search

DefensePointSecurity / threat_note

DPS' Lightweight Investigation Notebook
Apache License 2.0
423 stars 97 forks source link

Relationship info supercedes queried object info #141

Open k3vb0t opened 8 years ago

k3vb0t commented 8 years ago

It looks like when you add a relationship(ex: domian -> ip) the information returned when querying the IP returns information for the first relationship in the table(and vice versa).

screen shot 2016-02-15 at 12 50 16 pm screen shot 2016-02-15 at 12 49 55 pm screen shot 2016-02-15 at 12 54 02 pm

Also, I couldn't figure out how to remove a relationship, am I just missing the obvious?

k3vb0t commented 8 years ago
The Relationship table would probably be a good place to have a link to pivot to that objects page actually, since I just accidentally tried to click, it to no avail.
brianwarehime commented 8 years ago

Hey, sorry for the late response, been swamped. There isn't a way to remove a relationship just yet, but, I think with our new proposed database structure, we'll have this sorted out. I agree that in the relationships table should have a link to the actual indicators page that has a relationship with.

k3vb0t commented 8 years ago

No worries, I know how it goes. Thanks for looking into it.

k3vb0t commented 8 years ago

Seems like this is still a thing It actually, IMO throws off the true relationships. Upon linkage, the data about each entity becomes the relationship data, and loses the data about the entity itself. I.E: I add 8.8.8.8 and then add google.com, I link them (obv) but once I do that, the data for the original entity merges into the relational identity, and gives up it's original properties.

pivot points off of each entry would be great, is what I mean :)