github-germ comments

Results 153 comments of


                                            github-germ

Support: New Correlations Engine first recorrelate failed

These use cases do not revise distribution/sharing_group. Would it make sense, and would it be difficult to add logic to bypass correlation processing when no change is made in distribution?

Support: New Correlations Engine first recorrelate failed

Cool!! I've included the revised `Event.php` in my Dev docker container. I will monitor, and report back.

complex_query using and_parameters does not return expected result

Was there any resolution? Thanks.

The template (vulnerability) doesn't have the object_relation (vulnerable_configuration) you're trying to add.

During my coffee wake-up, I just noticed a similar `WARNING` in my morning log file review. Might this have a similar root cause and fix? We're on 2.4.159. ``` 2022-07-29T10:17:04Z...

The template (vulnerability) doesn't have the object_relation (vulnerable_configuration) you're trying to add.

Puzzled... The `MISPEvent` retrieved via the `pymisp.search`, which triggers that `WARNING`, contains only `MISPAttribute`.

The template (vulnerability) doesn't have the object_relation (vulnerable_configuration) you're trying to add.

We created the event with our own app sourced from data from a premium feed provider. Once again there are no objects in that event. Are you saying that either...

The template (vulnerability) doesn't have the object_relation (vulnerable_configuration) you're trying to add.

Aha, it's from an enrichment getting included into the event. Tricky... Thanks! And indeed, there's no `ip-dst` defined ``` $ grep ip-dst python3.8/site-packages/pymisp/data/misp-objects/objects/ip-api-address/definition.json $ ``` ``` mysql> select * from...