26,7 +26,8 @@ def handler(q=False): return {"error": "Missing CrowdSec API key"} if not request["config"].get("api_version"): - return {"error": "Missing CrowdSec API version parameter"} + else: + request["config"] = "v2" if request["config"]["api_version"] == "v2": return _handler_v2(request) @@ -43,7 +44,7 @@ def _handler_v2(request_data): f"https://cti.api.crowdsec.net/v2/smoke/{ip}", headers={ "x-api-key": request_data["config"]["api_key"], - "User-Agent": "crowdsec-misp/v1.0.0", + "User-Agent": "crowdsec-misp/v1.0.0", }, ) crowdsec_cti.raise_for_status()