unfetter
unfetter copied to clipboard
Associate Changed Reports with Appropriate Threat Boards
Task
If a user adds some metadata to a report (associates it to a technique, intrusion set, or target; for example), need to make sure that it is associated as a potential matching report with appropriate threat boards and perhaps removed as a potential with incompatible potential boards.
Implementation
Should use similar if not same code as threat report ingest service. Unsure if removal from potentials is handled at all currently