OpenCTI-Platform / opencti

Open Cyber Threat Intelligence Platform
https://opencti.io
Other
6.29k stars 930 forks source link

Add "targets" between Infrastructure & Identities #6483

Open nino-filigran opened 6 months ago

nino-filigran commented 6 months ago

Use case

Add Infrastructure to the execution of the "Inference of targeting via a sighting" inference rule (would having a "target" relationship solve the problem?). By adding a target relationship type, the inference rule would work nicely.

Lhorus6 commented 5 months ago

A customer would be interested to have a “targets” relationship between an infrastructure and an organization. Not to make the inference rule described here work, but to be able to easily see:

nino-filigran commented 4 months ago

Tiny if we just consider adding the relation. Otherwise, we need to also add victimology view (like malware) in infra.