yeti icon indicating copy to clipboard operation
yeti copied to clipboard

Create New investigation / Add to existing from browse view

Open tomchop opened this issue 6 years ago • 2 comments

It would be nice to be able to create a new investigation from observables in the "browse" view (i.e. after a filter is set or a few lines are selected)

tomchop avatar Aug 21 '17 12:08 tomchop

browserview

Searching for "tags=something" and selecting (clicking) on the some or all of the returned matches would be good for kicking of an investigation with more than one node.

This would make things way faster and efficient in cases where the nodes are not directly linked, so you cant enrich your way to having all nodes in the graph. Entering more than a few nodes manually is boring and time consuming, and should be avoided.

(Importing more than one node to an existing graph is also something to consider in another issue)

gamelinux avatar Aug 29 '17 12:08 gamelinux

+1

axpatito avatar Oct 10 '17 22:10 axpatito