OpenCTI-Platform / opencti

Open Cyber Threat Intelligence Platform
https://opencti.io
Other
5.12k stars 813 forks source link

Invalid correlated cases when correlating an incident response with a request for information case #7459

Open romain-filigran opened 4 days ago

romain-filigran commented 4 days ago

Description

When an incident response case shared an observable with a RFI case, a correlation is suggested, but the display is invalid.

Capture d'écran 2024-06-25 003151

Environment

OpenCTI version: 6.1.12

Reproducible Steps

  1. Create a RFI case and attach an observable A
  2. Create an Incident response case and attach the same observable (observable A)

Expected Output

Correctly display correlated RFI case

Actual Output

Additional information

Screenshots (optional)