Update all indicators

VirusTotal · Jul 10, 2024 · ea9107d · ea9107d
1 parent c8ded92
commit ea9107d
Showing 1 changed file with 24 additions and 9 deletions.
diff --git a/Packs/VirusTotal/Integrations/VirusTotalV3/VirusTotalV3.py b/Packs/VirusTotal/Integrations/VirusTotalV3/VirusTotalV3.py
@@ -163,14 +163,19 @@ def to_context(self):
         context = super().to_context()
         file_context = context[super().CONTEXT_PATH]
 
+        file_context['VTVendors'] = {}
+
         if self.count_vt_vendors_which_flagged_malicious is not None:
-            file_context['Count VT Vendors Which Flagged Malicious'] = self.count_vt_vendors_which_flagged_malicious
+            file_context['VTVendors']['EngineDetections'] = self.count_vt_vendors_which_flagged_malicious
 
         if self.vt_vendors_which_flagged_malicious is not None:
-            file_context['VT Vendors Which Flagged Malicious'] = self.vt_vendors_which_flagged_malicious
+            file_context['VTVendors']['EngineVendors'] = self.vt_vendors_which_flagged_malicious
 
         if self.vt_detection_names is not None:
-            file_context['VT Detection Names'] = self.vt_detection_names
+            file_context['VTVendors']['EngineDetectionNames'] = self.vt_detection_names
+
+        if not file_context['VTVendors']:
+            file_context.pop('VTVendors', None)
 
         return context
 
@@ -201,14 +206,19 @@ def to_context(self):
         context = super().to_context()
         file_context = context[super().CONTEXT_PATH]
 
+        file_context['VTVendors'] = {}
+
         if self.count_vt_vendors_which_flagged_malicious is not None:
-            file_context['Count VT Vendors Which Flagged Malicious'] = self.count_vt_vendors_which_flagged_malicious
+            file_context['VTVendors']['EngineDetections'] = self.count_vt_vendors_which_flagged_malicious
 
         if self.vt_vendors_which_flagged_malicious is not None:
-            file_context['VT Vendors Which Flagged Malicious'] = self.vt_vendors_which_flagged_malicious
+            file_context['VTVendors']['EngineVendors'] = self.vt_vendors_which_flagged_malicious
 
         if self.vt_detection_names is not None:
-            file_context['VT Detection Names'] = self.vt_detection_names
+            file_context['VTVendors']['EngineDetectionNames'] = self.vt_detection_names
+
+        if not file_context['VTVendors']:
+            file_context.pop('VTVendors', None)
 
         return context
 
@@ -239,14 +249,19 @@ def to_context(self):
         context = super().to_context()
         file_context = context[super().CONTEXT_PATH]
 
+        file_context['VTVendors'] = {}
+
         if self.count_vt_vendors_which_flagged_malicious is not None:
-            file_context['Count VT Vendors Which Flagged Malicious'] = self.count_vt_vendors_which_flagged_malicious
+            file_context['VTVendors']['EngineDetections'] = self.count_vt_vendors_which_flagged_malicious
 
         if self.vt_vendors_which_flagged_malicious is not None:
-            file_context['VT Vendors Which Flagged Malicious'] = self.vt_vendors_which_flagged_malicious
+            file_context['VTVendors']['EngineVendors'] = self.vt_vendors_which_flagged_malicious
 
         if self.vt_detection_names is not None:
-            file_context['VT Detection Names'] = self.vt_detection_names
+            file_context['VTVendors']['EngineDetectionNames'] = self.vt_detection_names
+
+        if not file_context['VTVendors']:
+            file_context.pop('VTVendors', None)
 
         return context