#56 PhinshingInitiative() and short reports + bump version

TheHive-Project · Jun 18, 2017 · 6e00de7 · 6e00de7
1 parent 6a2d0dc
commit 6e00de7
Show file tree

Hide file tree

Showing 5 changed files with 13 additions and 7 deletions.
diff --git a/analyzers/PhishingInitiative/PhishingInitiative_Lookup.json b/analyzers/PhishingInitiative/PhishingInitiative_Lookup.json
@@ -1,6 +1,6 @@
 {
     "name": "PhishingInitiative_Lookup",
-    "version": "1.0",
+    "version": "2.0",
     "author": "CERT-BDF",
     "url": "https://github.com/CERT-BDF/Cortex-Analyzers",
     "license": "AGPL-V3",

diff --git a/analyzers/PhishingInitiative/phishinginitiative_lookup.py b/analyzers/PhishingInitiative/phishinginitiative_lookup.py
@@ -12,9 +12,15 @@ def __init__(self):
                                     'Missing PhishingInitiative API key')
 
     def summary(self,raw):
-        return {
-            "status": raw["tag_label"]
-        }
+        taxonomy = {"level": "safe", "namespace": "PhishingInitiative", "predicate": "Status", "value": "Clean"}
+        taxonomies = []
+
+        if raw["tag_label"] == "phishing":
+            taxonomy['level'] = "malicious"
+            taxonomy['value'] = raw["tag_label"]
+        taxonomies.append(taxonomy)
+        result = {"taxonomies": taxonomies}
+        return result
 
     def run(self):
         Analyzer.run(self)

diff --git a/thehive-templates/PhishingInitiative_Lookup_1_0/short.html b/thehive-templates/PhishingInitiative_Lookup_1_0/short.html
diff --git a/...s/PhishingInitiative_Lookup_1_0/long.html → ...s/PhishingInitiative_Lookup_2_0/long.html b/...s/PhishingInitiative_Lookup_1_0/long.html → ...s/PhishingInitiative_Lookup_2_0/long.html
diff --git a/thehive-templates/PhishingInitiative_Lookup_2_0/short.html b/thehive-templates/PhishingInitiative_Lookup_2_0/short.html
@@ -0,0 +1,3 @@
+<span class="label" ng-repeat="t in content.taxonomies" ng-class="{'info': 'label-info', 'safe': 'label-success', 'suspicious': 'label-warning', 'malicious':'label-danger'}[t.level]">
+    {{t.namespace}}:{{t.predicate}}={{t.value}}
+</span>&nbsp;