Yara support

TinyActive · May 1, 2024 · dbc34b9 · dbc34b9
1 parent ceb0a36
commit dbc34b9
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 0 deletions.
diff --git a/.github/workflows/docker-image.yml b/.github/workflows/docker-image.yml
@@ -224,3 +224,8 @@ jobs:
         docker buildx create --use
         echo "${{ secrets.DOCKER_PASSWORD }}" | docker login -u "${{ secrets.DOCKER_USERNAME }}" --password-stdin
         cd internal-enrichment/dnstwist && docker buildx build --platform linux/amd64,linux/arm64 -t vouu/dnstwist-dns:30-04-2024 . --push
+    - name: Build and Push Docker Image for internal-enrichment/yara
+      run: |
+        docker buildx create --use
+        echo "${{ secrets.DOCKER_PASSWORD }}" | docker login -u "${{ secrets.DOCKER_USERNAME }}" --password-stdin
+        cd internal-enrichment/yara && docker buildx build --platform linux/amd64,linux/arm64 -t vouu/internal-yara-dns:30-04-2024 . --push
diff --git a/internal-enrichment/intezer-sandbox/src/intezer_sandbox.py b/internal-enrichment/intezer-sandbox/src/intezer_sandbox.py
@@ -162,6 +162,8 @@ def _process_observable(self, observable):
             )
 
     def _process_message(self, data: Dict):
+        if "opencti_entity_id" not in data:
+            raise ValueError("Key 'opencti_entity_id' not found in data.")
         observable = data["opencti_entity_id"]
 
         # Extract TLP