search

xme / toolbox

Miscelaneous useful scripts for my day to day projects
125 stars 45 forks source link

NO IOCs DOWNLOADED #5

Closed gitQuestions closed 6 years ago

gitQuestions commented 6 years ago

Hi there,

Im using the script to download some IOCs from my MISP in order to import them to OSSEC.

I have been using "print()" to see where the script stops wornking and I realize that it is just before: image

I have executed the script with the commando line: image

The output file is: image

I hope someone HELP ME!, ANY SUGGESTION??

Thanks.

xme commented 6 years ago

Did you configure your environment with the correct MISP URL & key?

gitQuestions commented 6 years ago

Yes, the MISP URL and the key are correct.

When I use other key or URL, a connection problem happens (dont create the file "misp_windows_ioc.txt"). So, that is not the problem.

Thanks for the answer!

gitQuestions commented 6 years ago

I have noticed that if I introduce "print(result['response'])", the output is just "[]".

I have tried with the file "last.py" which it writes in a output file the X last entries and the result is the same. What "last.py" makes: image

The output: just "[]" image

xme commented 6 years ago

Can you manually the connection to MISP (via wget or curl) from the host running mof.py.

gitQuestions commented 6 years ago

I tried it and I got the events information: image

Here, a link with another thread about my problem: "https://github.com/MISP/PyMISP/issues/208".

In summary, I think the problem is in the function "search()". I have try the script "get.py" (function "get_event()") and I got the information...

gitQuestions commented 6 years ago

FINALLY WORKS!!!!!!! The final problem was me and my lack of knowledge about MISP.

Thank you for the support and advices.

Great community and owners.