OpenCTI-Platform / opencti

Open Cyber Threat Intelligence Platform
https://opencti.io
Other
5.17k stars 819 forks source link

Expose ability to create custom rules for the rules engine in the UI #5598

Open akshaysth opened 5 months ago

akshaysth commented 5 months ago

Use case

Currently, there is no mechanism for creating custom rules in the rules engine in the UI. I'm proposing adding the ability to create custom rules in the rule engine so they're not stored in the code base but are an extension.

Use cases:

Current Workaround

None

Proposed Solution

Extend the UI for allowing this workflow.

Additional Information

n/a

If the feature request is approved, would you be willing to submit a PR?

No

nino-filigran commented 5 months ago

@akshaysth thanks for your request. We do not plan to make rules engine editable on the UI because of the impact it can have on the platform if they are wrongly setup. However, what we would like to do, to achieve your use case is to do it through automation. Within the task "manipulate knowledge", to add an option "inherit from parent task" (or something like this) in order to be able to propagate not only labels but additional fields too. We'll update the ticket once done.