Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Bug] MSDefender Responder has no module named cortexutils #1107

Closed
louismaxx opened this issue Jun 24, 2022 · 0 comments
Closed

[Bug] MSDefender Responder has no module named cortexutils #1107

louismaxx opened this issue Jun 24, 2022 · 0 comments
Assignees
Labels
category:bug Issue is related to a bug
Milestone

Comments

@louismaxx
Copy link
Contributor

Describe the bug
The docker responders for MSDefender can't start due to a missing dependency. (So far, only tested FullVirusScan & PushIOCAlert)

To Reproduce
Steps to reproduce the behavior:

  1. Enable MSDefenderforEndpoints Docker responders
  2. Launch responder from TheHive

Expected behavior
Execution of the responder : launching VirusScan on a device, Pushing an IOC in Alert mode

Complementary information
error_msdefender

Work environment

  • Server OS: Ubuntu 22.04
  • Cortex version: [Docker] v3.1.6-1
    • Cortex Analyzer/Responder name: MSDefenderforEndpoints
    • Cortex Analyzer/Responder version: 1.0
  • TheHive version : 5.0.8-1
To-om added a commit that referenced this issue Oct 7, 2022
@To-om To-om closed this as completed Oct 7, 2022
@To-om To-om self-assigned this Oct 7, 2022
@To-om To-om added the category:bug Issue is related to a bug label Oct 8, 2022
@To-om To-om added this to the 3.2.3 milestone Nov 9, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
category:bug Issue is related to a bug
Projects
None yet
Development

No branches or pull requests

2 participants