pymisp 2.5.4__tar.gz → 2.5.7__tar.gz

{pymisp-2.5.4 → pymisp-2.5.7}/CHANGELOG.txt

@@ -2,11 +2,43 @@ Changelog
 =========
 
 
+v2.5.7 (2025-02-20)
+-------------------
+
+New
+~~~
+- Enrich event/attribute endpoints. [Raphaël Vinot]
+
+  Related #1318
+
+Changes
+~~~~~~~
+- Bump objects. [Raphaël Vinot]
+- Bump changelog. [Raphaël Vinot]
+- Bump deps, version. [Raphaël Vinot]
+- Update readme. [Raphaël Vinot]
+- Bump deps, use poetry 2.0. [Raphaël Vinot]
+
+Fix
+~~~
+- Allow MD in docs. [Raphaël Vinot]
+- Remove ref to recommonmark. [Raphaël Vinot]
+- [AnalystData] Added missing properties for Notes and Opinions.
+  [Christian Studer]
+
+  - This is now needed because MISPNote and MISPOpinion
+    are no longer part of AnalystDataBehaviorMixin and
+    cannot then get them from there
+- [api] Notes, Opinions and Relationships are no longer
+  AnalystDataBehaviorMixin. [Christian Studer]
+
+
 v2.5.4 (2024-12-20)
 -------------------
 
 Changes
 ~~~~~~~
+- Bump changelog. [Raphaël Vinot]
 - Update objects templates. [Raphaël Vinot]
 - Make python 3.9 happy. [Raphaël Vinot]
 - Bump deps. [Raphaël Vinot]

{pymisp-2.5.4 → pymisp-2.5.7}/PKG-INFO

@@ -1,12 +1,11 @@
-Metadata-Version: 2.1
+Metadata-Version: 2.3
 Name: pymisp
-Version: 2.5.4
+Version: 2.5.7
 Summary: Python API for MISP.
-Home-page: https://github.com/MISP/PyMISP
 License: BSD-2-Clause
 Author: Raphaël Vinot
 Author-email: raphael.vinot@circl.lu
-Requires-Python: >=3.9,<4.0
+Requires-Python: >=3.9.2,<4.0
 Classifier: Development Status :: 5 - Production/Stable
 Classifier: Environment :: Console
 Classifier: Intended Audience :: Information Technology
@@ -15,7 +14,6 @@ Classifier: Intended Audience :: Telecommunications Industry
 Classifier: License :: OSI Approved :: BSD License
 Classifier: Operating System :: POSIX :: Linux
 Classifier: Programming Language :: Python :: 3
-Classifier: Programming Language :: Python :: 3.9
 Classifier: Programming Language :: Python :: 3.10
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
@@ -30,29 +28,27 @@ Provides-Extra: openioc
 Provides-Extra: pdfexport
 Provides-Extra: url
 Provides-Extra: virustotal
-Requires-Dist: RTFDE (>=0.1.1,<0.2.0) ; extra == "email"
-Requires-Dist: Sphinx (>=8,<9) ; (python_version >= "3.10") and (extra == "docs")
-Requires-Dist: beautifulsoup4 (>=4.12.3,<5.0.0) ; extra == "openioc"
-Requires-Dist: deprecated (>=1.2.15,<2.0.0)
-Requires-Dist: docutils (>=0.21.1,<0.22.0) ; (python_version >= "3.10") and (extra == "docs")
-Requires-Dist: extract_msg (>=0.52,<0.53) ; extra == "email"
-Requires-Dist: lief (>=0.16.0,<0.17.0) ; extra == "fileobjects"
-Requires-Dist: oletools (>=0.60.1,<0.61.0) ; extra == "email"
-Requires-Dist: publicsuffixlist (>=1.0.2.20241218,<2.0.0.0)
-Requires-Dist: pydeep2 (>=0.5.1,<0.6.0) ; extra == "fileobjects"
-Requires-Dist: pyfaup (>=1.2,<2.0) ; extra == "url"
-Requires-Dist: python-dateutil (>=2.9.0.post0,<3.0.0)
-Requires-Dist: python-magic (>=0.4.27,<0.5.0) ; extra == "fileobjects"
-Requires-Dist: recommonmark (>=0.7.1,<0.8.0) ; (python_version >= "3.10") and (extra == "docs")
-Requires-Dist: reportlab (>=4.2.5,<5.0.0) ; extra == "pdfexport"
-Requires-Dist: requests (>=2.32.3,<3.0.0)
-Requires-Dist: sphinx-autodoc-typehints (>=2.5.0,<3.0.0) ; (python_version >= "3.10") and (extra == "docs")
-Requires-Dist: urllib3[brotli] ; extra == "brotli"
-Requires-Dist: validators (>=0.34.0,<0.35.0) ; extra == "virustotal"
-Project-URL: Bug Tracker, https://github.com/MISP/PyMISP/issues
+Requires-Dist: RTFDE (>=0.1.2) ; (python_version <= "3.9") and (extra == "email")
