pymisp 2.5.2.dev2__py3-none-any.whl → 2.5.4__py3-none-any.whl

pymisp/api.py

@@ -3541,6 +3541,14 @@ class PyMISP:
             response = self._prepare_request('POST', url, data=to_post)
         return response
 
+    def sign_blob(self, blob: str) -> str:
+        """Sign a blob
+
+        :param blob: blob to sign
+        """
+        response = self._prepare_request('POST', '/cryptographicKeys/serverSign', data=blob)
+        return self._check_response(response, lenient_response_type=True)
+
     # ## END Others ###
 
     # ## BEGIN Statistics ###

pymisp/data/misp-objects/README.md

@@ -396,6 +396,7 @@ for a specific attribute. An optional **to_ids** boolean field to disable the ID
 - [objects/sigmf-recording](https://github.com/MISP/misp-objects/blob/main/objects/sigmf-recording/definition.json) - An object representing a single IQ/RF sample in the Signal Metadata Format Specification (SigMF).
 - [objects/social-media-group](https://github.com/MISP/misp-objects/blob/main/objects/social-media-group/definition.json) - Social media group object template describing a public or private group or channel.
 - [objects/software](https://github.com/MISP/misp-objects/blob/main/objects/software/definition.json) - The Software object represents high-level properties associated with software, including software products. STIX 2.1 - 6.14.
+- [objects/spambee-report](https://github.com/MISP/misp-objects/main/objects/spambee-report/definition.json) - A Spambee analysis report.
 - [objects/spearphishing-attachment](https://github.com/MISP/misp-objects/blob/main/objects/spearphishing-attachment/definition.json) - Spearphishing Attachment.
 - [objects/spearphishing-link](https://github.com/MISP/misp-objects/blob/main/objects/spearphishing-link/definition.json) - Spearphishing Link.
 - [objects/splunk](https://github.com/MISP/misp-objects/blob/main/objects/splunk/definition.json) - Splunk / Splunk ES object.

pymisp/data/misp-objects/objects/android-app/definition.json

@@ -7,11 +7,17 @@
       "ui-priority": 1
     },
     "certificate": {
-      "description": "Android certificate",
+      "description": "Android certificate (SHA1)",
       "misp-attribute": "sha1",
       "multiple": true,
       "ui-priority": 1
     },
+    "certificate-sha256": {
+      "description": "Android certificate (SHA256)",
+      "misp-attribute": "sha256",
+      "multiple": true,
+      "ui-priority": 1
+    },
     "domain": {
       "description": "Domain used by the app",
       "misp-attribute": "domain",
@@ -39,5 +45,5 @@
     "sha256"
   ],
   "uuid": "92836f23-4730-4eae-82ac-9f00d5299735",
-  "version": 1
+  "version": 2
 }

pymisp/data/misp-objects/objects/opentide/definition.json

@@ -3,19 +3,25 @@
     "name": {
       "description": "Name of the OpenTIDE Object",
       "misp-attribute": "text",
-      "ui-priority": 0
+      "ui-priority": 5
     },
     "opentide-object": {
       "description": "YAML Content of the Opentide Object",
       "misp-attribute": "text",
-      "ui-priority": 3
+      "ui-priority": 0
+    },
+    "opentide-relation": {
+      "description": "UUID of other OpenTIDE Objects with a relation to this Object",
+      "misp-attribute": "text",
+      "multiple": true,
+      "ui-priority": 1
     },
     "opentide-type": {
       "description": "Type of the OpenTIDE Object",
       "disable_correlation": true,
       "misp-attribute": "text",
       "multiple": false,
-      "ui-priority": 2,
+      "ui-priority": 1,
       "values_list": [
         "tvm",
         "cdm",
@@ -25,17 +31,28 @@
     "uuid": {
       "description": "UUID of the OpenTIDE Object",
       "misp-attribute": "text",
-      "ui-priority": 1
+      "ui-priority": 4
+    },
+    "version": {
+      "description": "Version of the OpenTIDE Object",
+      "disable_correlation": true,
+      "misp-attribute": "text",
+      "sane_default": [
+        "1"
+      ],
+      "ui-priority": 3
     }
   },
   "description": "Object that is a container for threat or detection data, in accordance with the OpenTIDE Framework (https://code.europa.eu/ec-digit-s2/opentide)",
   "meta-category": "misc",
   "name": "opentide",
   "required": [
-    "uuid",
+    "name",
     "opentide-object",
-    "opentide-type"
+    "opentide-type",
+    "uuid",
+    "version"
   ],
   "uuid": "892fd46a-f69e-455c-8c4f-843a4b8f4295",
-  "version": 1
+  "version": 3
 }

