Skip to content

Need attach original mail #45

@ramocha

Description

@ramocha

Hi,
I installed and configure the Synapse with Office 365, its connect ok, it read the folder but when create the case fails with the following text

2020-01-20 12:44:18,269 :: INFO :: workflows.common.common.getConf starts
2020-01-20 12:44:18,572 :: INFO :: workflows.common.common.getConf starts
2020-01-20 12:44:29,178 :: INFO :: workflows.Ews2Case.connectEws starts
2020-01-20 12:44:29,179 :: INFO :: common.common.getConf starts
2020-01-20 12:44:29,180 :: INFO :: objects.EwsConnector. getAccount starts
2020-01-20 12:44:30,946 :: INFO :: objects.EwsConnector.scan starts
2020-01-20 12:44:33,357 :: INFO :: objects.TheHiveConnector.connect starts
2020-01-20 12:44:34,076 :: INFO :: objects.TheHiveConnector.searchCaseByDescription starts
2020-01-20 12:44:34,090 :: INFO :: objects.TheHiveConnector.getTaskIdByName starts
2020-01-20 12:44:34,109 :: INFO :: objects.TheHiveConnector.craftTaskLog starts
2020-01-20 12:44:34,109 :: INFO :: objects.TheHiveConnector.addTaskLog starts
2020-01-20 12:44:34,655 :: INFO :: objects.EwsConnector.markAsRead starts
2020-01-20 12:44:35,680 :: INFO :: objects.TempAttachment.getFileName starts
2020-01-20 12:44:35,681 :: INFO :: objects.TempAttachment.writeFile starts
2020-01-20 12:44:35,681 :: INFO :: objects.TheHiveConnector.addFileObservable starts
2020-01-20 12:44:35,682 :: ERROR :: Failed to create case from email
Traceback (most recent call last):
File "/home/cuckoo/TheHive/Synapse/Synapse/workflows/Ews2Case.py", line 103, in connectEws
comment)
File "/home/cuckoo/TheHive/Synapse/Synapse/workflows/objects/TheHiveConnector.py", line 160, in addFileObservable
message=comment
File "/usr/local/lib/python3.6/dist-packages/thehive4py/models.py", line 262, in init
self.data = [{'attachment': (os.path.basename(data[0]), open(data[0], 'rb'), magic.Magic(mime=True).from_file(data[0]))}]
TypeError: init() got an unexpected keyword argument 'mime'

The email in the folder have an msg file what this is the mail to analyze

I need make the msg as observable

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions