Raphaël Vinot

..... now I'm the idiot. You're talking of a warning message, not an actual exception. This warning message is there exactly for that reason. It handles broken-ish objects but still...

Fix for the module: https://github.com/MISP/misp-modules/commit/81ec6fe415cef7e6d55c6e03c37551c37f696753

Yep, that's the same thing. The object is technically valid, but the thing generating it is not using the template. Do you know what created it?

That makes sense, you won't have the source unless the tool/person who created it encoded the information in the comments for example. Is it in an event you received from...

The excerpt you pasted above comes from MISPObject.add_attribute -> https://github.com/MISP/PyMISP/blob/58976dc35c33c9fc9c9abfbc9d8872c32ee01bef/pymisp/mispevent.py#L1027, so there is an object somewhere in that event. Your search method is called with `pythonify=True` and it creates a...

Right, so it is probably somewhere around this line: https://github.com/MISP/misp-modules/blob/main/misp_modules/modules/expansion/shodan.py#L73

Yes, an object can contain anything. It is not good practice, but it is possible. The reason is that a specific instance may not have the template you're using, or...

@packet-rat I'm not sure how the shodan module is supposed to work, so it is a bit hard to say if it is a bug in the module, or a...

So two things there: 1. the timestamp isn't changed if you modify the json manually so you have to delete the `timestamp` key from the dict before you push it....

You can change the Orgc (creator org), but not the org: ```python from pymisp import MISPOrganisation orgc = MISPOrganisation() orgc.name = 'bazbaz' orgc.id = 15 orgc.uuid = '5888a98d-a7e8-4183-94bb-4d19950d210f' # NOTE:...