[client] Fix export of incidents

Author: Samuel Hassine

pycti/entities/opencti_x_opencti_incident.py

@@ -127,7 +127,7 @@ def list(self, **kwargs):
         )
         query = (
             """
-            query XOpenCTIIncidents($filters: [IncidentsFiltering], $search: String, $first: Int, $after: ID, $orderBy: IncidentsOrdering, $orderMode: OrderingMode) {
+            query XOpenCTIIncidents($filters: [IncidentsFiltering], $search: String, $first: Int, $after: ID, $orderBy: XOpenCTIIncidentsOrdering, $orderMode: OrderingMode) {
                 xOpenCTIIncidents(filters: $filters, search: $search, first: $first, after: $after, orderBy: $orderBy, orderMode: $orderMode) {
                     edges {
                         node {

pycti/utils/opencti_stix2.py

@@ -914,6 +914,12 @@ def generate_export(self, entity):
         if LocationTypes.has_value(entity["entity_type"]):
             entity["entity_type"] = "Location"
 
+        # Indicators
+        if "pattern" in entity and "x-opencti-hostname" in entity["pattern"]:
+            entity["pattern"] = entity["pattern"].replace(
+                "x-opencti-hostname", "domain-name"
+            )
+
         # Flatten
         if "objectLabel" in entity and len(entity["objectLabel"]) > 0:
             entity["labels"] = []
@@ -958,6 +964,11 @@ def generate_export(self, entity):
         if "externalReferences" in entity:
             del entity["externalReferences"]
             del entity["externalReferencesIds"]
+        if "hashes" in entity:
+            hashes = entity["hashes"]
+            entity["hashes"] = {}
+            for hash in hashes:
+                entity["hashes"][hash["algorithm"]] = hash["hash"]
 
         # Final
         entity["x_opencti_id"] = entity["id"]

setup.py

@@ -5,7 +5,7 @@
 from setuptools import setup
 from setuptools.command.install import install
 
-VERSION = "4.2.3"
+VERSION = "4.2.4"
 
 with open("README.md", "r") as fh:
     long_description = fh.read()