Christian Studer

Results 19 comments of Christian Studer

I fixed in 7da6f26 the `external_references` field parsing for attack pattern objects, which was here the breaking point. Also there is a lot of duplicates, so this change includes a...

Hey, I am currently working on the rework of the STIX 2 import feature which will support 2.1 This is going to be released soon, but I will also check...

The web interface works indeed for such kind of data to import. Alternatively, the `/events/upload_stix/2` endpoint works as well, what you need to do is simply to copy the content...

The `ip-dst` (or `ip-src`) attribute is actually the input attribute, but I probably failed a copy paste [here](https://github.com/MISP/misp-modules/blob/cbaa1e6e9353b12d5acad76e14dd4cc52c537739/misp_modules/modules/expansion/shodan.py#L76) We do not need to add this attribute to the `ip-api-address` object...

I just pushed be5635b0a4e5bb306bb596681180d0b96a751c26 that should fix the issue described with the python logs. This should fix the hover enrichment issues at least for the `yara_query` module as mentioned in...

For this feature, I have a feature branch on this repository that is going to be merged right after is implemented in the core part. Also in the core part,...

I already saw this king of issue for one misp module I made and I am pretty sure I know where it comes from, do you have any example you...

Sure, I will work on it soon and poke you once it is done within the next few days ;-)

The [module](https://github.com/MISP/misp-modules/blob/master/misp_modules/modules/expansion/urlhaus.py) is available since the feature branch we created with other modules presenting the same new features (being able to return objects as well as attributes from modules) has...

Did you try following those steps? https://github.com/MISP/misp-modules#how-to-install-and-start-misp-modules-in-a-python-virtualenv-recommended (skip `sudo -u www-data virtualenv -p python3 /var/www/MISP/venv` if you already have a venv directory within /var/www/MISP)