[client] Add EPSS Support for Vulnerability Entity (#3568)

Author: ValentinBouzinFiligran

pycti/entities/opencti_stix_core_object.py

@@ -359,6 +359,9 @@ def __init__(self, opencti, file):
                 x_opencti_cvss_attack_vector
                 x_opencti_cvss_integrity_impact
                 x_opencti_cvss_availability_impact
+                x_opencti_cisa_kev
+                x_opencti_epss_score
+                x_opencti_epss_percentile
             }
             ... on Incident {
                 name
@@ -1023,6 +1026,9 @@ def __init__(self, opencti, file):
                 x_opencti_cvss_attack_vector
                 x_opencti_cvss_integrity_impact
                 x_opencti_cvss_availability_impact
+                x_opencti_cisa_kev
+                x_opencti_epss_score
+                x_opencti_epss_percentile
             }
             ... on Incident {
                 name

pycti/entities/opencti_stix_domain_object.py

@@ -482,6 +482,9 @@ def __init__(self, opencti, file):
                 x_opencti_cvss_attack_vector
                 x_opencti_cvss_integrity_impact
                 x_opencti_cvss_availability_impact
+                x_opencti_cisa_kev
+                x_opencti_epss_score
+                x_opencti_epss_percentile
             }
             ... on Incident {
                 name
@@ -977,6 +980,9 @@ def __init__(self, opencti, file):
                 x_opencti_cvss_attack_vector
                 x_opencti_cvss_integrity_impact
                 x_opencti_cvss_availability_impact
+                x_opencti_cisa_kev
+                x_opencti_epss_score
+                x_opencti_epss_percentile
             }
             ... on Incident {
                 name

pycti/entities/opencti_stix_object_or_stix_relationship.py

@@ -298,6 +298,9 @@ def __init__(self, opencti):
                 x_opencti_cvss_attack_vector
                 x_opencti_cvss_integrity_impact
                 x_opencti_cvss_availability_impact
+                x_opencti_cisa_kev
+                x_opencti_epss_score
+                x_opencti_epss_percentile
             }
             ... on Incident {
                 name

pycti/entities/opencti_vulnerability.py

@@ -106,6 +106,8 @@ def __init__(self, opencti):
             x_opencti_cvss_availability_impact
             x_opencti_cvss_confidentiality_impact
             x_opencti_cisa_kev
+            x_opencti_epss_score
+            x_opencti_epss_percentile
             importFiles {
                 edges {
                     node {
@@ -285,6 +287,8 @@ def create(self, **kwargs):
         x_opencti_cvss_base_severity = kwargs.get("x_opencti_cvss_base_severity", None)
         x_opencti_cvss_attack_vector = kwargs.get("x_opencti_cvss_attack_vector", None)
         x_opencti_cisa_kev = kwargs.get("x_opencti_cisa_kev", None)
+        x_opencti_epss_score = kwargs.get("x_opencti_epss_score", None)
+        x_opencti_epss_percentile = kwargs.get("x_opencti_epss_percentile", None)
         x_opencti_cvss_integrity_impact = kwargs.get(
             "x_opencti_cvss_integrity_impact", None
         )
@@ -336,6 +340,8 @@ def create(self, **kwargs):
                         "x_opencti_cvss_availability_impact": x_opencti_cvss_availability_impact,
                         "x_opencti_cvss_confidentiality_impact": x_opencti_cvss_confidentiality_impact,
                         "x_opencti_cisa_kev": x_opencti_cisa_kev,
+                        "x_opencti_epss_score": x_opencti_epss_score,
+                        "x_opencti_epss_percentile": x_opencti_epss_percentile,
                         "x_opencti_stix_ids": x_opencti_stix_ids,
                         "x_opencti_workflow_id": x_opencti_workflow_id,
                         "update": update,
@@ -444,6 +450,16 @@ def import_from_stix2(self, **kwargs):
                 stix_object["x_opencti_cisa_kev"] = (
                     self.opencti.get_attribute_in_extension("cisa_kev", stix_object)
                 )
+            if "x_opencti_epss_score" not in stix_object:
+                stix_object["x_opencti_epss_score"] = (
+                    self.opencti.get_attribute_in_extension("epss_score", stix_object)
+                )
+            if "x_opencti_epss_percentile" not in stix_object:
+                stix_object["x_opencti_epss_percentile"] = (
+                    self.opencti.get_attribute_in_extension(
+                        "epss_percentile", stix_object
+                    )
+                )
 
             return self.create(
                 stix_id=stix_object["id"],
@@ -531,6 +547,16 @@ def import_from_stix2(self, **kwargs):
                     if "x_opencti_cisa_kev" in stix_object
                     else None
                 ),
+                x_opencti_epss_score=(
+                    stix_object["x_opencti_epss_score"]
+                    if "x_opencti_epss_score" in stix_object
+                    else None
+                ),
+                x_opencti_epss_percentile=(
+                    stix_object["x_opencti_epss_percentile"]
+                    if "x_opencti_epss_percentile" in stix_object
+                    else None
+                ),
                 update=update,
             )
         else: