Skip to content

Commit 380b17e

Browse files
committed
Always make threat objects
1 parent e787bfd commit 380b17e

File tree

1 file changed

+5
-0
lines changed

1 file changed

+5
-0
lines changed

contentctl/objects/abstract_security_content_objects/detection_abstract.py

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -299,6 +299,11 @@ def risk(self) -> list[dict[str, Any]]:
299299
risk_object['threat_object_field'] = entity.name
300300
risk_object['threat_object_type'] = "url"
301301
risk_objects.append(risk_object)
302+
303+
elif 'Attacker' in entity.role:
304+
risk_object['threat_object_field'] = entity.name
305+
risk_object['threat_object_field'] = entity.type.lower()
306+
risk_objects.append(risk_object)
302307

303308
else:
304309
risk_object['risk_object_type'] = 'other'

0 commit comments

Comments
 (0)