OpenCTI-Platform / opencti

Open Cyber Threat Intelligence Platform
https://opencti.io
Other
6.21k stars 921 forks source link

Display TTPs/vuln/Tools/ targeting a sector or a country #1407

Open manonviallet opened 3 years ago

manonviallet commented 3 years ago

Problem to Solve

The TTPS, tools and vulnerabilities categories are currently missing from the knowledge display for sectors and countries. Il would be useful to be able to visualize which tools/vulns or TTPs are used against a sector or a country, for analysis and comparisons and knowledge building on the specific entity (for instance, be able to map out if there are vulnerabilities or TTPs more used against a sector, or establish the list of the vulnerabilities and TTPs used against the sector. This could be usefull for detection and audit/red team)

SamuelHassine commented 1 year ago

For the team: this is linked to more advanced use case to display graph traversal in the product (cf. Generative AI and other complex queries through the API):