pymisp/data/misp-objects/objects/spambee-report/definition.json

@@ -0,0 +1,54 @@
+{
+  "attributes": {
+    "feedback-requested": {
+      "description": "User has requested feedback",
+      "disable_correlation": true,
+      "misp-attribute": "boolean",
+      "ui-priority": 0
+    },
+    "feedback-sent": {
+      "description": "Feedback has been sent to user",
+      "disable_correlation": true,
+      "misp-attribute": "boolean",
+      "ui-priority": 0
+    },
+    "feedback-time": {
+      "description": "Timestamp of the feedback",
+      "disable_correlation": true,
+      "misp-attribute": "datetime",
+      "ui-priority": 0
+    },
+    "privacy": {
+      "description": "User has requested privacy",
+      "disable_correlation": true,
+      "misp-attribute": "boolean",
+      "ui-priority": 0
+    },
+    "report-status": {
+      "categories": [
+        "External analysis"
+      ],
+      "description": "Result of the Spambee analysis for the submitted email",
+      "disable_correlation": true,
+      "misp-attribute": "text",
+      "ui-priority": 0
+    },
+    "report-uid": {
+      "categories": [
+        "Internal reference"
+      ],
+      "description": "Internal reference to the Spambee report",
+      "disable_correlation": true,
+      "misp-attribute": "text",
+      "ui-priority": 0
+    }
+  },
+  "description": "A Spambee analysis report",
+  "meta-category": "network",
+  "name": "spambee-report",
+  "requiredOneOf": [
+    "report-uid"
+  ],
+  "uuid": "305d6e6c-bb4d-4b9a-abf5-9f34d1322352",
+  "version": 3
+}

pymisp/data/misp-objects/objects/vulnerability/definition.json

@@ -14,13 +14,13 @@
       "ui-priority": 0
     },
     "cvss-score": {
-      "description": "Score of the Common Vulnerability Scoring System (version 3).",
+      "description": "Score of the Common Vulnerability Scoring System.",
       "disable_correlation": true,
       "misp-attribute": "float",
       "ui-priority": 1
     },
     "cvss-string": {
-      "description": "String of the Common Vulnerability Scoring System (version 3).",
+      "description": "String of the Common Vulnerability Scoring System.",
       "disable_correlation": true,
       "misp-attribute": "text",
       "ui-priority": 1
@@ -65,7 +65,8 @@
         "Reviewed",
         "Vulnerability ID Assigned",
         "Reported",
-        "Fixed"
+        "Fixed",
+        "Encoded"
       ],
       "ui-priority": 0
     },
@@ -94,5 +95,5 @@
     "id"
   ],
   "uuid": "81650945-f186-437b-8945-9f31715d32da",
-  "version": 8
+  "version": 9
 }

pymisp/data/misp-objects/relationships/definition.json

@@ -1907,7 +1907,23 @@
         "misp"
       ],
       "name": "releasable-to"
+    },
+    {
+      "description": "The source object is weakened by the target weakness.",
+      "format": [
+        "misp"
+      ],
+      "name": "weakened-by",
+      "opposite": "weakens"
+    },
+    {
+      "description": "The source weakness weakens the target object.",
+      "format": [
+        "misp"
+      ],
+      "name": "weakens",
+      "opposite": "weakened-by"
     }
   ],
-  "version": 50
+  "version": 51
 }

pymisp/mispevent.py

@@ -60,28 +60,37 @@ class AnalystDataBehaviorMixin(AbstractMISP):
 
     def add_note(self, note: str, language: str | None = None, **kwargs) -> MISPNote:  # type: ignore[no-untyped-def]
         the_note = MISPNote()
-        the_note.from_dict(note=note, language=language,
-                           object_uuid=self.uuid, object_type=self.analyst_data_object_type,
-                           **kwargs)
+        object_uuid = kwargs.pop('object_uuid', self.uuid)
+        object_type = kwargs.pop('object_type', self.analyst_data_object_type)
+        the_note.from_dict(
+            note=note, language=language, object_uuid=object_uuid,
+            object_type=object_type, contained=True, parent=self, **kwargs
+        )
         self.notes.append(the_note)
         self.edited = True
         return the_note
 
     def add_opinion(self, opinion: int, comment: str | None = None, **kwargs) -> MISPOpinion:  # type: ignore[no-untyped-def]
         the_opinion = MISPOpinion()
-        the_opinion.from_dict(opinion=opinion, comment=comment,
-                              object_uuid=self.uuid, object_type=self.analyst_data_object_type,
-                              **kwargs)
+        object_uuid = kwargs.pop('object_uuid', self.uuid)
+        object_type = kwargs.pop('object_type', self.analyst_data_object_type)
+        the_opinion.from_dict(
+            opinion=opinion, comment=comment, object_uuid=object_uuid,
+            object_type=object_type, contained=True, parent=self, **kwargs
+        )
         self.opinions.append(the_opinion)
         self.edited = True
         return the_opinion
 
