@@ -105,6 +105,7 @@ def __init__(self, opencti):
105105 x_opencti_cvss_integrity_impact
106106 x_opencti_cvss_availability_impact
107107 x_opencti_cvss_confidentiality_impact
108+ x_opencti_cisa_kev
108109 importFiles {
109110 edges {
110111 node {
@@ -283,6 +284,7 @@ def create(self, **kwargs):
283284 x_opencti_cvss_base_score = kwargs .get ("x_opencti_cvss_base_score" , None )
284285 x_opencti_cvss_base_severity = kwargs .get ("x_opencti_cvss_base_severity" , None )
285286 x_opencti_cvss_attack_vector = kwargs .get ("x_opencti_cvss_attack_vector" , None )
287+ x_opencti_cisa_kev = kwargs .get ("x_opencti_cisa_kev" , None )
286288 x_opencti_cvss_integrity_impact = kwargs .get (
287289 "x_opencti_cvss_integrity_impact" , None
288290 )
@@ -333,6 +335,7 @@ def create(self, **kwargs):
333335 "x_opencti_cvss_integrity_impact" : x_opencti_cvss_integrity_impact ,
334336 "x_opencti_cvss_availability_impact" : x_opencti_cvss_availability_impact ,
335337 "x_opencti_cvss_confidentiality_impact" : x_opencti_cvss_confidentiality_impact ,
338+ "x_opencti_cisa_kev" : x_opencti_cisa_kev ,
336339 "x_opencti_stix_ids" : x_opencti_stix_ids ,
337340 "x_opencti_workflow_id" : x_opencti_workflow_id ,
338341 "update" : update ,
@@ -437,6 +440,11 @@ def import_from_stix2(self, **kwargs):
437440 stix_object ["x_opencti_workflow_id" ] = (
438441 self .opencti .get_attribute_in_extension ("workflow_id" , stix_object )
439442 )
443+ if "x_opencti_cisa_kev" not in stix_object :
444+ stix_object ["x_opencti_cisa_kev" ] = (
445+ self .opencti .get_attribute_in_extension ("cisa_kev" , stix_object )
446+ )
447+
440448 return self .create (
441449 stix_id = stix_object ["id" ],
442450 createdBy = (
@@ -518,6 +526,11 @@ def import_from_stix2(self, **kwargs):
518526 if "x_opencti_workflow_id" in stix_object
519527 else None
520528 ),
529+ x_opencti_cisa_kev = (
530+ stix_object ["x_opencti_cisa_kev" ]
531+ if "x_opencti_cisa_kev" in stix_object
532+ else None
533+ ),
521534 update = update ,
522535 )
523536 else :
0 commit comments