[Playbooks] Add the "Information Type" of RFI entities as a filter - Githubissues

OpenCTI-Platform / opencti

Open Cyber Threat Intelligence Platform

https://opencti.io

Other

6.45k stars 947 forks source link

[Playbooks] Add the "Information Type" of RFI entities as a filter #9112

Open Jermain-N opened 18 hours ago

Jermain-N commented 18 hours ago

Use case

Add the "Information Type" field of Request for Information entities to be a usable filter in automation playbooks.

Current Workaround

I must use the label filter in playbooks and save the information type of an RFI as a label.

Proposed Solution

Current playbooks enable me to choose the "Report type" filter to trigger on specific reports. I want the same for Request For Information entities.

Additional Information