opencti icon indicating copy to clipboard operation
opencti copied to clipboard

View / Export Investigations table like a Pivot Table

Open securitiz opened this issue 3 years ago • 0 comments

Use case

After performing an investigation query (which is currently graphic), it is useful to be able to summarize the data and export it. For example, most common malware from the past 6 months. A pivot table view / editing functionality would allow a user to summarize the dataset however they see fit.

Current Workaround

Perform a query in an investigation, manually count how many relationships each objects as.

Proposed Solution

Pivot table view / editing ability, plus the ability to export the data

Additional Information

User should be able to select the rows (object types) they choose fit, their order (grouping first by object type A, or type B), and the value type (count, sum, etc)

If the feature request is approved, would you be willing to submit a PR?

No

securitiz avatar Jul 18 '22 05:07 securitiz