search

OpenCTI-Platform / opencti

Open Cyber Threat Intelligence Platform
https://opencti.io
Other
6.49k stars 954 forks source link

Link a subnet IP address with an IP address that's part of it #8097

Open yassine-ouaamou opened 3 months ago

yassine-ouaamou commented 3 months ago

Description

Be able to link a subnet IP address with an IP address that's part of it

The solution we were considering with Romain would be to add an inference rule that will add relations between.

@romain-filigran I let you add any relevant information about this feature

romain-filigran commented 3 months ago

It remains to be seen whether the system of inference rules can be used and is the best solution to establish relationships between observables. Use case: Be able to automatically link an IP address with a CIDR block network linked to.