When using -m 10 all events get deleted on a new install (just imported all adversaries and reports for the last 200 days).
|
def clean_old_crowdstrike_events(self, max_age): |
Maybe switch to timestamp=["36500d", "{}d".format(max_age)] instead of the timestamp=[0, timestamp_max]?
When using
-m 10all events get deleted on a new install (just imported all adversaries and reports for the last 200 days).MISP-tools/cs_misp_import/importer.py
Line 199 in 16fde94
Maybe switch to
timestamp=["36500d", "{}d".format(max_age)]instead of thetimestamp=[0, timestamp_max]?