search

OpenCTI-Platform / opencti

Open Cyber Threat Intelligence Platform
https://opencti.io
Other
6.16k stars 911 forks source link

Allow adding custom attributes to entity types #4452

Open iFrozenPhoenix opened 12 months ago

iFrozenPhoenix commented 12 months ago

Use case

As an Analyst I'd like to add additional data to an entity, e.g. the currency code of a country, the capital, ... and want to be able to search them.

Current Workaround

None

Proposed Solution

Allow to add custom attributes to an entity type. I suggest to allow adding new attributes in /dashboard/settings/customization/entity_types/{entity}. A + Button that opens a Modal where the Name, Type, If it is mandatory, the default value and a description can be provided. In the stix representation they could be represented with xopencti{attribute name}

Additional Information

If the feature request is approved, would you be willing to submit a PR?

Yes

nick-pete commented 3 months ago

Adding to this thread, as this functionality would solve an issue with a use case we are developing (tracked in ticket [OCTI1-699]). We are supporting our Third Party Risk Management team by providing cybersecurity risk scoring to potential suppliers. We have modified the Recorded Future enrichment connector to take a domain and look up the associated organization entity, create this entity in the platform and populate its risk score and risk information. Currently, there is not a good field to display the Risk Score. Having a custom field like x_opencti_riskscore would be the ideal solution.