+Requires-Dist: beautifulsoup4 (>=4.13.3) ; extra == "openioc"
+Requires-Dist: deprecated (>=1.2.18)
+Requires-Dist: docutils (>=0.21.2) ; (python_version >= "3.11") and (extra == "docs")
+Requires-Dist: extract_msg (>=0.53.1) ; extra == "email"
+Requires-Dist: lief (>=0.16.3) ; extra == "fileobjects"
+Requires-Dist: myst-parser (>=4.0.1) ; (python_version >= "3.11") and (extra == "docs")
+Requires-Dist: oletools (>=0.60.2) ; extra == "email"
+Requires-Dist: pydeep2 (>=0.5.1) ; extra == "fileobjects"
+Requires-Dist: pyfaup (>=1.2) ; extra == "url"
+Requires-Dist: python-dateutil (>=2.9.0.post0)
+Requires-Dist: python-magic (>=0.4.27) ; extra == "fileobjects"
+Requires-Dist: reportlab (>=4.3.1) ; extra == "pdfexport"
+Requires-Dist: requests (>=2.32.3)
+Requires-Dist: sphinx (>=8.2.0) ; (python_version >= "3.11") and (extra == "docs")
+Requires-Dist: sphinx-autodoc-typehints (>=3.1.0) ; (python_version >= "3.11") and (extra == "docs")
+Requires-Dist: urllib3 (>=2.3.0) ; extra == "brotli"
+Requires-Dist: validators (>=0.34.0) ; extra == "virustotal"
 Project-URL: Documentation, https://pymisp.readthedocs.io
 Project-URL: Repository, https://github.com/MISP/PyMISP
-Project-URL: Source, https://github.com/MISP/PyMISP
+Project-URL: issues, https://github.com/MISP/PyMISP/issues
 Description-Content-Type: text/markdown
 
 **IMPORTANT NOTE**: This library will require **at least** Python 3.10 starting the 1st of January 2024. If you have legacy versions of python, please use the latest PyMISP version that will be released in December 2023, and consider updating your system(s). Anything released within the last 2 years will do, starting with Ubuntu 22.04.
@@ -61,7 +57,7 @@ Description-Content-Type: text/markdown
 
 [![Documentation Status](https://readthedocs.org/projects/pymisp/badge/?version=latest)](http://pymisp.readthedocs.io/?badge=latest)
 [![Coverage Status](https://coveralls.io/repos/github/MISP/PyMISP/badge.svg?branch=main)](https://coveralls.io/github/MISP/PyMISP?branch=main)
-[![Python 3.8](https://img.shields.io/badge/python-3.8+-blue.svg)](https://www.python.org/downloads/release/python-380/)
+[![Python 3.9](https://img.shields.io/badge/python-3.9+-blue.svg)](https://www.python.org/downloads/release/python-390/)
 [![PyPi version](https://img.shields.io/pypi/v/pymisp.svg)](https://pypi.python.org/pypi/pymisp/)
 [![Number of PyPI downloads](https://img.shields.io/pypi/dm/pymisp.svg)](https://pypi.python.org/pypi/pymisp/)
 
@@ -248,4 +244,3 @@ python -m pip install --no-index --no-deps packages/*.whl
 
 PyMISP is distributed under an [open source license](./LICENSE). A simplified 2-BSD license.
 
-

{pymisp-2.5.4 → pymisp-2.5.7}/README.md

@@ -4,7 +4,7 @@
 
 [![Documentation Status](https://readthedocs.org/projects/pymisp/badge/?version=latest)](http://pymisp.readthedocs.io/?badge=latest)
 [![Coverage Status](https://coveralls.io/repos/github/MISP/PyMISP/badge.svg?branch=main)](https://coveralls.io/github/MISP/PyMISP?branch=main)
-[![Python 3.8](https://img.shields.io/badge/python-3.8+-blue.svg)](https://www.python.org/downloads/release/python-380/)
+[![Python 3.9](https://img.shields.io/badge/python-3.9+-blue.svg)](https://www.python.org/downloads/release/python-390/)
 [![PyPi version](https://img.shields.io/pypi/v/pymisp.svg)](https://pypi.python.org/pypi/pymisp/)
 [![Number of PyPI downloads](https://img.shields.io/pypi/dm/pymisp.svg)](https://pypi.python.org/pypi/pymisp/)
 
@@ -190,4 +190,3 @@ python -m pip install --no-index --no-deps packages/*.whl
 # License
 
 PyMISP is distributed under an [open source license](./LICENSE). A simplified 2-BSD license.
