timesketch icon indicating copy to clipboard operation
timesketch copied to clipboard

Allow complex tags in the Intelligence attribute

Open tomchop opened this issue 2 years ago • 1 comments

Currently, IOC tags in the intelligence attribute are just strings, and they get coloring and weight from default values set in a server-side config file. This isn't very flexible, as tags can be quite arbitrary, especially if they are imported from a third-party TIP.

This change allows the Intelligence view to interpret tags that are already rich - if a third-party application wants to send data to the intelligence view, it can manually set the weight and class that will be used for display.

tomchop avatar Jul 21 '22 16:07 tomchop

Still same error error 'tagKey' is already defined no-redeclare.

itsmvd avatar Jul 29 '22 05:07 itsmvd