Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Zvelo]: Connector stops working if data is invalid or incorrectly formatted #3372

Open
romain-filigran opened this issue Jan 31, 2025 · 0 comments
Assignees
Labels
bug use for describing something not working as expected
Milestone

Comments

@romain-filigran
Copy link
Member

Description

We've observed that some of the indicators provided by Zvelo can be incorrectly formatted, causing the connector to stop with the following exception (the problem comes from the URL formatting).

Traceback (most recent call last): File "/opt/opencti-connector-zvelo/zvelo_connector/connector.py", line 132, in process_message stix_objects = self._collect_intelligence(from_date=last_run) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/opencti-connector-zvelo/zvelo_connector/connector.py", line 77, in _collect_intelligence self.converter_to_stix.convert_phish_to_stix(entity) File "/opt/opencti-connector-zvelo/zvelo_connector/converter_to_stix.py", line 287, in convert_phish_to_stix stix_indicator = stix2.Indicator( ^^^^^^^^^^^^^^^^ File "/usr/local/lib/python3.12/site-packages/stix2/v21/sdo.py", line 250, in __init__ super(Indicator, self).__init__(*args, **kwargs) File "/usr/local/lib/python3.12/site-packages/stix2/base.py", line 232, in __init__ self._check_object_constraints() File "/usr/local/lib/python3.12/site-packages/stix2/v21/sdo.py", line 270, in _check_object_constraints raise InvalidValueError(self.__class__, 'pattern', str(errors[0])) stix2.exceptions.InvalidValueError: Invalid value for Indicator 'pattern': FAIL: Error found at line 1:13. mismatched input ''' expecting {IntNegLiteral, IntPosLiteral, FloatNegLiteral, FloatPosLiteral, HexLiteral, BinaryLiteral, StringLiteral, BoolLiteral, TimestampLiteral}

Environment

  1. OpenCTI version: 6.4.10
@romain-filigran romain-filigran added bug use for describing something not working as expected needs triage use to identify issue needing triage from Filigran Product team and removed needs triage use to identify issue needing triage from Filigran Product team labels Jan 31, 2025
@romain-filigran romain-filigran added this to the Bugs backlog milestone Jan 31, 2025
@helene-nguyen helene-nguyen self-assigned this Feb 3, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug use for describing something not working as expected
Projects
None yet
Development

No branches or pull requests

2 participants