-

{pymisp-2.5.4 → pymisp-2.5.7}/docs/source/conf.py

@@ -16,7 +16,6 @@
 # add these directories to sys.path here. If the directory is relative to the
 # documentation root, use os.path.abspath to make it absolute, like shown here.
 #
-from recommonmark.parser import CommonMarkParser
 
 # -- General configuration ------------------------------------------------
 
@@ -39,7 +38,7 @@ extensions = [
     'sphinx.ext.viewcode',
     'sphinx.ext.napoleon',
     'sphinx.ext.imgconverter',
-    'recommonmark',
+    'myst_parser',
 ]
 
 napoleon_google_docstring = False
@@ -49,10 +48,6 @@ napoleon_use_ivar = True
 # Add any paths that contain templates here, relative to this directory.
 templates_path = ['_templates']
 
-source_parsers = {
-    '.md': CommonMarkParser,
-}
-
 # The suffix(es) of source filenames.
 # You can specify multiple suffix as a list of string:
 #

{pymisp-2.5.4 → pymisp-2.5.7}/pymisp/api.py

@@ -32,7 +32,7 @@ from .mispevent import MISPEvent, MISPAttribute, MISPSighting, MISPLog, MISPObje
     MISPRole, MISPServer, MISPFeed, MISPEventDelegation, MISPCommunity, MISPUserSetting, \
     MISPInbox, MISPEventBlocklist, MISPOrganisationBlocklist, MISPEventReport, \
     MISPGalaxyCluster, MISPGalaxyClusterRelation, MISPCorrelationExclusion, MISPDecayingModel, \
-    MISPNote, MISPOpinion, MISPRelationship, AnalystDataBehaviorMixin
+    MISPNote, MISPOpinion, MISPRelationship, MISPAnalystData
 from .abstract import pymisp_json_default, MISPTag, AbstractMISP, describe_types
 
 
@@ -499,6 +499,20 @@ class PyMISP:
         response = self._prepare_request('POST', f'events/contact/{event_id}', data=to_post)
         return self._check_json_response(response)
 
+    def enrich_event(self, event: MISPEvent | int | str | UUID, enrich_with: str | list[str]) -> dict[str, Any]:
+        """Enrich an event with data from one or more module.
+
+        :param event: event to enrich
+        :param enrich_with: module name or list of module names to use for enrichment
+        """
+        event_id = get_uuid_or_id_from_abstract_misp(event)
+        if isinstance(enrich_with, str):
+            enrich_with = [enrich_with]
+
+        to_post = {module_name: True for module_name in enrich_with}
+        response = self._prepare_request('POST', f'/events/enrichEvent/{event_id}', data=to_post)
+        return self._check_json_response(response)
+
     # ## END Event ###
 
     # ## BEGIN Event Report ###
@@ -621,14 +635,14 @@ class PyMISP:
     # ## END Galaxy Cluster ###
 
     # ## BEGIN Analyst Data ###a
-    def get_analyst_data(self, analyst_data: AnalystDataBehaviorMixin | int | str | UUID,
+    def get_analyst_data(self, analyst_data: MISPAnalystData | int | str | UUID,
                          pythonify: bool = False) -> dict[str, Any] | MISPNote | MISPOpinion | MISPRelationship:
         """Get an analyst data from a MISP instance
 
         :param analyst_data: analyst data to get
         :param pythonify: Returns a list of PyMISP Objects instead of the plain json output. Warning: it might use a lot of RAM
         """
-        if isinstance(analyst_data, AnalystDataBehaviorMixin):
+        if isinstance(analyst_data, MISPAnalystData):
             analyst_data_type = analyst_data.analyst_data_object_type
         else:
             analyst_data_type = 'all'
@@ -666,7 +680,7 @@ class PyMISP:
         :param analyst_data_id: analyst data ID to update
         :param pythonify: Returns a PyMISP Object instead of the plain json output
         """
-        if isinstance(analyst_data, AnalystDataBehaviorMixin):
+        if isinstance(analyst_data, MISPAnalystData):
             analyst_data_type = analyst_data.analyst_data_object_type
         else:
             analyst_data_type = 'all'
@@ -685,7 +699,7 @@ class PyMISP:
 
         :param analyst_data: analyst data to delete
         """
-        if isinstance(analyst_data, AnalystDataBehaviorMixin):
+        if isinstance(analyst_data, MISPAnalystData):
             analyst_data_type = analyst_data.analyst_data_object_type
         else:
             analyst_data_type = 'all'
@@ -1102,6 +1116,20 @@ class PyMISP:
         a.from_dict(**response)
         return a
 
+    def enrich_attribute(self, attribute: MISPAttribute | int | str | UUID, enrich_with: str | list[str]) -> dict[str, Any]:
+        """Enrich an attribute with data from one or more module.
