opencti
opencti copied to clipboard
Invalid correlated cases when correlating an incident response with a request for information case
Description
When an incident response case shared an observable with a RFI case, a correlation is suggested, but the display is invalid.
- the name of the RFI case is empty
- the link to the RFI case is invalid
Environment
OpenCTI version: 6.1.12
Reproducible Steps
- Create a RFI case and attach an observable A
- Create an Incident response case and attach the same observable (observable A)
Expected Output
Correctly display correlated RFI case