[FR] OpenCTI-Integration

[nhs28]

Is your feature request related to a problem? Please describe. The MISP extension really helps during IR. Another cool integration would be the usage of the OpenCTI-API.

Describe the solution you'd like A module using the OpenCTI Python Client would help to ingest threat intelligence into IRIS cases.

[Ektoplasma]

Hello! First of all we plan to improve the MISP module, but the OpenCTI Python client seems pretty simple to use so we'll look into it. We are not really OpenCTI users so it would be of great help if you have any feedback or ideas on what specific objects/events would be interesting to implement on the IRIS module side.

[biffboxx]

FWIW, we too are implementing Open-CTI across our incident response teams. Having the ability to enhance IOCs input into IRIS with our CTI platform would be very powerful.

[gru3zi]

I think this is a great idea and hope it happens.