OpenCTI-Platform / opencti

Open Cyber Threat Intelligence Platform
https://opencti.io
Other
6.4k stars 946 forks source link

[Playbook]: Enable default values to be filled in when creating a container via a playbook #7738

Open romain-filigran opened 4 months ago

romain-filigran commented 4 months ago

Use case

In a playbook, when wrapping elements in a container, I'd like to be able to set some container properties by default. For example, when creating an incident response case, I'd like to be able to configure the default severity, priority and type to associate to the case.

Current Workaround

Update and complete this information individually.

Proposed Solution

In the "container wrapper" component, purpose a form to complete in function of the container selected.

Example form for an incident response case:

It might also be interesting to think about a completion based on elements from the source entity that triggered the playbook (notion of variable).

nino-filigran commented 4 months ago

Would tackle both: https://github.com/OpenCTI-Platform/opencti/issues/7231 & https://github.com/OpenCTI-Platform/opencti/issues/5829

romain-filigran commented 4 months ago

Would tackle also: https://github.com/OpenCTI-Platform/opencti/issues/5398