Merge pull request #2077 from vdebergue/fix/2058-misp-add-tag-src

#2058 Fix missing tag when importing alerts from misp
TheHive-Project · Jun 11, 2021 · ebd7be3 · ebd7be3
2 parents e3ab26f + 8bf9dd7
commit ebd7be3
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/misp/connector/src/main/scala/org/thp/thehive/connector/misp/services/MispImportSrv.scala b/misp/connector/src/main/scala/org/thp/thehive/connector/misp/services/MispImportSrv.scala
@@ -72,7 +72,7 @@ class MispImportSrv @Inject() (
           read = false,
           follow = true,
           organisationId = organisationId,
-          tags = event.tags.map(_.name),
+          tags = s"src:${event.orgc}" +: event.tags.map(_.name),
           caseId = EntityId.empty
         )
       }

diff --git a/.../connector/src/test/scala/org/thp/thehive/connector/misp/services/MispImportSrvTest.scala b/.../connector/src/test/scala/org/thp/thehive/connector/misp/services/MispImportSrvTest.scala
@@ -92,7 +92,7 @@ class MispImportSrvTest(implicit ec: ExecutionContext) extends PlaySpecification
               pap = 2,
               read = false,
               follow = true,
-              tags = Seq("TH-test", "TH-test-2"),
+              tags = Seq("src:ORGNAME", "TH-test", "TH-test-2"),
               organisationId = alert.organisationId,
               caseId = EntityId.empty
             )