Open nino-filigran opened 6 months ago
A customer would be interested to have a “targets” relationship between an infrastructure and an organization. Not to make the inference rule described here work, but to be able to easily see:
Tiny if we just consider adding the relation. Otherwise, we need to also add victimology view (like malware) in infra.
Use case
Add Infrastructure to the execution of the "Inference of targeting via a sighting" inference rule (would having a "target" relationship solve the problem?). By adding a target relationship type, the inference rule would work nicely.