Merge branch 'development' of https://github.com/mmguero-dev/Malcolm …

…into v24.03.0_merge_cisagov
cisagov · Mar 5, 2024 · 411afbb · 411afbb
2 parents d10694e + b0356c8
commit 411afbb
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/shared/bin/zeek_threat_feed_utils.py b/shared/bin/zeek_threat_feed_utils.py
@@ -512,7 +512,9 @@ def ProcessMISP(
                 certainty = None
 
                 # determine if we're processing an event or an attribute
-                if 'info' in toParse:
+                if (('Event' in toParse) and isinstance(toParse['Event'], dict) and ('info' in toParse['Event'])) or (
+                    'info' in toParse
+                ):
                     # this is an event, which may contain an array of attributes
                     event = MISPEvent()
                     event.from_dict(**toParse)