#300 add extraction of observables AS and asabusecontact

TheHive-Project · Sep 3, 2018 · d8217c4 · d8217c4
1 parent 67bb738
commit d8217c4
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/analyzers/DShield/DShield_lookup.py b/analyzers/DShield/DShield_lookup.py
@@ -15,6 +15,15 @@ def dshield_checkip(self, data):
         r = requests.get(url)
         return json.loads(r.text)
 
+    def artifacts(self, raw):
+        artifacts = []
+        if 'as' in raw:
+            artifacts.append({'type':'autonomous-system','value':str(raw['as'])})
+
+        if 'asabusecontact' in raw:
+            artifacts.append({'type': 'email', 'value':str(raw['asabusecontact'])})
+        return artifacts
+
     def summary(self, raw):
         taxonomies = []
         value = "-"