dfir-iris / iris-web

Collaborative Incident Response platform

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

[BUG] Call wrong hook in batch update alerts

quicpx opened this issue · comments

Describe the bug
As reported in discord:
https://discord.com/channels/922879298786975774/922883501974515733/1222823882097033339

To Reproduce
Steps to reproduce the behavior:

  • Setup module IrisWebHooks with 2 endpoint: 1 for all_create hook and 1 for all_updated hook
  • Bulk close alerts by the select function, select multiple alerts then close them by both Close with note or Set status to Closed.
  • IRIS trigger to the all_create endpoint instead of sending to all_update endpoint.

Expected behavior
IRIS trigger to the all_update endpoint.

Additional context
@whikernel confirmed bug at https://discord.com/channels/922879298786975774/922883501974515733/1222824802834710602