     def add_relationship(self, related_object_type: AbstractMISP | str, related_object_uuid: str | None, relationship_type: str, **kwargs) -> MISPRelationship:  # type: ignore[no-untyped-def]
         the_relationship = MISPRelationship()
-        the_relationship.from_dict(related_object_type=related_object_type, related_object_uuid=related_object_uuid,
-                                   relationship_type=relationship_type,
-                                   object_uuid=self.uuid, object_type=self.analyst_data_object_type,
-                                   **kwargs)
+        the_relationship.from_dict(
+            related_object_type=related_object_type,
+            related_object_uuid=related_object_uuid,
+            relationship_type=relationship_type, object_uuid=self.uuid,
+            object_type=self.analyst_data_object_type, contained=True,
+            parent=self, **kwargs
+        )
         self.relationships.append(the_relationship)
         self.edited = True
         return the_relationship
@@ -93,12 +102,8 @@ class AnalystDataBehaviorMixin(AbstractMISP):
         relationships = kwargs.pop('Relationship', [])
         super().from_dict(**kwargs)
         for note in notes:
-            note.pop('object_uuid', None)
-            note.pop('object_type', None)
             self.add_note(**note)
         for opinion in opinions:
-            opinion.pop('object_uuid', None)
-            opinion.pop('object_type', None)
             self.add_opinion(**opinion)
         for relationship in relationships:
             relationship.pop('object_uuid', None)
@@ -1559,7 +1564,8 @@ class MISPGalaxy(AbstractMISP):
 class MISPEvent(AnalystDataBehaviorMixin):
 
     _fields_for_feed: set[str] = {'uuid', 'info', 'threat_level_id', 'analysis', 'timestamp',
-                                  'publish_timestamp', 'published', 'date', 'extends_uuid'}
+                                  'publish_timestamp', 'published', 'date', 'extends_uuid',
+                                  'protected'}
 
     _analyst_data_object_type = 'Event'
 
@@ -1581,6 +1587,7 @@ class MISPEvent(AnalystDataBehaviorMixin):
         self.EventReport: list[MISPEventReport] = []
         self.Tag: list[MISPTag] = []
         self.Galaxy: list[MISPGalaxy] = []
+        self.CryptographicKey: list[MISPCryptographicKey] = []
 
         self.publish_timestamp: float | int | datetime
         self.timestamp: float | int | datetime
@@ -1600,6 +1607,8 @@ class MISPEvent(AnalystDataBehaviorMixin):
 
     def _set_default(self) -> None:
         """There are a few keys that could, or need to be set by default for the feed generator"""
+        if not hasattr(self, 'protected'):
+            self.protected = False
         if not hasattr(self, 'published'):
             self.published = True
         if not hasattr(self, 'uuid'):
@@ -1649,13 +1658,14 @@ class MISPEvent(AnalystDataBehaviorMixin):
                 to_return += attribute.hash_values(algorithm)
         return to_return
 
-    def to_feed(self, valid_distributions: list[int] = [0, 1, 2, 3, 4, 5], with_meta: bool = False, with_distribution: bool=False, with_local_tags: bool = True, with_event_reports: bool = True) -> dict[str, Any]:
+    def to_feed(self, valid_distributions: list[int] = [0, 1, 2, 3, 4, 5], with_meta: bool = False, with_distribution: bool=False, with_local_tags: bool = True, with_event_reports: bool = True, with_cryptographic_keys: bool = True) -> dict[str, Any]:
         """ Generate a json output for MISP Feed.
 
         :param valid_distributions: only makes sense if the distribution key is set; i.e., the event is exported from a MISP instance.
         :param with_distribution: exports distribution and Sharing Group info; otherwise all SharingGroup information is discarded (protecting privacy)
         :param with_local_tags: tag export includes local exportable tags along with global exportable tags
         :param with_event_reports: include event reports in the returned MISP event
+        :param with_cryptographic_keys: include the associated cryptographic keys in the returned protected MISP event
         """
         required = ['info', 'Orgc']
         for r in required:
@@ -1720,6 +1730,13 @@ class MISPEvent(AnalystDataBehaviorMixin):
                     event_report.pop('sharing_group_id', None)
                 to_return['EventReport'].append(event_report.to_dict())
 
+        if with_cryptographic_keys and self.cryptographic_keys:
+            to_return['CryptographicKey'] = []
+            for cryptographic_key in self.cryptographic_keys:
+                cryptographic_key.pop('parent_id', None)
+                cryptographic_key.pop('id', None)
+                to_return['CryptographicKey'].append(cryptographic_key.to_dict())
+
         return {'Event': to_return}
 
     @property
@@ -1756,6 +1773,10 @@ class MISPEvent(AnalystDataBehaviorMixin):
     def event_reports(self) -> list[MISPEventReport]:
         return self.EventReport
 
+    @property
+    def cryptographic_keys(self) -> list[MISPCryptographicKey]:
+        return self.CryptographicKey
+
     @property
     def shadow_attributes(self) -> list[MISPShadowAttribute]:
         return self.ShadowAttribute
@@ -1891,6 +1912,8 @@ class MISPEvent(AnalystDataBehaviorMixin):
             [self.add_galaxy(**e) for e in kwargs.pop('Galaxy')]
         if kwargs.get('EventReport'):
             [self.add_event_report(**e) for e in kwargs.pop('EventReport')]
+        if kwargs.get('CryptographicKey'):
+            [self.add_cryprographic_key(**e) for e in kwargs.pop('CryptographicKey')]
 
