Merge pull request #854 from aacgood/develop

Included privacy type setting for URL/File analysis
TheHive-Project · Sep 18, 2020 · a56645d · a56645d
2 parents 5bfeecc + 1cf0ecf
commit a56645d
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 2 deletions.
diff --git a/analyzers/AnyRun/AnyRun_Sandbox_Analysis.json b/analyzers/AnyRun/AnyRun_Sandbox_Analysis.json
@@ -16,6 +16,14 @@
       "multi": false,
       "required": false
     },
+    {
+      "name": "privacy_type",
+      "description": "Define the privacy setting (Allowed values: public, bylink, owner)",
+      "type": "string",
+      "multi": false,
+      "required": true,
+      "defaultValue": "bylink"
+    },
     {
       "name": "verify_ssl",
       "description": "Verify SSL certificate",

diff --git a/analyzers/AnyRun/anyrun_analyzer.py b/analyzers/AnyRun/anyrun_analyzer.py
@@ -12,6 +12,7 @@ def __init__(self):
         Analyzer.__init__(self)
         self.url = "https://api.any.run/v1"
         self.token = self.get_param("config.token", None, "Service token is missing")
+        self.privacy_type = self.get_param("config.privacy_type", None, "Privacy type is missing")
         self.verify_ssl = self.get_param("config.verify_ssl", True, None)
         if not self.verify_ssl:
             requests.packages.urllib3.disable_warnings(InsecureRequestWarning)
@@ -49,9 +50,11 @@ def run(self):
                 while status_code in (None, 429) and tries <= 15:
                     with open(filepath, "rb") as sample:
                         files = {"file": (filename, sample)}
+                        data = {"opt_privacy_type": self.privacy_type}
                         response = requests.post(
                             "{0}/analysis".format(self.url),
                             files=files,
+                            data=data,
                             headers=headers,
                             verify=self.verify_ssl,
                         )
@@ -68,7 +71,7 @@ def run(self):
                         self.error(response.json()["message"])
             elif self.data_type == "url":
                 url = self.get_param("data", None, "Url is missing")
-                data = {"obj_type": "url", "obj_url": url}
+                data = {"obj_type": "url", "obj_url": url, "opt_privacy_type": self.privacy_type}
                 while status_code in (None, 429) and tries <= 15:
                     response = requests.post(
                         "{0}/analysis".format(self.url),
@@ -127,4 +130,4 @@ def run(self):
 
 
 if __name__ == "__main__":
-    AnyRunAnalyzer().run()
+    AnyRunAnalyzer().run()