SpyGuard icon indicating copy to clipboard operation
SpyGuard copied to clipboard

IOCs external source MISP

Open icedan opened this issue 1 year ago • 1 comments

Hi. I have a problem with synchronizing MISP IOCs on the local server. Some time ago, when I was making SpyGuard, it synchronized beautifully - I had over 600k IOCs. Today I made a new one and it doesn't sync. After calling python3 /usr/share/spyguard/server/backend/watchers.py I have something like this /usr/share/spyguard/server/backend/app/classes/misp.py:71: SAWarning: Dialect sqlite+pysqlite does *not* support Decimal objects natively, and SQLAlchemy must convert from floating point - rounding errors and other issues may occur. Please consider storing Decimal numbers as strings or integers on this platform for lossless storage. for misp in db.session.query(MISPInst).all():

Previously there was a problem with the version The version of PyMISP recommended by the MISP instance (2.4.183) is newer than the one you're using now (2.4.165.1). Please upgrade PyMISP. But now it's upgraded.

And python3 /usr/share/spyguard/server/backend/app/blueprints/update.py Traceback (most recent call last): File "/usr/share/spyguard/server/backend/app/blueprints/update.py", line 5, in <module> from app.classes.update import Update ModuleNotFoundError: No module named 'app'

Any ideas?

icedan avatar Jan 25 '24 13:01 icedan

Hi, can you please write under which version it worked and which option you used to import/activate the MISP IOCs?