more mappings

intelowlproject · Oct 23, 2024 · 5cd8f3a · 5cd8f3a
1 parent b175d72
commit 5cd8f3a
Showing 1 changed file with 16 additions and 0 deletions.
diff --git a/api_app/analyzers_manager/observable_analyzers/talos.py b/api_app/analyzers_manager/observable_analyzers/talos.py
@@ -58,6 +58,22 @@ def update(cls) -> bool:
 
         return False
 
+    def _do_create_data_model(self):
+        return super()._do_create_data_model() and self.report.report.get(
+            "found", False
+        )
+
+    def _update_data_model(self, data_model):
+        super()._update_data_model(data_model)
+        found = self.report.report.get("found", False)
+        if found:
+            data_model.external_references.append(
+                f"https://www.talosintelligence.com/reputation_center/lookup?search={self.report.job.observable_name}"
+            )
+            data_model.evaluation = (
+                self.report.data_model_class.EVALUATIONS.MALICIOUS.value
+            )
+
     @classmethod
     def _monkeypatch(cls):
         patches = [