opencti icon indicating copy to clipboard operation
opencti copied to clipboard

Add Attack Patterns to a Report from the Report's Matrix view

Open securitiz opened this issue 1 year ago • 0 comments

Use case

It's very useful to be able to look at the MITRE kill chain to know what attack patterns to add. This feature already exists in other contexts - one can select a Threat Actor -> Knowledge -> Attack Patterns -> Matrix view, select an attack pattern and have the option to either View it or Add it.

It would be incredibly useful to have this feature in the context of a Report as well - since most often, intelligence is added to OpenCTI in the context of a Report.

Current Workaround

Have a second window open with Mitre's kill chain, to make sure we add all the necessary Attack Patterns

Proposed Solution

Extend the existing "Add from Matrix view" feature to the Report context

Additional Information

If the feature request is approved, would you be willing to submit a PR?

Yes / No (Help can be provided if you need assistance submitting a PR)

securitiz avatar Mar 15 '24 17:03 securitiz