         # All other keys
         if kwargs.get('id'):
@@ -2041,6 +2064,15 @@ class MISPEvent(AnalystDataBehaviorMixin):
         self.edited = True
         return event_report
 
+    def add_cryprographic_key(self, parent_type: str, key_data: str, type: str, uuid: str, fingerprint: str, timestamp: str, **kwargs) -> MISPCryptographicKey:  # type: ignore[no-untyped-def]
+        """Add a Cryptographic Key. parent_type, key_data, type, uuid, fingerprint, timestamp are required but you can pass all
+        other parameters supported by MISPEventReport"""
+        cryptographic_key = MISPCryptographicKey()
+        cryptographic_key.from_dict(parent_type=parent_type, key_data=key_data, type=type, uuid=uuid, fingerprint=fingerprint, timestamp=timestamp, **kwargs)
+        self.cryptographic_keys.append(cryptographic_key)
+        self.edited = True
+        return cryptographic_key
+
     def add_galaxy(self, galaxy: MISPGalaxy | dict[str, Any] | None = None, **kwargs) -> MISPGalaxy:  # type: ignore[no-untyped-def]
         """Add a galaxy and sub-clusters into an event, either by passing
         a MISPGalaxy or a dictionary.
@@ -2226,6 +2258,13 @@ class MISPWarninglist(AbstractMISP):
         super().from_dict(**kwargs)
 
 
+class MISPCryptographicKey(AbstractMISP):
+    def from_dict(self, **kwargs) -> None:  # type: ignore[no-untyped-def]
+        if 'CryptographicKey' in kwargs:
+            kwargs = kwargs['CryptographicKey']
+        super().from_dict(**kwargs)
+
+
 class MISPTaxonomy(AbstractMISP):
 
     enabled: bool
@@ -2489,6 +2528,10 @@ class MISPAnalystData(AbstractMISP):
                          'Object', 'Note', 'Opinion', 'Relationship', 'Organisation',
                          'SharingGroup'}
 
+    @property
+    def analyst_data_object_type(self) -> str:
+        return self._analyst_data_object_type
+
     @property
     def org(self) -> MISPOrganisation:
         return self.Org
@@ -2504,6 +2547,10 @@ class MISPAnalystData(AbstractMISP):
         else:
             raise PyMISPError('Orgc must be of type MISPOrganisation.')
 
+    @property
+    def parent(self) -> MISPAttribute | MISPEvent | MISPEventReport | MISPObject:
+        return self.__parent
+
     def __new__(cls, *args, **kwargs):
         if cls is MISPAnalystData:
             raise TypeError(f"only children of '{cls.__name__}' may be instantiated")
@@ -2518,8 +2565,54 @@ class MISPAnalystData(AbstractMISP):
         self.created: float | int | datetime
         self.modified: float | int | datetime
         self.SharingGroup: MISPSharingGroup
+        self._analyst_data_object_type: str  # Must be defined in the child class
+
+    def add_note(self, note: str, language: str | None = None, object_uuid: str | None = None, object_type: str | None = None, parent: MISPEvent | MISPAttribute | MISPObject | MISPEventReport | None = None, **kwargs: dict[str, Any]) -> MISPNote:
+        misp_note = MISPNote()
+        if object_uuid is None:
+            object_uuid = self.uuid
+        if object_type is None:
+            object_type = self.analyst_data_object_type
+        if parent is None and hasattr(self, 'parent'):
+            parent = self.parent
+        misp_note.from_dict(
+            note=note, language=language, object_uuid=object_uuid,
+            object_type=object_type, parent=parent, contained=True, **kwargs
+        )
+        if parent is None:
+            if not hasattr(self, 'Note'):
+                self.Note: list[MISPNote] = []
+            self.Note.append(misp_note)
+        else:
+            self.parent.notes.append(misp_note)
+        self.edited = True
+        return misp_note
+
+    def add_opinion(self, opinion: int, comment: str | None = None, object_uuid: str | None = None, object_type: str | None = None, parent: MISPEvent | MISPAttribute | MISPObject | MISPEventReport | None = None, **kwargs: dict[str, Any]) -> MISPOpinion:
+        misp_opinion = MISPOpinion()
+        if object_uuid is None:
+            object_uuid = self.uuid
+        if object_type is None:
+            object_type = self.analyst_data_object_type
+        if parent is None and hasattr(self, 'parent'):
+            parent = self.parent
+        misp_opinion.from_dict(
+            opinion=opinion, comment=comment, object_uuid=object_uuid,
+            object_type=object_type, parent=parent, contained=True, **kwargs
+        )
+        if parent is None:
+            if not hasattr(self, 'Opinion'):
+                self.Opinion: list[MISPOpinion] = []
+            self.Opinion.append(misp_opinion)
+        else:
+            self.parent.opinions.append(misp_opinion)
+        self.edited = True
+        return misp_opinion
 
     def from_dict(self, **kwargs) -> None:  # type: ignore[no-untyped-def]
+        notes = kwargs.pop('Note', [])
+        opinions = kwargs.pop('Opinion', [])
+        self.__parent = kwargs.pop('parent', None)
         self.distribution = kwargs.pop('distribution', None)
         if self.distribution is not None:
             self.distribution = int(self.distribution)
@@ -2573,6 +2666,11 @@ class MISPAnalystData(AbstractMISP):
 
         super().from_dict(**kwargs)
 
