search

OpenCTI-Platform / opencti

Open Cyber Threat Intelligence Platform
https://opencti.io
Other
6.36k stars 939 forks source link

Upload or ingest multiple entities #2137

Open AAA10CR7 opened 2 years ago

AAA10CR7 commented 2 years ago

Use case

It would be really good if we can upload multiple entities at the same file through excel, csv or jason file.

Imagine I have a file with 100 IOCs that need to be ingested. It will be effort and time consuming to do it one-by-one.

Current Workaround

I have to insert each entity manually one-by-one.

Proposed Solution

File upload functionality for analysis (reports) and entities.

Additional Information

This will be useful in many places like IOCs, entities, threats, analysis ...etc

If the feature request is approved, would you be willing to submit a PR?

Not sure what PR is but I assume (Yes)

AAA10CR7 commented 2 years ago

I found out how to paste a IOCs as text and upload it once. But still uploading csv or jason would be extra benefit.

SamuelHassine commented 2 years ago

Uploading CSV is actually working, you have to configure your import-document connector with:

CONNECTOR_SCOPE=application/pdf,text/plain,text/html,text/csv,text/markdown

AAA10CR7 commented 1 year ago

To add to this point, I have the following example. Imagine I need to add certain entity (Malware or IntrusionSet) to a group of reports. There is no way to add it in one step, unless you go to each report and add entity separately. This is time and effort constraints.