def fill_misp_object(self, item, name): misp_object = MISPObject(name) misp_object.timestamp = self.getTimestampfromDate(item.timestamp) try: observables = item.observable.observable_composition.observables for observable in observables: properties = observable.object_.properties self.parse_observable(properties, misp_object) except AttributeError: properties = item.observable.object_.properties self.parse_observable(properties, misp_object) self.misp_event.add_object(**misp_object)
def fill_misp_object(self, item, name, to_ids=False): try: misp_object = MISPObject(name) if to_ids: observables = item.observable.observable_composition.observables misp_object.timestamp = self.getTimestampfromDate(item.timestamp) else: observables = item.observable_composition.observables for observable in observables: properties = observable.object_.properties misp_attribute = MISPAttribute() misp_attribute.type, misp_attribute.value, misp_attribute.object_relation = self.handle_attribute_type(properties, is_object=True, observable_id=observable.id_) misp_object.add_attribute(**misp_attribute) self.misp_event.add_object(**misp_object) except AttributeError: properties = item.observable.object_.properties if to_ids else item.object_.properties self.parse_observable(properties, to_ids)