Azure sentinel Python脚本ISU的MISP威胁指示器

Question

我试图使用github上的azure默认文档将威胁指示器从我的MISP实例推送到azure sentinel：https://github.com/microsoftgraph/security-api-solutions/tree/master/Samples/MISP

我按照python3的文档执行了这些步骤脚本.py正在给我以下错误：

Traceback (most recent call last):
  File "script.py", line 100, in <module>
    main()
  File "script.py", line 96, in main
    request_manager.handle_indicator(request_body)
  File "/var/azure/sentinel/security-api-solutions/Samples/MISP/RequestManager.py", line 197, in handle_indicator
    self._post_to_graph()
  File "/var/azure/sentinel/security-api-solutions/Samples/MISP/RequestManager.py", line 184, in _post_to_graph
    self._log_post(response)
  File "/var/azure/sentinel/security-api-solutions/Samples/MISP/RequestManager.py", line 98, in _log_post
    if len(response['value']) > 0:
KeyError: 'value'

这是在中调用内置方法请求管理器.py用于将指标发布到Graph API

Answer 1

不知道Python问题的答案，但您是否尝试过对应用程序直接使用威胁情报平台连接器？它现在正在公开预览中。你知道吗