Skip to content
This repository was archived by the owner on Dec 5, 2025. It is now read-only.

Commit 976f39e

Browse files
author
Samuel Hassine
committed
[client] Fix attack pattern import
1 parent 723f940 commit 976f39e

File tree

1 file changed

+6
-2
lines changed

1 file changed

+6
-2
lines changed

pycti/entities/opencti_attack_pattern.py

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -336,15 +336,19 @@ def import_from_stix2(self, **kwargs):
336336
x_mitre_id = None
337337
if "x_mitre_id" in stix_object:
338338
x_mitre_id = stix_object["x_mitre_id"]
339-
if "external_references" in stix_object:
339+
elif "external_references" in stix_object:
340340
for external_reference in stix_object["external_references"]:
341341
if (
342342
external_reference["source_name"] == "mitre-attack"
343343
or external_reference["source_name"] == "mitre-pre-attack"
344344
or external_reference["source_name"] == "mitre-mobile-attack"
345345
or external_reference["source_name"] == "amitt-attack"
346346
):
347-
x_mitre_id = external_reference["external_id"]
347+
x_mitre_id = (
348+
external_reference["external_id"]
349+
if "external_id" in external_reference
350+
else None
351+
)
348352

349353
# TODO: Compatibility with OpenCTI 3.X to be REMOVED
350354
if "x_opencti_order" not in stix_object:

0 commit comments

Comments
 (0)