search

cudeso / misp2sentinel

MISP to Sentinel integration
MIT License
53 stars 17 forks source link

Update Azure Function to newest version of the solution #34

Closed lnfernux closed 1 year ago

lnfernux commented 1 year ago

Updates:

  1. Changed some calls in the Azure Function portion to account from change in import method for datetime
  2. Removed the exception for MISPServerError as it throws errors in the Azure Function running
  3. Updated guidance to include python version (3.9)
  4. Merged changes to main script (__init__.py), RequestManager.py, RequestObject.py and constants.py
  5. Updated basic config in config.py and added sections to make it easier to understand

Everything is tested and works with newest MISP-version without errors. Haven't tested multi-tenancy push yet, but this supports one workspace per tenant for now.

cudeso commented 1 year ago

Thank you very much.

In the latest commit (https://github.com/cudeso/misp2sentinel/commit/ffde3d9b132c33929e28675ca4abc7b22f96558c) I fixed the issue with the exception for MISPServerError. The integration now requires misp-stix (it's in the requirements file https://github.com/cudeso/misp2sentinel/commit/ffde3d9b132c33929e28675ca4abc7b22f96558c#diff-4d7c51b1efe9043e44439a949dfd92e5827321b34082903477fd04876edb7552R13).