opencti
opencti copied to clipboard
View / Export Investigations table like a Pivot Table
Use case
After performing an investigation query (which is currently graphic), it is useful to be able to summarize the data and export it. For example, most common malware from the past 6 months. A pivot table view / editing functionality would allow a user to summarize the dataset however they see fit.
Current Workaround
Perform a query in an investigation, manually count how many relationships each objects as.
Proposed Solution
Pivot table view / editing ability, plus the ability to export the data
Additional Information
User should be able to select the rows (object types) they choose fit, their order (grouping first by object type A, or type B), and the value type (count, sum, etc)
If the feature request is approved, would you be willing to submit a PR?
No