search

OpenCTI-Platform / opencti

Open Cyber Threat Intelligence Platform
https://opencti.io
Other
5.21k stars 821 forks source link

Ability for admin to create custom suggestions for reports #6806

Open securitiz opened 2 months ago

securitiz commented 2 months ago

Use case

Following up on #6805

It would be useful to be able to create custom suggestions in the platform, rather than asking the OpenCTI developers to include new ones on a case by case basis :)

I think the same would also be useful for Rules Engines - I see the suggestions as a "partial" version of Rules Engines inference rules

Current Workaround

Create issues for the Filigran team :)

Proposed Solution

Ability to create custom suggestions in the context of a report

Additional Information

If the feature request is approved, would you be willing to submit a PR?

Yes / No (Help can be provided if you need assistance submitting a PR)

nino-filigran commented 2 months ago

@securitiz I understand the request since it would make everybody less dependent on the team and the community's ability to deliver. Rules engine can have a massive impact on the platform, and therefore, it's not in the vision to let everybody create their own rules, since if you set it up wrongly, it, you can mess with your data without the ability to go back. Regarding suggestion though, it might indeed be a solution to investigate, as it would allow users to have some custom way of dealing with their data, without having an automatic behavior that can have a big impact on the platform.

We'll take this into account, but for now, in full transparency, it's not something we'll work on anytime soon, given we have other priorities (that you can see by browsing through the next milestones 6.2, 6.3, 6.4).

securitiz commented 2 months ago

Appreciate the response! Understand even if it was in the plans, it would be a massive lift. Thank you again for following up