search

PaloAltoNetworks / minemeld

Main MineMeld documentation repo
379 stars 64 forks source link

taxii._decode_object_properties ERROR #18

Open rmeghnagi opened 6 years ago

rmeghnagi commented 6 years ago

Hi all,

during the IoC import from Taxii Feed (FS-ISAC) to Minemeld through a Miner Taxii client (minemeld.ft.taxii.TaxiiClient) i've found some issue in minemeld-engine.log:

2018-05-12T15:45:05 (50697)taxii._decode_object_properties ERROR: node-Prova - Unknown IP version: feriavalenciacevisama@yahoo.com 2018-05-12T15:45:05 (50697)taxii._poll_collection INFO: node-Prova - TAXII Content contains observables but no indicators 2018-05-12T15:45:05 (50697)taxii._incremental_poll_collection INFO: node-Prova - polling datetime.datetime(2018, 4, 4, 14, 41, 55, tzinfo=) to datetime.datetime(2018, 4, 5, 14, 41, 55, tzinfo=) 2018-05-12T15:45:07 (50697)taxii._decode_object_properties ERROR: node-Prova - Unknown IP version: service@bcbe.org 2018-05-12T15:45:07 (50697)taxii._poll_collection INFO: node-Prova - TAXII Content contains observables but no indicators 2018-05-12T15:45:07 (50697)taxii._incremental_poll_collection INFO: node-Prova - polling datetime.datetime(2018, 4, 5, 14, 41, 55, tzinfo=) to datetime.datetime(2018, 4, 6, 14, 41, 55, tzinfo=) 2018-05-12T15:45:10 (50697)taxii._decode_object_properties ERROR: node-Prova - no email address listed 2018-05-12T15:45:10 (50697)taxii._decode_object_properties ERROR: node-Prova - unknown type MutexObjectType {'xsi:type': 'MutexObjectType', 'name': 'Global\C::Users:User01:AppData:Local:Microsoft:Windows:Explorer:thumbcache_1024.db!dfMaintainer'} 2018-05-12T15:45:41 (50697)taxii._decode_object_properties ERROR: node-Prova - Unknown IP version: tulm8389@gmail.com 2018-05-12T15:45:41 (50697)taxii._decode_object_properties ERROR: node-Prova - Unknown IP version: maquinadosrango@hotmail.com 2018-05-12T15:45:41 (50697)taxii._decode_object_properties ERROR: node-Prova - Unknown IP version: gerencia.soldmecsrl@hotmail.com 2018-05-12T15:45:41 (50697)taxii._decode_object_properties ERROR: node-Prova - Unknown IP version: montaque37@windowslive.com 2018-05-12T15:45:41 (50697)taxii._decode_object_properties ERROR: node-Prova - Unknown IP version: funniteng74@hotmail.com 2018-05-12T15:45:41 (50697)taxii._decode_object_properties ERROR: node-Prova - Unknown IP version: nanthaphak03@hotmail.com 2018-05-12T15:45:41 (50697)taxii._decode_object_properties ERROR: node-Prova - Unknown IP version: gonter0267@hotmail.com 2018-05-12T15:45:41 (50697)taxii._decode_object_properties ERROR: node-Prova - Unknown IP version: l.d.concannon@gmail.com 2018-05-12T15:45:41 (50697)taxii._decode_object_properties ERROR: node-Prova - Unknown IP version: blessings@perrymaintenance.com 2018-05-12T15:45:41 (50697)taxii._decode_object_properties ERROR: node-Prova - Unknown IP version: montaque37@windowslive.com 2018-05-12T15:45:41 (50697)taxii._decode_object_properties ERROR: node-Prova - Unknown IP version: blessings@perrymaintenance.com 2018-05-12T15:45:41 (50697)taxii._decode_object_properties ERROR: node-Prova - Unknown IP version: gonter0267@hotmail.com 2018-05-12T15:45:41 (50697)taxii._decode_object_properties ERROR: node-Prova - Unknown IP version: l.d.concannon@gmail.com 2018-05-12T15:45:41 (50697)taxii._decode_object_properties ERROR: node-Prova - Unknown IP version: funniteng74@hotmail.com 2018-05-12T15:45:42 (50697)taxii._decode_object_properties ERROR: node-Prova - Unknown IP version: tulm8389@gmail.com 2018-05-12T15:45:42 (50697)taxii._decode_object_properties ERROR: node-Prova - Unknown IP version: gerencia.soldmecsrl@hotmail.com

As you can see above the Miner succeed to get all IoC (sha256,md5, IP etc..) exept the e-mail.

My Minemeld version is: 0.9.44

Could you please help me?

Thank you in advance! Regards, R.