OpenCTI-Platform / connectors

OpenCTI Connectors
https://www.opencti.io
Apache License 2.0
382 stars 416 forks source link

[CrowdStrike TIP] "'FetchedReport' object is not subscriptable" error on Indicator #2603

Closed Lhorus6 closed 1 month ago

Lhorus6 commented 2 months ago

Description

For the CrowdStrike import connector

The connector raises errors on many indicators.

NB: I think the “Discarding indicator XXX bundle” error follow from the previous failed. Without the fail, there would be no discard. So we can ignore them, it's normal.

Here's an example log:

`Traceback (most recent call last): File "/opt/opencti-connector-crowdstrike/crowdstrike_feeds_connector/indicator/importer.py", line 241, in _create_indicator_bundle return bundle_builder.build() ^^^^^^^^^^^^^^^^^^^^^^ File "/opt/opencti-connector-crowdstrike/crowdstrike_feeds_connector/indicator/builder.py", line 538, in build reports = self._create_reports(object_refs) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/opencti-connector-crowdstrike/crowdstrike_feeds_connector/indicator/builder.py", line 425, in _create_reports indicator_report["report"], indicator_report["files"], objects


TypeError: 'FetchedReport' object is not subscriptable`

I've spoken to @Megafredo about this

## Environment

OCTI 6.2.18