Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cosmetic Bug: wrong number of exported observables displayed #1071

Closed
ITServ-DE opened this issue Jul 23, 2019 · 4 comments
Closed

Cosmetic Bug: wrong number of exported observables displayed #1071

ITServ-DE opened this issue Jul 23, 2019 · 4 comments
Assignees
Labels
Milestone

Comments

@ITServ-DE
Copy link

Request Type

Bug

Work Environment

Question Answer
OS version (server) Ubuntu
OS version (client) Windows
TheHive version / git hash 3.4.0-RC1
Package Type RPM

Problem Description

When exporting a case to MISP, the message after a successful export to MISP is always "The case has been successfully exported with 1 observable(s)", no matter how many observables are connected to the case and no matter wether or not they are IoCs and/or seen.

The message always says: "1 observable(s)"

The Event is correctly created in MISP.

Steps to Reproduce

  1. create a case with zero or more observables
  2. Hit Share -> Export to MISP
  3. Look at the green success message in the bottom-left corner.

TheHive Screenshot:
export

Event created in MISP:
export2

@nadouani nadouani self-assigned this Jul 23, 2019
@nadouani nadouani added the bug label Jul 23, 2019
@nadouani nadouani added this to the 3.4.0-RC3 milestone Jul 23, 2019
@nadouani
Copy link
Contributor

Are you sure you did the export just one time? or did you export a first time, then added another IOC and exported again? The number 1 in this case is the number of IOC that has been exported during the last export action.

@ITServ-DE
Copy link
Author

ITServ-DE commented Aug 21, 2019

I re-tried it, twice, and yes, my bug report is still correct :-)

  1. created a new case, added three observables, exported to MISP -> Message exported with 1 observable, no observables in MISP (as they were not marked as IOC in TH)

  2. created a new case, added three observables, marked each of them as IoC and sighted, exported to MISP -> Message exported with 1 observable, three observables in MISP

@ITServ-DE
Copy link
Author

Just a quick guess:

In CaseExportDialogCtrl.js

Snag_483e7b81

@nadouani
Copy link
Contributor

The issue seems to be angular.isObject([]) who is returning true, where it was returning false before :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants