From d720c38b0f08886e9a291f5ff411b1361a0dbc09 Mon Sep 17 00:00:00 2001 From: Daniel Pascual Date: Thu, 8 Aug 2024 16:58:17 +0200 Subject: [PATCH] WIP --- .../modules/expansion/google_threat_intelligence.py | 13 +++++++------ 1 file changed, 7 insertions(+), 6 deletions(-) diff --git a/misp_modules/modules/expansion/google_threat_intelligence.py b/misp_modules/modules/expansion/google_threat_intelligence.py index cfad0502..cde28050 100644 --- a/misp_modules/modules/expansion/google_threat_intelligence.py +++ b/misp_modules/modules/expansion/google_threat_intelligence.py @@ -117,19 +117,20 @@ def add_gti_report(self, report: vt.Object) -> str: type='text', value=ratio, disable_correlation=True) + report_dict = report.to_dict() gti_object.add_attribute( 'threat-score', type='text', - value=get_key( - report, 'attributes.gti_assessment.threat_score.value')) + value=get_key(report_dict, + 'attributes.gti_assessment.threat_score.value')) gti_object.add_attribute( 'verdict', type='text', - value=get_key( - report, 'attributes.gti_assessment.verdict.value').replace( + value=get_key(report_dict, + 'attributes.gti_assessment.verdict.value').replace( 'VERDICT_', '')) gti_object.add_attribute( 'severity', type='text', - value=get_key( - report, 'attributes.gti_assessment.severity.value').replace( + value=get_key(report_dict, + 'attributes.gti_assessment.severity.value').replace( 'SEVERITY_', '')) self.misp_event.add_object(**gti_object) return gti_object.uuid