[misp] Fix TLP AMBER + STRICT

OpenCTI-Platform · Jan 12, 2023 · 9bacd00 · 9bacd00
1 parent fd5d74b
commit 9bacd00
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/external-import/misp-feed/src/misp-feed.py b/external-import/misp-feed/src/misp-feed.py
@@ -263,6 +263,8 @@ def _resolve_markings(self, tags, with_default=True):
                 markings.append(stix2.TLP_GREEN)
             if tag["name"] == "tlp:amber":
                 markings.append(stix2.TLP_AMBER)
+            if tag["name"] == "tlp:amber+strict":
+                markings.append(stix2.TLP_AMBER)
             if tag["name"] == "tlp:red":
                 markings.append(stix2.TLP_RED)
         if len(markings) == 0 and with_default:
@@ -574,6 +576,7 @@ def _resolve_tags(self, tags):
                 tag["name"] != "tlp:white"
                 and tag["name"] != "tlp:green"
                 and tag["name"] != "tlp:amber"
+                and tag["name"] != "tlp:amber+strict"
                 and tag["name"] != "tlp:red"
                 and not tag["name"].startswith("misp-galaxy:threat-actor")
                 and not tag["name"].startswith("misp-galaxy:mitre-threat-actor")

diff --git a/external-import/misp/src/misp.py b/external-import/misp/src/misp.py
@@ -2022,6 +2022,8 @@ def resolve_markings(self, tags, with_default=True):
                 markings.append(stix2.TLP_GREEN)
             if tag["name"] == "tlp:amber":
                 markings.append(stix2.TLP_AMBER)
+            if tag["name"] == "tlp:amber+strict":
+                markings.append(stix2.TLP_AMBER)
             if tag["name"] == "tlp:red":
                 markings.append(stix2.TLP_RED)
         if len(markings) == 0 and with_default:
@@ -2039,6 +2041,7 @@ def resolve_tags(self, tags):
                 tag["name"] != "tlp:white"
                 and tag["name"] != "tlp:green"
                 and tag["name"] != "tlp:amber"
+                and tag["name"] != "tlp:amber+strict"
                 and tag["name"] != "tlp:red"
                 and not tag["name"].startswith("misp-galaxy:threat-actor")
                 and not tag["name"].startswith("misp-galaxy:mitre-threat-actor")