예제 #1
0
 def fill_misp_object(self, item, name):
     misp_object = MISPObject(name)
     misp_object.timestamp = self.getTimestampfromDate(item.timestamp)
     try:
         observables = item.observable.observable_composition.observables
         for observable in observables:
             properties = observable.object_.properties
             self.parse_observable(properties, misp_object)
     except AttributeError:
         properties = item.observable.object_.properties
         self.parse_observable(properties, misp_object)
     self.misp_event.add_object(**misp_object)
예제 #2
0
 def fill_misp_object(self, item, name, to_ids=False):
     try:
         misp_object = MISPObject(name)
         if to_ids:
             observables = item.observable.observable_composition.observables
             misp_object.timestamp = self.getTimestampfromDate(item.timestamp)
         else:
             observables = item.observable_composition.observables
         for observable in observables:
             properties = observable.object_.properties
             misp_attribute = MISPAttribute()
             misp_attribute.type, misp_attribute.value, misp_attribute.object_relation = self.handle_attribute_type(properties, is_object=True, observable_id=observable.id_)
             misp_object.add_attribute(**misp_attribute)
             self.misp_event.add_object(**misp_object)
     except AttributeError:
         properties = item.observable.object_.properties if to_ids else item.object_.properties
         self.parse_observable(properties, to_ids)