Skip to content

[Bug] Import file observable in gui generate error #1697

Closed
@dadokkio

Description

@dadokkio

With the latest change in cortexutils see attached files observable in the gui
image

but when I'm going to import the observable I have an attributecheckingerror
image

message: "[Invalid format for attachment: FSeq(List(FObject(Map(name -> FString(efdc94e9b627fa760c88d61ce6ec8ba0388224938725c37a33b5533f33a599fb), size -> FNumber(56320.0), id -> FString(efdc94e9b627fa760c88d61ce6ec8ba0388224938725c37a33b5533f33a599fb), contentType -> FString(application/octet-stream), hashes -> FSeq(List(FString(efdc94e9b627fa760c88d61ce6ec8ba0388224938725c37a33b5533f33a599fb), FString(5054c2793f027a8b3c3a7eb5d21f7ae1b14035f4), FString(df100c2a6d13f5d413eed98345681491))))))), expected file (file)]"

Same workflow works fine in TH3

A sample analyzer that creates files attachments can be found here:
https://gist.github.com/dadokkio/a51d2d9f92c92395128596eaf120ac2e

Metadata

Metadata

Assignees

Labels

TheHive4TheHive4 related issuesbug

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions