TheHive-Project / TheHive

TheHive: a Scalable, Open Source and Free Security Incident Response Platform
https://thehive-project.org
GNU Affero General Public License v3.0
3.44k stars 623 forks source link

Case Template: Custom Fields: need more customization #1001

Open garanews opened 5 years ago

garanews commented 5 years ago

Request Type

Feature Request

Problem Description

1) need a possibility to set as mandatory a specific custom field 2) need a possibility to treats a custom field (with multiple choice) as a tag, let's call it "custom tag list"

Use case:

step 1) image

step 2) image

step 3) image

nadouani commented 5 years ago

I guess the initial requirement is that you want the list of tags to allow a custom predefined list of tags right? Like in MISP?

garanews commented 5 years ago

Yes exacly, if not possible to use taglist coming from MISP (by your choice), at least a field customizable. We're defining some mandatory tag that analyst has to set before sending data to MISP. I tought modify the custom field was the easyest and fastest way to achieve it, but your suggestion is also good. :)

nadouani commented 5 years ago

I get it now, the mandatory thing is what made you think about the Custom Fields :)

garanews commented 5 years ago

Yes! We're playing with a data model where MISP events will need to have a minimum of mandatories tags (like ecsirt, dhs, ...) and due the analysts will publish MISP events through The Hive, a nice to have would be view these tag list already available in The Hive and set as mandatories.