mirror of https://github.com/MISP/misp-modules
Modules for expansion services, import and export in MISP
http://misp.github.io/misp-modules
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
59 lines
1.2 KiB
59 lines
1.2 KiB
import json |
|
import base64 |
|
|
|
from pymisp.tools import stix |
|
|
|
misperrors = {'error': 'Error'} |
|
userConfig = {} |
|
inputSource = ['file'] |
|
|
|
moduleinfo = {'version': '0.2', 'author': 'Hannah Ward', |
|
'description': 'Import some stix stuff', |
|
'module-type': ['import']} |
|
|
|
moduleconfig = [] |
|
|
|
|
|
def handler(q=False): |
|
# Just in case we have no data |
|
if q is False: |
|
return False |
|
|
|
# The return value |
|
r = {'results': []} |
|
|
|
# Load up that JSON |
|
q = json.loads(q) |
|
|
|
# It's b64 encoded, so decode that stuff |
|
package = base64.b64decode(q.get("data")).decode('utf-8') |
|
|
|
# If something really weird happened |
|
if not package: |
|
return json.dumps({"success": 0}) |
|
|
|
pkg = stix.load_stix(package) |
|
|
|
for attrib in pkg.attributes: |
|
r["results"].append({ "values" : [attrib.value] , "types": [attrib.type], "categories": [attrib.category]}) |
|
|
|
return r |
|
|
|
def introspection(): |
|
modulesetup = {} |
|
try: |
|
userConfig |
|
modulesetup['userConfig'] = userConfig |
|
except NameError: |
|
pass |
|
try: |
|
inputSource |
|
modulesetup['inputSource'] = inputSource |
|
except NameError: |
|
pass |
|
return modulesetup |
|
|
|
|
|
def version(): |
|
moduleinfo['config'] = moduleconfig |
|
return moduleinfo
|
|
|