+        for note in notes:
+            self.add_note(**note)
+        for opinion in opinions:
+            self.add_opinion(**opinion)
+
     def _set_default(self) -> None:
         if not hasattr(self, 'created'):
             self.created = datetime.timestamp(datetime.now())
@@ -2580,7 +2678,7 @@ class MISPAnalystData(AbstractMISP):
             self.modified = self.created
 
 
-class MISPNote(AnalystDataBehaviorMixin, MISPAnalystData):
+class MISPNote(MISPAnalystData):
 
     _fields_for_feed: set[str] = MISPAnalystData._fields_for_feed.union({'note', 'language'})
 
@@ -2591,8 +2689,8 @@ class MISPNote(AnalystDataBehaviorMixin, MISPAnalystData):
         self.language: str
         super().__init__(**kwargs)
 
-    def from_dict(self, **kwargs) -> None:  # type: ignore[no-untyped-def]
-        if 'Note' in kwargs:
+    def from_dict(self, contained=False, **kwargs) -> None:  # type: ignore[no-untyped-def]
+        if not contained and 'Note' in kwargs:
             kwargs = kwargs['Note']
         self.note = kwargs.pop('note', None)
         if self.note is None:
@@ -2605,7 +2703,7 @@ class MISPNote(AnalystDataBehaviorMixin, MISPAnalystData):
         return f'<{self.__class__.__name__}(NotInitialized)'
 
 
-class MISPOpinion(AnalystDataBehaviorMixin, MISPAnalystData):
+class MISPOpinion(MISPAnalystData):
 
     _fields_for_feed: set[str] = MISPAnalystData._fields_for_feed.union({'opinion', 'comment'})
 
@@ -2616,8 +2714,8 @@ class MISPOpinion(AnalystDataBehaviorMixin, MISPAnalystData):
         self.comment: str
         super().__init__(**kwargs)
 
-    def from_dict(self, **kwargs) -> None:  # type: ignore[no-untyped-def]
-        if 'Opinion' in kwargs:
+    def from_dict(self, contained=False, **kwargs) -> None:  # type: ignore[no-untyped-def]
+        if not contained and 'Opinion' in kwargs:
             kwargs = kwargs['Opinion']
         self.opinion = kwargs.pop('opinion', None)
         if self.opinion is not None:
@@ -2639,7 +2737,7 @@ class MISPOpinion(AnalystDataBehaviorMixin, MISPAnalystData):
         return f'<{self.__class__.__name__}(NotInitialized)'
 
 
-class MISPRelationship(AnalystDataBehaviorMixin, MISPAnalystData):
+class MISPRelationship(MISPAnalystData):
 
     _fields_for_feed: set[str] = MISPAnalystData._fields_for_feed.union({'related_object_uuid', 'related_object_type', 'relationship_type'})
 
@@ -2651,8 +2749,8 @@ class MISPRelationship(AnalystDataBehaviorMixin, MISPAnalystData):
         self.relationship_type: str
         super().__init__(**kwargs)
 
-    def from_dict(self, **kwargs) -> None:  # type: ignore[no-untyped-def]
-        if 'Relationship' in kwargs:
+    def from_dict(self, contained=False, **kwargs) -> None:  # type: ignore[no-untyped-def]
+        if not contained and 'Relationship' in kwargs:
             kwargs = kwargs['Relationship']
         self.related_object_type = kwargs.pop('related_object_type', None)
         if self.related_object_type is None:

{pymisp-2.5.2.dev2.dist-info → pymisp-2.5.4.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: pymisp
-Version: 2.5.2.dev2
+Version: 2.5.4
 Summary: Python API for MISP.
 Home-page: https://github.com/MISP/PyMISP
 License: BSD-2-Clause
@@ -33,12 +33,12 @@ Provides-Extra: virustotal
 Requires-Dist: RTFDE (>=0.1.1,<0.2.0) ; extra == "email"
 Requires-Dist: Sphinx (>=8,<9) ; (python_version >= "3.10") and (extra == "docs")
 Requires-Dist: beautifulsoup4 (>=4.12.3,<5.0.0) ; extra == "openioc"
-Requires-Dist: deprecated (>=1.2.14,<2.0.0)
+Requires-Dist: deprecated (>=1.2.15,<2.0.0)
 Requires-Dist: docutils (>=0.21.1,<0.22.0) ; (python_version >= "3.10") and (extra == "docs")
 Requires-Dist: extract_msg (>=0.52,<0.53) ; extra == "email"
-Requires-Dist: lief (>=0.15.0,<0.16.0) ; extra == "fileobjects"
+Requires-Dist: lief (>=0.16.0,<0.17.0) ; extra == "fileobjects"
 Requires-Dist: oletools (>=0.60.1,<0.61.0) ; extra == "email"
-Requires-Dist: publicsuffixlist (>=1.0.2.20241113,<2.0.0.0)
+Requires-Dist: publicsuffixlist (>=1.0.2.20241218,<2.0.0.0)
 Requires-Dist: pydeep2 (>=0.5.1,<0.6.0) ; extra == "fileobjects"
 Requires-Dist: pyfaup (>=1.2,<2.0) ; extra == "url"
 Requires-Dist: python-dateutil (>=2.9.0.post0,<3.0.0)

