fix TheHive-Project#2058 add src tag to imported misp alerts

Signed-off-by: Vincent Debergue <[email protected]>
vdebergue · Jun 10, 2021 · 168d776 · 168d776
1 parent 9eb14bc
commit 168d776
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/misp/connector/src/main/scala/org/thp/thehive/connector/misp/services/MispImportSrv.scala b/misp/connector/src/main/scala/org/thp/thehive/connector/misp/services/MispImportSrv.scala
@@ -72,7 +72,7 @@ class MispImportSrv @Inject() (
           read = false,
           follow = true,
           organisationId = organisationId,
-          tags = event.tags.map(_.name),
+          tags = s"src:${event.orgc}" +: event.tags.map(_.name),
           caseId = EntityId.empty
         )
       }

diff --git a/.../connector/src/test/scala/org/thp/thehive/connector/misp/services/MispImportSrvTest.scala b/.../connector/src/test/scala/org/thp/thehive/connector/misp/services/MispImportSrvTest.scala
@@ -92,7 +92,7 @@ class MispImportSrvTest(implicit ec: ExecutionContext) extends PlaySpecification
               pap = 2,
               read = false,
               follow = true,
-              tags = Seq("TH-test", "TH-test-2"),
+              tags = Seq("src:ORGNAME", "TH-test", "TH-test-2"),
               organisationId = alert.organisationId,
               caseId = EntityId.empty
             )
@@ -103,7 +103,7 @@ class MispImportSrvTest(implicit ec: ExecutionContext) extends PlaySpecification
       val observables = app[Database]
         .roTransaction { implicit graph =>
           app[OrganisationSrv]
-            .get(EntityName("admin"))
+            .get(EntityName("cert"))
             .alerts
             .getBySourceId("misp", "ORGNAME", "1")
             .observables