From 3029c919150dd9c4be414a16506b8bf5dff8a00f Mon Sep 17 00:00:00 2001 From: d1vious Date: Tue, 1 Feb 2022 14:02:30 -0500 Subject: [PATCH 1/2] fixes TR-1309 --- bin/generate.py | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/bin/generate.py b/bin/generate.py index bc5d1f9588..9adc60c58b 100644 --- a/bin/generate.py +++ b/bin/generate.py @@ -428,13 +428,17 @@ def add_rba(detection): risk_object['risk_object_type'] = 'system' risk_object['risk_object_field'] = entity['name'] - risk_object['risk_score'] = detection['tags']['risk_score'] + if (detection['tags']['risk_score']): + risk_object['risk_score'] = detection['tags']['risk_score'] + else: + risk_object['risk_score'] = 0 risk_objects.append(risk_object) # if is not a system or user, it is a threat object else: risk_object['threat_object_field'] = entity['name'] risk_object['threat_object_type'] = entity['type'].lower() + risk_object['risk_score'] = 0 risk_objects.append(risk_object) continue From 23fef2c5fc049780be5621364879cc8dfa31a0bf Mon Sep 17 00:00:00 2001 From: patel-bhavin Date: Wed, 2 Feb 2022 12:17:46 -0800 Subject: [PATCH 2/2] jinja change --- bin/generate.py | 6 +----- bin/jinja2_templates/savedsearches.j2 | 1 + 2 files changed, 2 insertions(+), 5 deletions(-) diff --git a/bin/generate.py b/bin/generate.py index 9adc60c58b..bc5d1f9588 100644 --- a/bin/generate.py +++ b/bin/generate.py @@ -428,17 +428,13 @@ def add_rba(detection): risk_object['risk_object_type'] = 'system' risk_object['risk_object_field'] = entity['name'] - if (detection['tags']['risk_score']): - risk_object['risk_score'] = detection['tags']['risk_score'] - else: - risk_object['risk_score'] = 0 + risk_object['risk_score'] = detection['tags']['risk_score'] risk_objects.append(risk_object) # if is not a system or user, it is a threat object else: risk_object['threat_object_field'] = entity['name'] risk_object['threat_object_type'] = entity['type'].lower() - risk_object['risk_score'] = 0 risk_objects.append(risk_object) continue diff --git a/bin/jinja2_templates/savedsearches.j2 b/bin/jinja2_templates/savedsearches.j2 index 77359896c7..38aecc2169 100644 --- a/bin/jinja2_templates/savedsearches.j2 +++ b/bin/jinja2_templates/savedsearches.j2 @@ -49,6 +49,7 @@ action.escu.analytic_story = {{ detection.tags.analytic_story | tojson }} action.risk = 1 action.risk.param._risk_message = {{ detection.risk_message }} action.risk.param._risk = {{ detection.risk | tojson }} +action.risk.param._risk_score = 0 action.risk.param.verbose = 0 {% endif %} {% else %}