Jermain @ Filigran.io

## Use case As a threat analyst, I want to use Playbook automation to automatically create an "originates-from" relationship between any new indicators that come into OpenCTI labelled with "Fancy...

Media Pressure articles are dissappearing

3

## Description In the Definition tab of a Scenario, after creating a media pressure article and then selecting an option from the Channels dropmenu, the page refreshes and it looks...

Investigation with thousands of entities will not open

4

## Description I have created a grouping that contains 114 reports. The reports, all together, contain 4819 indicators. WHen I expand the reports in the investigation to dhow all the...

### Proposed changes *New connector for Zvelo.com feed ### Related issues *https://github.com/OpenCTI-Platform/connectors/issues/2591 ### Checklist - [ ] I consider the submitted work as finished - [ ] I tested the...

## Use case As an analyst, I want all of the available technical information in a MS Sentinel alert to be included when it's imported as an incident via the...

[Microsoft Defender] Enhance the connector i.e. select which incidents to ingest

1

## Use case As an anslyst, I want to select which MS Defender incidents I send to OpenCTI based on the filters I have established in Defender's GUI. ## Current...

## Use case Zvelo provides an intelligence feed and we want that data inour OpenCTI: https://zvelo.com/zvelocti-cyber-threat-intelligence/ ## Current Workaround Copy & paste. ## Proposed Solution Build a native connector. ##...