def source_mapping(self, indicator):
        """To map cofense source with sentinel source for microsoft sentinel indicator data."""
        response_source = indicator.get("attributes", {}).get("threat_source", "")
        splitted_source = response_source.split(":")
        source = None
        if splitted_source[0].lower().strip() != SENTINEL_SOURCE_PREFIX.split(":")[0].lower().strip():
            source = COFENSE_SOURCE_PREFIX + response_source
        return source
To map cofense source with sentinel source for microsoft sentinel indicator data.
Solutions/CofenseTriage/Data Connectors/CofenseTriageDataConnector/CofenseBasedIndicatorCreator/cofense_to_sentinel_mapping.py