Description
With the latest change in cortexutils see attached files observable in the gui
but when I'm going to import the observable I have an attributecheckingerror
message: "[Invalid format for attachment: FSeq(List(FObject(Map(name -> FString(efdc94e9b627fa760c88d61ce6ec8ba0388224938725c37a33b5533f33a599fb), size -> FNumber(56320.0), id -> FString(efdc94e9b627fa760c88d61ce6ec8ba0388224938725c37a33b5533f33a599fb), contentType -> FString(application/octet-stream), hashes -> FSeq(List(FString(efdc94e9b627fa760c88d61ce6ec8ba0388224938725c37a33b5533f33a599fb), FString(5054c2793f027a8b3c3a7eb5d21f7ae1b14035f4), FString(df100c2a6d13f5d413eed98345681491))))))), expected file (file)]"
Same workflow works fine in TH3
A sample analyzer that creates files attachments can be found here:
https://gist.github.com/dadokkio/a51d2d9f92c92395128596eaf120ac2e