In the ESET connector, if an atomic indicator comes in as a URL, Domain-Name, or IPv4 Address, the upstream STIX doesn't have the x_opencti_main_observable_type on it. It also doesn't automatically get set during ingest. So, in the case of supported indicator types, add it to the bundle before ingest.
Checklist
[x] I consider the submitted work as finished
[x] I tested the code for its functionality using different use cases
[ ] I added/update the relevant documentation (either on github or on notion)
[ ] Where necessary I refactored code to improve the overall quality
Proposed changes
In the ESET connector, if an atomic indicator comes in as a URL, Domain-Name, or IPv4 Address, the upstream STIX doesn't have the
x_opencti_main_observable_type
on it. It also doesn't automatically get set during ingest. So, in the case of supported indicator types, add it to the bundle before ingest.Checklist