OpenCTI-Platform / opencti

Open Cyber Threat Intelligence Platform
https://opencti.io
Other
5.16k stars 815 forks source link

Feature request: STIX 2.1 "Language Content" object #900

Open 2xyo opened 3 years ago

2xyo commented 3 years ago

Problem to Solve

It would be nice (for the reporting to the top management) to be able to display objects (at least attack patterns) in a foreign language.

Current Workaround

None.

Proposed Solution

Implement the STIX 2.1 "Language Content object" :

Example translation of a campaign:

{
  "type": "campaign",
  "id": "campaign--12a111f0-b824-4baf-a224-83b80237a094",
  "lang": "en",
  "spec_version": "2.1",
  "created": "2017-02-08T21:31:22.007Z",
  "modified": "2017-02-08T21:31:22.007Z",
  "name": "Bank Attack",
  "description": "More information about bank attack"
},
{
  "type": "language-content",
  "id": "language-content--b86bd89f-98bb-4fa9-8cb2-9ad421da981d",
  "spec_version": "2.1",
  "created": "2017-02-08T21:31:22.007Z",
  "modified": "2017-02-08T21:31:22.007Z",
  "object_ref": "campaign--12a111f0-b824-4baf-a224-83b80237a094",
  "object_modified": "2017-02-08T21:31:22.007Z",
  "contents": {
    "de": {
      "name": "Bank Angriff",
      "description": "Weitere Informationen über Banküberfall"
    },
    "fr": {
      "name": "Attaque Bank",
      "description": "Plus d'informations sur la crise bancaire"
    }
  }
}

Additional Information

SamuelHassine commented 1 year ago

This can be implemented as a global overlay on the backend side on all entities for localization and then taken into account during export / STIX 2.1 stream.