[microsoft-sentinel-incidents]: "NoneType" exception when converting HostEntity

[romain-filigran]

Description

An exception is thrown when converting certain alerts containing a HostEntity that does not contain a “hostname” field.

Traceback (most recent call last): File "/opt/opencti-connector-microsoft-defender-incidents/microsoft_defender_incidents_connector/connector.py", line 359, in process_message incident_stix_objects = self._extract_intelligence(incident) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/opencti-connector-microsoft-defender-incidents/microsoft_defender_incidents_connector/connector.py", line 191, in _extract_intelligence self.converter_to_stix.create_evidence_identity_system( File "/opt/opencti-connector-microsoft-defender-incidents/microsoft_defender_incidents_connector/converter_to_stix.py", line 27, in decorator return decorated_function(self, *args, **kwargs) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/opencti-connector-microsoft-defender-incidents/microsoft_defender_incidents_connector/converter_to_stix.py", line 280, in create_evidence_identity_system id=Identity.generate_id( ^^^^^^^^^^^^^^^^^^^^^ File "/usr/local/lib/python3.12/site-packages/pycti/entities/opencti_identity.py", line 229, in generate_id data = {"name": name.lower().strip(), "identity_class": identity_class.lower()} ^^^^^^^^^^ AttributeError: 'NoneType' object has no attribute 'lower'

Environment

OpenCTI version: 6.5.3