search

OpenCTI-Platform / opencti

Open Cyber Threat Intelligence Platform
https://opencti.io
Other
6.48k stars 952 forks source link

Be able to update revoked attribute everywhere on the platform #4749

Open SarahBocognano opened 1 year ago

SarahBocognano commented 1 year ago

Use case

For now we can't update the revoked attribute on the platform except on indicators when the "valid_until" is due. We want to be able to update this attribute everywhere on the platform directly in the update form.

Proposed Solution

Add a field "revoked" to the update form in all stix domain objects

nino-filigran commented 1 year ago

Linked to this one https://github.com/OpenCTI-Platform/opencti/issues/3149. @Jipegien we have a similar request (potentially planned for 5.13), only for observables. Should we cover all the SDO?

Jipegien commented 9 months ago

Also a duplicate of https://github.com/OpenCTI-Platform/opencti/issues/4127

MVP: be able to revoked/unrevoked Indicators MMP: all entities