Be able to enrich in the analyst workbench

OpenCTI-Platform / opencti

Open Cyber Threat Intelligence Platform

https://opencti.io

Other

6.38k stars 942 forks source link

Be able to enrich in the analyst workbench #1830

Open Snowty opened 2 years ago

Snowty commented 2 years ago

Use case

When I search some ioc which is not in database, I want the enrichment connector can automatically enriched ioc. eg, hash ioc can trigger the virustotal connector to search virustotal's database, and return the result to OpenCTI.

Current Workaround

Proposed Solution

Additional Information

If the feature request is approved, would you be willing to submit a PR?

Yes.

SamuelHassine commented 2 years ago

The feature is:

Be able to bulk search SCOs / SDO: #2336
Be able to turn a search into a analyst workbench: #2408
Be able to enrich data from the analyst workbench