Enhance massive operations on Indicators

OpenCTI-Platform / opencti

Open Cyber Threat Intelligence Platform

https://opencti.io

Other

6.39k stars 945 forks source link

Enhance massive operations on Indicators #8245

Open romain-filigran opened 2 months ago

romain-filigran commented 2 months ago

Ability to update in mass some indicators properties. To take into account:

Mass "replace" "Detection" property
Mass "add/replace/remove" "kill chains" properties
Mass "add/replace/remove" "indicator types" properties
Mass "add/replace/remove" "processing status" properties

romain-filigran commented 2 months ago

beerman17 commented 1 month ago

Hi there! I just want to vote for this feature.

We rely on "detection" flag to control which indicators should be checked across our logs. Sometimes things go wrong and bunch of indicators became incorrectly "detectable" (or vice versa) and it is such pain in the ass to fix it as there is no way to simply switch this parameter for selected entities. So, this capability is highly desirable :)