search

OpenCTI-Platform / connectors

OpenCTI Connectors
https://www.opencti.io
Apache License 2.0
341 stars 370 forks source link

[NIST CPE] Create Connector #519

Open TechBurn0ut opened 2 years ago

TechBurn0ut commented 2 years ago

Use case

In order to provide a consistent and standardized Tools SDOs, an automated connector that pulls in this kind of data set is needed. A consistent list is published by NIST as apart of the National Vulnerability Database as Common Platform Enumeration Database.

https://nvd.nist.gov/products/cpe

May also consider adding this functionality to the existing CVE Connector

Current Workaround

None

Proposed Solution

Implement a new connector for the CPE Dictionary that creates "Tools" SDOs based off the CPEs and creates relationships with vulnerability data.

Lhorus6 commented 3 months ago

Issues related to this one : https://github.com/OpenCTI-Platform/connectors/issues/1449 and https://github.com/OpenCTI-Platform/connectors/issues/1604

Lhorus6 commented 3 months ago

I have the impression that this would make the job much easier: https://github.com/signalscorps/cpe2stix

Lhorus6 commented 3 months ago

And this one : https://github.com/OpenCTI-Platform/connectors/issues/1949