diff --git a/docs/source/google_secops.md b/docs/source/google_secops.md index 3483749..1d138fb 100644 --- a/docs/source/google_secops.md +++ b/docs/source/google_secops.md @@ -82,9 +82,9 @@ Each event includes: "detection_fields": [ {"key": "dmarc_disposition", "value": "none"}, {"key": "dmarc_policy", "value": "none"}, - {"key": "dmarc_pass", "value": "false"}, - {"key": "spf_aligned", "value": "false"}, - {"key": "dkim_aligned", "value": "false"} + {"key": "dmarc_pass", "value": false}, + {"key": "spf_aligned", "value": false}, + {"key": "dkim_aligned", "value": false} ] }], "additional": { @@ -93,7 +93,7 @@ Each event includes: {"key": "report_id", "value": "b043f0e264cf4ea995e93765242f6dfb"}, {"key": "report_begin", "value": "2018-06-19 00:00:00"}, {"key": "report_end", "value": "2018-06-19 23:59:59"}, - {"key": "message_count", "value": "1"}, + {"key": "message_count", "value": 1}, {"key": "interval_begin", "value": "2018-06-19 00:00:00"}, {"key": "interval_end", "value": "2018-06-19 23:59:59"}, {"key": "envelope_from", "value": "example.com"} @@ -164,7 +164,7 @@ Each event includes: {"key": "report_begin", "value": "2016-04-01T00:00:00Z"}, {"key": "report_end", "value": "2016-04-01T23:59:59Z"}, {"key": "result_type", "value": "certificate-expired"}, - {"key": "failed_session_count", "value": "100"} + {"key": "failed_session_count", "value": 100} ] }, "principal": { diff --git a/parsedmarc/google_secops.py b/parsedmarc/google_secops.py index b61ad50..6c26040 100644 --- a/parsedmarc/google_secops.py +++ b/parsedmarc/google_secops.py @@ -206,9 +206,9 @@ class GoogleSecOpsClient: "detection_fields": [ {"key": "dmarc_disposition", "value": disposition}, {"key": "dmarc_policy", "value": policy_published["p"]}, - {"key": "dmarc_pass", "value": str(dmarc_pass).lower()}, - {"key": "spf_aligned", "value": str(spf_aligned).lower()}, - {"key": "dkim_aligned", "value": str(dkim_aligned).lower()}, + {"key": "dmarc_pass", "value": dmarc_pass}, + {"key": "spf_aligned", "value": spf_aligned}, + {"key": "dkim_aligned", "value": dkim_aligned}, ], } ], @@ -218,7 +218,7 @@ class GoogleSecOpsClient: {"key": "report_id", "value": report_metadata["report_id"]}, {"key": "report_begin", "value": report_metadata["begin_date"]}, {"key": "report_end", "value": report_metadata["end_date"]}, - {"key": "message_count", "value": str(count)}, + {"key": "message_count", "value": count}, {"key": "interval_begin", "value": interval_begin}, {"key": "interval_end", "value": interval_end}, {"key": "envelope_from", "value": envelope_from}, @@ -474,7 +474,7 @@ class GoogleSecOpsClient: {"key": "report_begin", "value": begin_date}, {"key": "report_end", "value": end_date}, {"key": "result_type", "value": failure.get("result_type", "")}, - {"key": "failed_session_count", "value": str(failure.get("failed_session_count", 0))}, + {"key": "failed_session_count", "value": failure.get("failed_session_count", 0)}, ] }, }