cowrie/wardenfiler: Only send accepted credentials with the Intrusion.UserCompromise event

cowrie/wardenfiler.py

@@ -400,7 +400,8 @@ class Output(cowrie.core.output.Output):
                         attach["ContentEncoding"] = "base64"
                     event["Attach"] = [attach]
                 if self.sessions[s]["credentials"]:
-                    event["Credentials"] = self.sessions[s]["credentials"]
+                    accepted_creds = [ c for c in self.sessions[s]["credentials"] if "Accepted" in c ]
+                    event["Credentials"] = list(accepted_creds)
                 self.save_event(event)
             
             if s in self.sessions: