PyMISP
PyMISP copied to clipboard
Can't get search() to return attachments that have been included inside a object (e.g. report object attachment files)
This might be a PEBKAC issue but I just can't get the PyMISP search() function to return events so that the file attachments that have been saved inside objects, mainly from the report object, would be included in the returned JSON. I have set the with_attachments to True but it doesn't seem to do anything for these files. What am I missing here or is this a bug?
I've been trying to get this work on the following versions:
MISP: Currently installed version… v2.4.192 (694da4e641d0912ec9ff84cf68ae530477fad616)
PyMISP on the MISP server: 2.4.190
PyMISP on the client: 2.4.190
For everything else the search() is returning everything as expected as far as I can see.
If I manually export same MISP events from the UI then the files are included. Any insight into the matter would be greatly appreacited!