MISP/misp-galaxy
6
0
Fork 0
mirror of https://github.com/MISP/misp-galaxy.git synced 2024-11-26 16:57:18 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

add attribution-confidence attribute to threat-actor

Browse source
This commit is contained in:
Deborah Servili 2019-03-11 11:18:12 +01:00
parent 7576d0db02
commit ecf76178e7
No known key found for this signature in database
GPG key ID: 7E3A832850D4D7D1
2 changed files with 188 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

167
clusters/threat-actor.json
View file

File diff suppressed because it is too large Load diff

22
tools/add_missing_attribution-confidence.py Executable file
View file

@ -0,0 +1,22 @@
#!/usr/bin/env python3
# -*- coding: utf-8 -*-
import json
import argparse
import uuid
parser = argparse.ArgumentParser(description='Add missing attribution-confidence in threat-actor clusters')
parser.add_argument("-f", "--filename", required=True, help="name of the cluster")
args = parser.parse_args()
with open(args.filename) as json_file:
data = json.load(json_file)
json_file.close()
for value in data['values']:
if value.get('meta'):
if not value.get('meta').get('attribution-confidence') and (value.get('meta').get('cfr-suspected-state-sponsor') or value.get('meta').get('country')):
value.get('meta')['attribution-confidence'] = 50
with open(args.filename, 'w') as json_file:
json.dump(data, json_file, indent=2, sort_keys=True, ensure_ascii=False)