opencti
opencti copied to clipboard
Add Attack Patterns to a Report from the Report's Matrix view
Use case
It's very useful to be able to look at the MITRE kill chain to know what attack patterns to add. This feature already exists in other contexts - one can select a Threat Actor -> Knowledge -> Attack Patterns -> Matrix view, select an attack pattern and have the option to either View it or Add it.
It would be incredibly useful to have this feature in the context of a Report as well - since most often, intelligence is added to OpenCTI in the context of a Report.
Current Workaround
Have a second window open with Mitre's kill chain, to make sure we add all the necessary Attack Patterns
Proposed Solution
Extend the existing "Add from Matrix view" feature to the Report context
Additional Information
If the feature request is approved, would you be willing to submit a PR?
Yes / No (Help can be provided if you need assistance submitting a PR)