Closed packet-rat closed 1 year ago
Perhaps more succinct:
python3 misp_import.py -r
[2023-02-12 20:00:23,976] INFO misp_tools
[2023-02-12 20:00:23,976] INFO misp_tools '##::::'##:'####::'######::'########:::::'########::'#######:::'#######::'##::::::::'######::
[2023-02-12 20:00:23,976] INFO misp_tools ###::'###:. ##::'##... ##: ##.... ##::::... ##..::'##.... ##:'##.... ##: ##:::::::'##... ##:
[2023-02-12 20:00:23,976] INFO misp_tools ####'####:: ##:: ##:::..:: ##:::: ##::::::: ##:::: ##:::: ##: ##:::: ##: ##::::::: ##:::..::
[2023-02-12 20:00:23,976] INFO misp_tools ## ### ##:: ##::. ######:: ########:::::::: ##:::: ##:::: ##: ##:::: ##: ##:::::::. ######::
[2023-02-12 20:00:23,976] INFO misp_tools ##. #: ##:: ##:::..... ##: ##.....::::::::: ##:::: ##:::: ##: ##:::: ##: ##::::::::..... ##:
[2023-02-12 20:00:23,976] INFO misp_tools ##:.:: ##:: ##::'##::: ##: ##:::::::::::::: ##:::: ##:::: ##: ##:::: ##: ##:::::::'##::: ##:
[2023-02-12 20:00:23,976] INFO misp_tools ##:::: ##:'####:. ######:: ##:::::::::::::: ##::::. #######::. #######:: ########:. ######::
[2023-02-12 20:00:23,976] INFO misp_tools ..:::::..::....:::......:::..:::::::::::::::..::::::.......::::.......:::........:::......:::
[2023-02-12 20:00:23,976] INFO misp_tools _____
[2023-02-12 20:00:23,976] INFO misp_tools / '
[2023-02-12 20:00:23,976] INFO misp_tools ,-/-,__ __
[2023-02-12 20:00:23,976] INFO misp_tools (_/ (_)/ (_
[2023-02-12 20:00:23,976] INFO misp_tools _______ __ _______ __ __ __
[2023-02-12 20:00:23,976] INFO misp_tools | _ .----.-----.--.--.--.--| | _ | |_.----|__| |--.-----.
[2023-02-12 20:00:23,976] INFO misp_tools |. 1___| _| _ | | | | _ | 1___| _| _| | <| -__|
[2023-02-12 20:00:23,976] INFO misp_tools |. |___|__| |_____|________|_____|____ |____|__| |__|__|__|_____|
[2023-02-12 20:00:23,976] INFO misp_tools |: 1 | |: 1 |
[2023-02-12 20:00:23,976] INFO misp_tools |::.. . | |::.. . | Threat Intelligence v0.6.6
[2023-02-12 20:00:23,977] WARNING config misp_enable_ssl SSL is disabled for MISP API requests
[2023-02-12 20:00:24,470] INFO config No configuration errors found (1 warning)
[2023-02-12 20:00:25,921] INFO processor/main Starting import of CrowdStrike Threat Intelligence reports as events (past 365 days).
[2023-02-12 20:00:25,922] INFO processor/main Retrieving all available report types.
[2023-02-12 20:00:42,391] INFO processor/main Retrieved 182 total reports from the Crowdstrike Intel API.
[2023-02-12 20:00:42,391] INFO processor/main Found 2217 pre-existing CrowdStrike reports within the MISP instance.
[2023-02-12 20:00:44,606] INFO processor/main Retrieved extended report details for 2 reports.
[2023-02-12 20:00:45,395] INFO processor/main 0 related indicators found.
Traceback (most recent call last):
File "misp_import.py", line 377, in <module>
main()
File "misp_import.py", line 356, in main
importer.import_from_crowdstrike(int(settings["CrowdStrike"]["init_reports_days_before"]),
File "/home/rx118r/src/crowdstrike/MISP-tools-main/cs_misp_import/importer.py", line 308, in import_from_crowdstrike
self.reports_importer.process_reports(reports_days_before, self.event_ids)
File "/home/rx118r/src/crowdstrike/MISP-tools-main/cs_misp_import/reports.py", line 311, in process_reports
reported.update(fut.result())
File "/opt/rh/rh-python38/root/usr/lib64/python3.8/concurrent/futures/_base.py", line 437, in result
return self.__get_result()
File "/opt/rh/rh-python38/root/usr/lib64/python3.8/concurrent/futures/_base.py", line 389, in __get_result
raise self._exception
File "/opt/rh/rh-python38/root/usr/lib64/python3.8/concurrent/futures/thread.py", line 57, in run
result = self.fn(*self.args, **self.kwargs)
File "/home/rx118r/src/crowdstrike/MISP-tools-main/cs_misp_import/reports.py", line 146, in batch_import_reports
event: MISPEvent = self.create_event_from_report(report, rpt_detail, ind_list)
File "/home/rx118r/src/crowdstrike/MISP-tools-main/cs_misp_import/reports.py", line 538, in create_event_from_report
event = self.add_actor_detail(report, event)
File "/home/rx118r/src/crowdstrike/MISP-tools-main/cs_misp_import/reports.py", line 334, in add_actor_detail
actor_detail = actor_detail["body"]["resources"][0]
TypeError: 'NoneType' object is not subscriptable
I just discovered a newer version and retested - seems to work now...
TypeError: 'NoneType' object is not subscriptable
line 334, in add_actor_detail
$ python3 misp_import.py --all -d