+
+        :param attribute: attribute to enrich
+        :param enrich_with: module name or list of module names to use for enrichment
+        """
+        attribute_id = get_uuid_or_id_from_abstract_misp(attribute)
+        if isinstance(enrich_with, str):
+            enrich_with = [enrich_with]
+
+        to_post = {module_name: True for module_name in enrich_with}
+        response = self._prepare_request('POST', f'/attributes/enrich/{attribute_id}', data=to_post)
+        return self._check_json_response(response)
+
     # ## END Attribute ###
 
     # ## BEGIN Attribute Proposal ###

pymisp-2.5.7/pymisp/data/misp-objects/objects/instagram-account/definition.json

@@ -0,0 +1,66 @@
+{
+  "attributes": {
+    "account-id": {
+      "description": "Account id.",
+      "misp-attribute": "text",
+      "ui-priority": 1
+    },
+    "account-name": {
+      "description": "Account name.",
+      "misp-attribute": "text",
+      "ui-priority": 1
+    },
+    "archive": {
+      "description": "Archive of the account (Internet Archive, Archive.is, etc).",
+      "disable_correlation": true,
+      "misp-attribute": "link",
+      "multiple": true,
+      "ui-priority": 1
+    },
+    "attachment": {
+      "description": "A screen capture or exported list of contacts etc.",
+      "misp-attribute": "attachment",
+      "multiple": true,
+      "ui-priority": 1
+    },
+    "description": {
+      "description": "A description of the user.",
+      "misp-attribute": "text",
+      "ui-priority": 1
+    },
+    "is-verified": {
+      "description": "If the user is verified.",
+      "misp-attribute": "boolean",
+      "multiple": false,
+      "ui-priority": 1
+    },
+    "link": {
+      "description": "Original link to the page (supposed harmless).",
+      "misp-attribute": "link",
+      "ui-priority": 1
+    },
+    "url": {
+      "description": "Original URL location of the page (potentially malicious).",
+      "misp-attribute": "url",
+      "ui-priority": 1
+    },
+    "user-avatar": {
+      "description": "A user profile picture or avatar.",
+      "misp-attribute": "attachment",
+      "multiple": true,
+      "ui-priority": 1
+    }
+  },
+  "description": "Instagram account.",
+  "meta-category": "misc",
+  "name": "instagram-account",
+  "requiredOneOf": [
+    "account-name",
+    "account-id",
+    "description",
+    "archive",
+    "link"
+  ],
+  "uuid": "656ced16-23f3-4322-925d-c9c961684999",
+  "version": 1
+}

{pymisp-2.5.4 → pymisp-2.5.7}/pymisp/data/misp-objects/objects/lnk/definition.json

@@ -116,6 +116,12 @@
       "misp-attribute": "text",
       "ui-priority": 0
     },
+    "lnk-mft-object": {
+      "description": "LinkTargetIDList MFT entry. Name:MFTID|SeqID|BTimestamp",
+      "misp-attribute": "text",
+      "multiple": true,
+      "ui-priority": 0
+    },
     "lnk-modification-time": {
       "categories": [
         "Other"
@@ -125,6 +131,11 @@
       "misp-attribute": "datetime",
       "ui-priority": 0
     },
+    "lnk-propertystore-sid": {
+      "description": "SID reference in ExtraData.PropertyStore",
+      "misp-attribute": "text",
+      "ui-priority": 0
+    },
     "lnk-relative-path": {
       "description": "Relative path",
       "disable_correlation": true,
@@ -250,6 +261,7 @@
       "description": "Free text value to attach to the file",
       "disable_correlation": true,
       "misp-attribute": "text",
+      "multiple": true,
       "recommended": false,
       "ui-priority": 1
     },
