opencti icon indicating copy to clipboard operation
opencti copied to clipboard

inferred incident is not contained into IR case after playbook creation

Open marckto-filigran opened this issue 1 year ago • 0 comments

Description

inferred incident is not contained into IR case after playbook creation

Environment

https://demo.octi.filigran.io/

Reproducible Steps

Steps to create the smallest reproducible scenario:

  1. Create a playbook to wrap an incident into an IR case
  2. Enable rule "Infer an incident when a sighting is created for a valid indicator."
  3. trigger the rule to create an incident

Expected Output

The inferred incident is contained into the IR case

Actual Output

IR case is empty image

marckto-filigran avatar Jun 19 '24 08:06 marckto-filigran