How opencti add iocs in batch

OpenCTI-Platform / opencti

Open Cyber Threat Intelligence Platform

https://opencti.io

Other

6.51k stars 958 forks source link

How opencti add iocs in batch #2182

Open Vis-Wing opened 2 years ago

Vis-Wing commented 2 years ago

I have many IOCS, such as IP, domain or MD5. I want to add them all at once, rather than adding them to opencti one by one

SamuelHassine commented 2 years ago

Hello @Vis-Wing,

Did you try the free text field import? You can copy / paste a huge number of IOCs / observables in it.

Kind regards, Samuel

Vis-Wing commented 2 years ago

Must such data satisfy a certain structure?

I have a lot of MD5. I write it like this. I can't import it at all: d7f6b09775b8d90d79404eda715461b7 a0f565f7f579f0d397a42db5a95d4ae8 e2e5644e77e75e422bde075f409d882e 37b7415442ab8ca01e08b2d7bfe809e2 d19dd02cf375d0d03f557556d5207061 e3ffda448df223b240a20dae41e20cef e732bc87033a935bd2d3d56c7772641b 825730d9dd22dbae7f2bd89131466415

The above data format cannot be imported at all.