@@ -275,5 +287,5 @@
     "sha512/256"
   ],
   "uuid": "ad13533e-1853-4da0-a111-33a7ce7e6c09",
-  "version": 1
+  "version": 2
 }

pymisp-2.5.7/pymisp/data/misp-objects/objects/rmm/definition.json

@@ -0,0 +1,88 @@
+{
+  "attributes": {
+    "api-key": {
+      "description": "Authentication or API key used by the RMM agent",
+      "misp-attribute": "text",
+      "multiple": true,
+      "ui-priority": 0
+    },
+    "comment": {
+      "description": "A description of the RMM.",
+      "misp-attribute": "comment",
+      "ui-priority": 0
+    },
+    "guid": {
+      "description": "GUID or reference of the RMM agent or deployment ID.",
+      "misp-attribute": "text",
+      "multiple": true,
+      "ui-priority": 0
+    },
+    "hostname": {
+      "description": "hostname of the control server for the RMM agent.",
+      "misp-attribute": "hostname",
+      "ui-priority": 0
+    },
+    "name": {
+      "description": "Name of the RMM agent.",
+      "misp-attribute": "text",
+      "ui-priority": 0
+    },
+    "rmm-type": {
+      "description": "Type of the RMM agent described.",
+      "disable_correlation": true,
+      "misp-attribute": "text",
+      "sane_default": [
+        "AnyDesk",
+        "Atera",
+        "ASG",
+        "BeAnywhere",
+        "Domotz",
+        "DWservice",
+        "Fixme.it",
+        "Fleetdeck.io",
+        "GetScreen",
+        "Itarian",
+        "Level.io",
+        "Logmein",
+        "ManageEngine",
+        "MeshCentral",
+        "N-Able",
+        "Pulseway",
+        "RattyRat",
+        "Rport",
+        "Rsocx",
+        "RustDesk",
+        "RustScan",
+        "ScreenConnect",
+        "Splashtop",
+        "SSH",
+        "Tactical RMM",
+        "Teamviewer",
+        "TightVNC",
+        "TrendMicro",
+        "Sorillus",
+        "Xeox",
+        "ZeroTier"
+      ],
+      "ui-priority": 0
+    },
+    "url": {
+      "description": "url of the control server for the RMM agent.",
+      "misp-attribute": "url",
+      "ui-priority": 0
+    }
+  },
+  "description": "An object describing a RMM agent.",
+  "meta-category": "misc",
+  "name": "rmm",
+  "requiredOneOf": [
+    "comment",
+    "rmm-type",
+    "guid",
+    "url",
+    "hostname",
+    "api-key"
+  ],
+  "uuid": "2cdcfb2a-dd74-4d88-ae02-6f381b312666",
+  "version": 4
+}

{pymisp-2.5.4 → pymisp-2.5.7}/pymisp/data/misp-objects/objects/target-system/definition.json

@@ -28,12 +28,12 @@
       "ui-priority": 1
     }
   },
-  "description": "Description about an targeted system, this could potentially be a compromissed internal system",
+  "description": "Description about an targeted system, this could potentially be a compromised internal system",
   "meta-category": "internal",
   "name": "target-system",
   "requiredOneOf": [
     "targeted_machine"
   ],
   "uuid": "3110944f-eca0-4c94-9d61-a84d022228a4",
-  "version": 1
+  "version": 2
 }

{pymisp-2.5.4 → pymisp-2.5.7}/pymisp/mispevent.py

@@ -2532,6 +2532,14 @@ class MISPAnalystData(AbstractMISP):
     def analyst_data_object_type(self) -> str:
         return self._analyst_data_object_type
 
+    @property
+    def notes(self) -> list[MISPNote]:
+        return self.Note
+
+    @property
+    def opinions(self) -> list[MISPOpinion]:
+        return self.Opinion
+
     @property
     def org(self) -> MISPOrganisation:
         return self.Org

pymisp-2.5.7/pyproject.toml

@@ -0,0 +1,91 @@
+[project]
+name = "pymisp"
+version = "2.5.7"
+description = "Python API for MISP."
