opencti icon indicating copy to clipboard operation
opencti copied to clipboard

Invalid correlated cases when correlating an incident response with a request for information case

Open romain-filigran opened this issue 1 year ago • 0 comments

Description

When an incident response case shared an observable with a RFI case, a correlation is suggested, but the display is invalid.

  • the name of the RFI case is empty
  • the link to the RFI case is invalid

Capture d'écran 2024-06-25 003151

Environment

OpenCTI version: 6.1.12

Reproducible Steps

  1. Create a RFI case and attach an observable A
  2. Create an Incident response case and attach the same observable (observable A)

Expected Output

Correctly display correlated RFI case

Actual Output

Additional information

Screenshots (optional)

romain-filigran avatar Jun 24 '24 22:06 romain-filigran