mirror of https://github.com/MISP/misp-modules
83a9d695ea
Let this commit serve as a warning about the perils of duck typing. Word documents (docx,odt,etc) were being uncompressed when they were attached to emails. The email importer now checks a list of well known extensions and will not attempt to unzip them. It is stuck using a list of extensions instead of using file magic because many of these formats produce an application/zip mimetype when scanned. |
||
|---|---|---|
| .. | ||
| test_files | ||
| EICAR.com | ||
| EICAR.com.zip | ||
| __init__.py | ||
| body.json | ||
| body_timeout.json | ||
| bodycircl_passivedns.json.sample | ||
| bodycircl_passivessl.json.sample | ||
| bodycve.json | ||
| bodypassivetotal.json.sample | ||
| bodysourcecache.json | ||
| bodyvirustotal.json.sample | ||
| infected.zip | ||
| longer_password.zip | ||
| query-circl_passivedns.sh | ||
| query-circl_passivessl.sh | ||
| query-cve.sh | ||
| query-dns.sh | ||
| query-sourcecache.sh | ||
| search-modules.sh | ||
| short_password.zip | ||
| stix.xml | ||
| test.py | ||