{pymisp-2.5.2.dev2.dist-info → pymisp-2.5.4.dist-info}/RECORD

@@ -1,6 +1,6 @@
 pymisp/__init__.py,sha256=NxD9URYrwmEvYsZdUDTtBqBuIsvzRjXnRr8QVPsuOGE,4004
 pymisp/abstract.py,sha256=hdf3heAGnEi3rFIxaAsCOKfO4Y1kT_UoDNpr564GiIk,15745
-pymisp/api.py,sha256=WIPtuepWtmyfXdi0zsLwKSXpXNhoM6QSnh7_n2nAYMY,207823
+pymisp/api.py,sha256=ocZXH-sgLy-q0g7dlxV6TZu0uKo5ZAdwEIja33ZSQ68,208104
 pymisp/data/describeTypes.json,sha256=hoOy6U_FDVmfk9EdaFgGfEe_GMifmRnIrW8FAJ1ylJ4,45889
 pymisp/data/misp-objects/.git,sha256=NZIIWPWRiUFN6wy7MhT0zLzu8WP8PKqbMxWaO0by0dY,55
 pymisp/data/misp-objects/.gitchangelog.rc,sha256=27iB5X06HaLaMpDdZWMkg_YWLyZRm9H1qBOsqFntuV0,10009
@@ -9,7 +9,7 @@ pymisp/data/misp-objects/.github/workflows/nosetests.yml,sha256=7D2o7SKN_PFkx2AN
 pymisp/data/misp-objects/.travis.yml,sha256=ZzmVFWiNEr_hneN0OOX4ba1M9ivJAzn6umPe4KIsOiM,215
 pymisp/data/misp-objects/LICENSE-software-only.md,sha256=V8j_M8nAz8PvAOZQocyRDX7keai8UJ9skgmnwqETmdY,34520
 pymisp/data/misp-objects/LICENSE.md,sha256=f6xQZQL7dWr4tRnO_khZlVegmj7jyIJhf7pu6M0VeuE,1860
-pymisp/data/misp-objects/README.md,sha256=PRnpp4FsvTZLwVlkOUwh9E7Dj2BxOePiDNF-_dhaGYM,78749
+pymisp/data/misp-objects/README.md,sha256=rozuXu-Em7ohTbyZoRIq4289YuguWeToZfdkcniMOFw,78887
 pymisp/data/misp-objects/docs/time-related-objects.ods,sha256=fFZD3OhiC5VonsSfI0YFv5uHXLvbLG2nrNo0D89jmYA,19977
 pymisp/data/misp-objects/docs/time-related-objects.pdf,sha256=IArPOumDuXIIliuTkEP9uCT693dginC1nUA3WGV5PDA,23583
 pymisp/data/misp-objects/jq_all_the_things.sh,sha256=MOSjYD01hmCRTlZ5p-GkkemX8FR85fn2_tAja7kfTYc,818
@@ -19,7 +19,7 @@ pymisp/data/misp-objects/objects/ai-chat-prompt/definition.json,sha256=0hTBTI8aV
 pymisp/data/misp-objects/objects/ail-leak/definition.json,sha256=I79pga1sxHU4s4T1X3OK14Mk8gsDjzbSZW4L5ofQYOA,2181
 pymisp/data/misp-objects/objects/ais/definition.json,sha256=_ZHH8PDKvFcq1JPbp30hhJNNawqDH9var7LcrSo5hA8,4448
 pymisp/data/misp-objects/objects/ais-info/definition.json,sha256=1Pj9Eu9eoopk60iEeO9vjolqOQVTGDfBY6OCpRdnVFE,1590
-pymisp/data/misp-objects/objects/android-app/definition.json,sha256=KH_tTkASxLioI6Jr2XoeoEhTPOis9m-eMLtSmVmbAfQ,984
+pymisp/data/misp-objects/objects/android-app/definition.json,sha256=pXYC4W11ikLEOk3s0mQh7nQ-P5nTq1qCCDYCByZX6UA,1160
 pymisp/data/misp-objects/objects/android-permission/definition.json,sha256=1XHNGCTgqM6bPdeiCQHfyg6NtzgmFXKNVWZbc7TXqZk,5019
 pymisp/data/misp-objects/objects/annotation/definition.json,sha256=rzISiChqHWyT6ecHBfv3unEU0Y8hAzOzARUHh1sgwCM,1946
 pymisp/data/misp-objects/objects/anonymisation/definition.json,sha256=fY1lFoW0TvH0hYM65ww2r4RQYaqniLk5syTGf9pqSmc,5985
@@ -222,7 +222,7 @@ pymisp/data/misp-objects/objects/network-traffic/definition.json,sha256=jZSGhItw
 pymisp/data/misp-objects/objects/news-agency/definition.json,sha256=yo-x2a7rei3tFIwHEisW2Hf3cGAQieEAs1QRGOQjSYE,2090
