feat(stix_export): wire fingerprint bounties through all endpoints + tests
Remaining files from the fingerprint-bounties + characterizes-SRO commit: misp_export, repository, bounties mixin, all 4 router endpoints, and test suite updates. Prerequisite: previous commit added _extract_fingerprint_bounty_data and the stix_export changes.
This commit is contained in:
@@ -394,6 +394,27 @@ class BaseRepository(ABC):
|
||||
"""
|
||||
raise NotImplementedError
|
||||
|
||||
async def get_fingerprint_bounties_by_ip(
|
||||
self, ip: str
|
||||
) -> list[dict[str, Any]]:
|
||||
"""Return all fingerprint bounties for *ip* with parsed payload dicts.
|
||||
|
||||
Filters to ``bounty_type='fingerprint'``. Each returned dict has the
|
||||
standard Bounty columns plus a decoded ``payload`` dict.
|
||||
"""
|
||||
raise NotImplementedError
|
||||
|
||||
async def get_all_fingerprint_bounties_for_export(
|
||||
self,
|
||||
) -> dict[str, list[dict[str, Any]]]:
|
||||
"""Return ``{attacker_ip: [bounty_dict, ...]}`` for all fingerprint
|
||||
bounties in the database.
|
||||
|
||||
Used by fleet exports to attach per-attacker fingerprint bounties
|
||||
(JARM hashes, HTTP quirks) without N+1 queries.
|
||||
"""
|
||||
raise NotImplementedError
|
||||
|
||||
async def upsert_observed_attachment(
|
||||
self,
|
||||
*,
|
||||
|
||||
Reference in New Issue
Block a user