Closed febrezo closed 3 years ago
That's a bug. The columns were from a different issue. The idea is not to store technical int but rather links to article you come across while investigating. It's rathe runstructured storage. Real technical intel is in the other tabs or whatever intel storage you use (misp/opencti...)
Currently I'm experiencing that the OSINT tab clones the values in the Systems tab. This is a bit confusing because there is no space to add multiple sources and evaluate them separately. At the same time, if you remove a row in the tab it seems to corrupt the information in the Systems table by removing details although "links" are still kept in the Timeline tab.
In a recent incident, a backup saved my life after manually removing lines in the OSINT tab but I guess that in the current design the usage is confusing.
I propose a fully redesign of this tab to include the following columns:
Feel free to add any other valuable comments. This is just an idea.