Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Zvelo]: Connector stops working if data is invalid or incorrectly formatted #3372

Closed
romain-filigran opened this issue Jan 31, 2025 · 0 comments · Fixed by #3402
Closed
Assignees
Labels
bug use for describing something not working as expected filigran support [optional] use to identify an issue related to feature developed & maintained by Filigran. solved use to identify issue that has been solved (must be linked to the solving PR)
Milestone

Comments

@romain-filigran
Copy link
Member

Description

We've observed that some of the indicators provided by Zvelo can be incorrectly formatted, causing the connector to stop with the following exception (the problem comes from the URL formatting).

Traceback (most recent call last): File "/opt/opencti-connector-zvelo/zvelo_connector/connector.py", line 132, in process_message stix_objects = self._collect_intelligence(from_date=last_run) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/opencti-connector-zvelo/zvelo_connector/connector.py", line 77, in _collect_intelligence self.converter_to_stix.convert_phish_to_stix(entity) File "/opt/opencti-connector-zvelo/zvelo_connector/converter_to_stix.py", line 287, in convert_phish_to_stix stix_indicator = stix2.Indicator( ^^^^^^^^^^^^^^^^ File "/usr/local/lib/python3.12/site-packages/stix2/v21/sdo.py", line 250, in __init__ super(Indicator, self).__init__(*args, **kwargs) File "/usr/local/lib/python3.12/site-packages/stix2/base.py", line 232, in __init__ self._check_object_constraints() File "/usr/local/lib/python3.12/site-packages/stix2/v21/sdo.py", line 270, in _check_object_constraints raise InvalidValueError(self.__class__, 'pattern', str(errors[0])) stix2.exceptions.InvalidValueError: Invalid value for Indicator 'pattern': FAIL: Error found at line 1:13. mismatched input ''' expecting {IntNegLiteral, IntPosLiteral, FloatNegLiteral, FloatPosLiteral, HexLiteral, BinaryLiteral, StringLiteral, BoolLiteral, TimestampLiteral}

Environment

  1. OpenCTI version: 6.4.10
@romain-filigran romain-filigran added bug use for describing something not working as expected needs triage use to identify issue needing triage from Filigran Product team and removed needs triage use to identify issue needing triage from Filigran Product team labels Jan 31, 2025
@romain-filigran romain-filigran added this to the Bugs backlog milestone Jan 31, 2025
@helene-nguyen helene-nguyen self-assigned this Feb 3, 2025
@helene-nguyen helene-nguyen added the filigran support [optional] use to identify an issue related to feature developed & maintained by Filigran. label Feb 10, 2025
@flavienSindou flavienSindou added the solved use to identify issue that has been solved (must be linked to the solving PR) label Feb 10, 2025
flavienSindou added a commit that referenced this issue Feb 10, 2025
maximus-debski pushed a commit to maximus-debski/connectors that referenced this issue Feb 26, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug use for describing something not working as expected filigran support [optional] use to identify an issue related to feature developed & maintained by Filigran. solved use to identify issue that has been solved (must be linked to the solving PR)
Projects
None yet
3 participants