 pymisp/data/misp-objects/objects/news-media/definition.json,sha256=Mb4TQz-Cj035HtfyuhVyRTCUlxkzCizBZghLxgD6rGA,4024
 pymisp/data/misp-objects/objects/open-data-security/definition.json,sha256=fNTNdk-Hjd83DkmhbhGst6PJv09ZJzuXC6RitsEinZg,3052
-pymisp/data/misp-objects/objects/opentide/definition.json,sha256=vZi8fwy2yiEZ8aLV0UDodxLENeqZoaOMzafyelSYiQI,1056
+pymisp/data/misp-objects/objects/opentide/definition.json,sha256=KAhBYWYMp_PF0lTMjanOBKZirdju2120Y9tNOlpMzy8,1496
 pymisp/data/misp-objects/objects/organization/definition.json,sha256=2Dq4Gs4ynlcaP1rnxfvDCU8cCARO39_Z3azkHYJjhh4,3956
 pymisp/data/misp-objects/objects/original-imported-file/definition.json,sha256=lip2yP3wdLoCGxsiCrNMcBC6nyQJUPcJFZYzlkpxeOA,921
 pymisp/data/misp-objects/objects/paloalto-threat-event/definition.json,sha256=F1qMo6LN32i3e7ODjv38twX3BEzrgdLIqXN9PqL-3x4,2597
@@ -307,6 +307,7 @@ pymisp/data/misp-objects/objects/sigmf-expanded-recording/definition.json,sha256
 pymisp/data/misp-objects/objects/sigmf-recording/definition.json,sha256=cJqnh3hUIBfMC0jyDqh1Ks1jMNyh3DbMTIn0o4zR_iE,685
 pymisp/data/misp-objects/objects/social-media-group/definition.json,sha256=RyUgIMe8wxqaX5WfHfX4oDuVkvw_kMa7NX7TSQvWxNg,2951
 pymisp/data/misp-objects/objects/software/definition.json,sha256=vx_qg2KBLCM6HJfhH_1WbfXFxpC755aWGVGBi7U6UuU,1930
+pymisp/data/misp-objects/objects/spambee-report/definition.json,sha256=Ps73IJyEfUiOGR1uh_3Rs5v0ISHgAtW_2tXWg3cYVMQ,1437
 pymisp/data/misp-objects/objects/spearphishing-attachment/definition.json,sha256=vtFQBw04jZp1vOWpjE8czGjc4jHr9t8bk08qRjLjahI,3849
 pymisp/data/misp-objects/objects/spearphishing-link/definition.json,sha256=Bj3tjqq9WDULRyJEPKBtBXQvmmWyUwx0rVB4jinSvAU,1681
 pymisp/data/misp-objects/objects/splunk/definition.json,sha256=okI3cfABE4NYBNVskjroZqsbOgtrhuBx9PAfZ08a8Ys,1442
@@ -356,7 +357,7 @@ pymisp/data/misp-objects/objects/victim/definition.json,sha256=YRuufTMqfbzs_7y2f
 pymisp/data/misp-objects/objects/virustotal-graph/definition.json,sha256=Ls9rs3YOuf6FKSUuzUn55Rly57k0HsTaPVc81zhqTME,1227
 pymisp/data/misp-objects/objects/virustotal-report/definition.json,sha256=7tRlsF-JTGij0XKqgS8zMUojDQkkmz6bbwXk0LkKQCU,1562
 pymisp/data/misp-objects/objects/virustotal-submission/definition.json,sha256=ylxitcnBlvglTsWmv_p8iuNC0WsatIbdyzUWUNSwqdw,1796
-pymisp/data/misp-objects/objects/vulnerability/definition.json,sha256=zoIZpxalsku0ePQTR00zLJNRPrx1AaQ-ePi5HiBnYiA,3039
+pymisp/data/misp-objects/objects/vulnerability/definition.json,sha256=CqalJLJWawkrWIoRpzC8TogX7MYg251M6pRK0UgjmVA,3034
 pymisp/data/misp-objects/objects/weakness/definition.json,sha256=ZaHctdCL5-ckkNgaFYdAF7uGtYfplDaJCrYNRW3yKKU,1313
 pymisp/data/misp-objects/objects/whois/definition.json,sha256=s_sJ_496vRbFmgklugF0j6aO1--THhPdx_X-O2G5_9w,2583
