Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Threat actor group should not be part-of threat ctor individual #9576

Open
febrezo opened this issue Jan 13, 2025 · 0 comments
Open

Threat actor group should not be part-of threat ctor individual #9576

febrezo opened this issue Jan 13, 2025 · 0 comments
Labels
bug use for describing something not working as expected

Comments

@febrezo
Copy link
Contributor

febrezo commented Jan 13, 2025

Description

Threat Actor group should not be part-of threat actor individual. The relationship part-of should only appear in threat-actor individual when linking to a group together with cooperates-with. Threat Actor group should only cooperates-with other Threat Actor individual

Environment

  1. OS (where OpenCTI server runs): docker
  2. OpenCTI version: OpenCTI 6.2.x
  3. OpenCTI client: fronten
  4. Other environment details:

Reproducible Steps

Steps to create the smallest reproducible scenario:

  1. Go to threat actor group > knowledge
  2. Select a threat actor individual
  3. Threat actor group should not have the chance of being linked as a part-of relationship with threat actor individual. The opposite is OK. cooperates-with is also OK and should be default.

Expected Output

Avoiding mistakes in attribution.

Actual Output

Mistakes when creating part-of relationships that the analyst epects to be created in the opposite way.

Additional information

N/A.

Screenshots (optional)

N/A

@febrezo febrezo added bug use for describing something not working as expected needs triage use to identify issue needing triage from Filigran Product team labels Jan 13, 2025
@nino-filigran nino-filigran removed the needs triage use to identify issue needing triage from Filigran Product team label Jan 14, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug use for describing something not working as expected
Projects
None yet
Development

No branches or pull requests

2 participants