PyMISP icon indicating copy to clipboard operation
PyMISP copied to clipboard

Can't get search() to return attachments that have been included inside a object (e.g. report object attachment files)

Open samitainio opened this issue 1 year ago • 0 comments

This might be a PEBKAC issue but I just can't get the PyMISP search() function to return events so that the file attachments that have been saved inside objects, mainly from the report object, would be included in the returned JSON. I have set the with_attachments to True but it doesn't seem to do anything for these files. What am I missing here or is this a bug?

I've been trying to get this work on the following versions: MISP: Currently installed version… v2.4.192 (694da4e641d0912ec9ff84cf68ae530477fad616) PyMISP on the MISP server: 2.4.190 PyMISP on the client: 2.4.190

For everything else the search() is returning everything as expected as far as I can see.

If I manually export same MISP events from the UI then the files are included. Any insight into the matter would be greatly appreacited!

samitainio avatar May 10 '24 12:05 samitainio