 pymisp/data/misp-objects/objects/windows-service/definition.json,sha256=Ya0hFjuw1CXMBKapRIvJRavfOSsWSl4N7KrbJY7rNGs,2318
@@ -368,7 +369,7 @@ pymisp/data/misp-objects/objects/youtube-channel/definition.json,sha256=R35mGTp8
 pymisp/data/misp-objects/objects/youtube-comment/definition.json,sha256=3cVid4QJB28CowczKiXb4s8-1Ald1MvehL7qUaBqIGI,2470
 pymisp/data/misp-objects/objects/youtube-playlist/definition.json,sha256=oDlL__sYqBVOJPJllxW4wW3ElUhz6cKM0UAruPO2BTw,1576
 pymisp/data/misp-objects/objects/youtube-video/definition.json,sha256=VQsamCqE-C3OIR-DFp8Rvn-gGxQ_k8hUTnqwyLkk1o4,2581
-pymisp/data/misp-objects/relationships/definition.json,sha256=LbCK1DpKIGlzx2-ru_FTdYfj0cQhIfRASYM96J5o53Y,47845
+pymisp/data/misp-objects/relationships/definition.json,sha256=J6d5qzEklS9PHQda1qHE9eIeMQZw94sVCCGTN_mVa9Q,48218
 pymisp/data/misp-objects/schema_objects.json,sha256=uwRHHv4mvNkg0A9Kdeb3Y80_IUhJglsIn-gN88Kh65g,8346
 pymisp/data/misp-objects/schema_relationships.json,sha256=MCusp9GAyuHTo3lLyBrsvl5WJC-OHjXYHlEHW6fNv8M,1181
 pymisp/data/misp-objects/tools/adoc_objects.py,sha256=Mv9pibT7-GCkj8WjBJf8Yo8iJ23zA2I8uqOYQODX1pI,7662
@@ -381,7 +382,7 @@ pymisp/data/misp-objects/validate_all.sh,sha256=0wWn-qZS9Pp0voEHK2QBCUxjvlaYj_kb
 pymisp/data/schema-lax.json,sha256=2QICdCbtfXRJkTVjwb7xjF3ypys2wOtrUyE1ZDz_qes,8561
 pymisp/data/schema.json,sha256=79N2hObemthb_syUHksDqM4djFttsWZQDg1sTYZYxys,9178
 pymisp/exceptions.py,sha256=IgGGadv5lnLAvO7Q6AjF0vEbjoWwwDWLYwMn-8pkU_k,1965
-pymisp/mispevent.py,sha256=RF4KJ6-L5x7qLA9glQiQ1FhuYDyFNPu1GXmBRbxntQE,116601
+pymisp/mispevent.py,sha256=U2Tu1U80GRqKnagpkQJmz2hHjH_twq72nKN5K5VjzWk,121187
 pymisp/py.typed,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 pymisp/tools/__init__.py,sha256=_KCihYo82e8G5cHV321ak2sgbao2GyFjf4sSTMiN_IM,2233
 pymisp/tools/_psl_faup.py,sha256=JyK8RQm8DPWvNuoF4rQpiE0rBm-Az-sr38Kl46dmWcs,7034
@@ -412,7 +413,7 @@ pymisp/tools/update_objects.py,sha256=sp_XshzgtRjAU0Mqg8FgRTaokjVKLImyQ02xIcPSrH
 pymisp/tools/urlobject.py,sha256=PIucy1356zaljUm1NbeKmEpHpAUK9yiK2lAugcMp2t8,2489
 pymisp/tools/vehicleobject.py,sha256=bs7f4d47IBi2-VumssSM3HlqkH0viyHTLmIHQxe8Iz8,3687
 pymisp/tools/vtreportobject.py,sha256=NsdYzgqm47dywYeW8UnWmEDeIsf07xZreD2iJzFm2wg,3217
-pymisp-2.5.2.dev2.dist-info/LICENSE,sha256=1oPSVvs96qLjbJVi3mPn0yvWs-6aoIF6BNXi6pVlFmY,1615
-pymisp-2.5.2.dev2.dist-info/METADATA,sha256=2hE8KJk5K9nOvJAu2KIjv2LLAa0Y1LERtiDzNEIrc2c,9171
-pymisp-2.5.2.dev2.dist-info/WHEEL,sha256=Nq82e9rUAnEjt98J6MlVmMCZb-t9cYE2Ir1kpBmnWfs,88
-pymisp-2.5.2.dev2.dist-info/RECORD,,
+pymisp-2.5.4.dist-info/LICENSE,sha256=1oPSVvs96qLjbJVi3mPn0yvWs-6aoIF6BNXi6pVlFmY,1615
+pymisp-2.5.4.dist-info/METADATA,sha256=2xiY-iIVYNriRJZJ_GVTvxPYOKOAr5MjQloPa8ApVrw,9166
+pymisp-2.5.4.dist-info/WHEEL,sha256=Nq82e9rUAnEjt98J6MlVmMCZb-t9cYE2Ir1kpBmnWfs,88
+pymisp-2.5.4.dist-info/RECORD,,