+authors = [
+    {name="Raphaël Vinot", email="raphael.vinot@circl.lu"}
+]
+license = "BSD-2-Clause"
+readme = "README.md"
+requires-python = ">=3.9.2,<4.0"
+
+dynamic = [ "classifiers" ]
+
+dependencies = [
+    "requests (>=2.32.3)",
+    "python-dateutil (>=2.9.0.post0)",
+    "deprecated (>=1.2.18)"
+]
+
+[project.urls]
+repository = "https://github.com/MISP/PyMISP"
+issues = "https://github.com/MISP/PyMISP/issues"
+documentation = "https://pymisp.readthedocs.io"
+
+[project.optional-dependencies]
+
+fileobjects = [
+    "python-magic (>=0.4.27)",
+    "pydeep2 (>=0.5.1)",
+    "lief (>=0.16.3)"
+]
+
+openioc = [ "beautifulsoup4 (>=4.13.3)" ]
+
+virustotal = [ "validators (>=0.34.0)" ]
+
+docs = [
+    "sphinx-autodoc-typehints (>=3.1.0) ; python_version >= \"3.11\"",
+    "sphinx (>=8.2.0) ; python_version >= \"3.11\"",
+    "docutils (>=0.21.2) ; python_version >= \"3.11\"",
+    "myst-parser (>=4.0.1) ; python_version >= \"3.11\""
+]
+
+pdfexport = [ "reportlab (>=4.3.1)" ]
+
+url = [ "pyfaup (>=1.2)" ]
+
+email = [
+    "extract_msg (>=0.53.1)",
+    "RTFDE (>=0.1.2) ; python_version <= \"3.9\"",
+    "oletools (>=0.60.2)"
+]
+
+brotli = [ "urllib3 (>=2.3.0)" ]
+
+[tool.poetry]
+classifiers=[
+    'Development Status :: 5 - Production/Stable',
+    'Environment :: Console',
+    'Operating System :: POSIX :: Linux',
+    'Intended Audience :: Science/Research',
+    'Intended Audience :: Telecommunications Industry',
+    'Intended Audience :: Information Technology',
+    'Topic :: Security',
+    'Topic :: Internet'
+]
+
+exclude = ["pymisp/data"]
+include = [
+    {path = "CHANGELOG.txt", format = ["sdist", "wheel"]},
+    {path = "pymisp/data/*.json", format = ["sdist", "wheel"]},
+    {path = "pymisp/data/misp-objects/*.json", format = ["sdist", "wheel"]},
+    {path = "pymisp/data/misp-objects/objects/*/definition.json", format = ["sdist", "wheel"]},
+    {path = "pymisp/data/misp-objects/relationships/definition.json", format = ["sdist", "wheel"]},
+    {path = "docs", format = ["sdist"]},
+    {path = "examples/*.py", format = ["sdist", "wheel"]},
+    {path = "tests", format = ["sdist", "wheel"]}
+]
+
+[tool.poetry.group.dev.dependencies]
+requests-mock = "^1.12.1"
+mypy = "^1.15.0"
+types-requests = "^2.32.0.20241016"
+types-python-dateutil = "^2.9.0.20241206"
+types-redis = "^4.6.0.20241004"
+types-Flask = "^1.1.6"
+pytest-cov = "^6.0.0"
+
+[build-system]
+requires = ["poetry-core>=2.0"]
+build-backend = "poetry.core.masonry.api"

pymisp-2.5.4/examples/admin/setup_sync.py

@@ -1,40 +0,0 @@
-#!/usr/bin/env python3
-# -*- coding: utf-8 -*-
-
-from pymisp import PyMISP
-import sys
-import json
-
-
-# NOTE: the user of the API key *need to be a sync user*
-remote_url = 'https://misp.remote'
-remote_api_key = 'REMOTE KEY FOR SYNC USER'
-remote_verify = True
-
-# NOTE: the user of the API key *need to be an admin*
-own_url = 'https://misp.own'
-own_api_key = 'OWN KEY FOR ADMIN USER'
-own_verify = True
-
-
-remote_misp = PyMISP(url=remote_url, key=remote_api_key, ssl=remote_verify)
-sync_config = remote_misp.get_sync_config()
-
-if 'errors' in sync_config:
-    print('Sumething went wrong:')
-    print(json.dumps(sync_config, indent=2))
-    sys.exit(1)
-else:
-    print('Sucessfully got a sync config:')
-    print(json.dumps(sync_config, indent=2))
-
-own_misp = PyMISP(url=own_url, key=own_api_key, ssl=own_verify)
-response = own_misp.import_server(sync_config)
-
-if 'errors' in response:
-    print('Sumething went wrong:')
-    print(json.dumps(response, indent=2))
-    sys.exit(1)
-else:
-    print('Sucessfully added the sync config:')
-    print(json.dumps(response, indent=2))