Filter out irrelevant injects when creating a simulation from an OCTI report

[jborozco]

Use case

When you simulate a report, the attack patterns will be used to choose the injects to add into the scenario, regardless of the targeted OS. This is a big problem because you might end up with injects targeted to OS that are not relevant to the source report.

Current Workaround

Edit your simulation manually

Proposed Solution

Solution 1. In OCTI be able to select parameters to filter out some injects:

• System
• other ? (TBD)

Solution 2. Use AI to analyse a report and filter out automatcally injects