evaluate file_extracted_section after loop

CybercentreCanada · May 10, 2022 · ce3db6a · ce3db6a
1 parent 4ba8cb8
commit ce3db6a
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/suricata_/suricata_.py b/suricata_/suricata_.py
@@ -337,10 +337,10 @@ def execute(self, request):
                         # We've hit our limit
                         pass
 
-            # Report a null score to indicate that files were extracted. If no sigs hit, it's not clear
-            # where the extracted files came from
-            if file_extracted_section.body:
-                result.add_section(file_extracted_section)
+        # Report a null score to indicate that files were extracted. If no sigs hit, it's not clear
+        # where the extracted files came from
+        if file_extracted_section.body:
+            result.add_section(file_extracted_section)
 
         # Add tags for the domains, urls, and IPs we've discovered
         root_section = ResultSection("Discovered IOCs", parent=result)