search

OpenCTI-Platform / opencti

Open Cyber Threat Intelligence Platform
https://opencti.io
Other
6.46k stars 949 forks source link

Improve Representative for network traffic #7511

Open nino-filigran opened 4 months ago

nino-filigran commented 4 months ago

Use case

As of today, the representative of a Network traffic observable is only the destination port. The goal is change it to at least src_port:dst_port

We need to be careful however since src_prt is not mandatory.

Lhorus6 commented 1 month ago

It could be good to manage the name manually, like for the Indicator

For example, I would like to name my network-traffic: ip_dst:port_dst