You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When creating a file observable with no hashes (for example, with only the file name property filled in), OpenCTI hashes the filename itself and displays it as the hash of the file. This is a mistake, as the hash could be misconstrued to be the hash of the actual file.
Environment
OS (where OpenCTI server runs): Ubuntu 20.04
OpenCTI version: 4.1.1
OpenCTI client: frontend
Other environment details:
Reproducible Steps
Steps to create the smallest reproducible scenario:
Create new File observable
Set the observable's value to be "test.txt"
Leave the hash values as empty
Create object
Expected Output
A file observable is created, with empty hash values, and the object's name is "test.txt"
Actual Output
A file observable is created, with the MD5 hash value set to "dd18bf3a8e0a2a3e53e2661c7fb53534". This is the hash of the string "test.txt".
Additional information
The text was updated successfully, but these errors were encountered:
securitiz
changed the title
File Observables with no Hash
File Observables with no Hash Create their own Hash
Feb 9, 2021
SamuelHassine
added
bug
use for describing something not working as expected
feature
use for describing a new feature to develop
solved
use to identify issue that has been solved (must be linked to the solving PR)
and removed
bug
use for describing something not working as expected
labels
Feb 10, 2021
Description
When creating a file observable with no hashes (for example, with only the file name property filled in), OpenCTI hashes the filename itself and displays it as the hash of the file. This is a mistake, as the hash could be misconstrued to be the hash of the actual file.
Environment
Reproducible Steps
Steps to create the smallest reproducible scenario:
Expected Output
A file observable is created, with empty hash values, and the object's name is "test.txt"
Actual Output
A file observable is created, with the MD5 hash value set to "dd18bf3a8e0a2a3e53e2661c7fb53534". This is the hash of the string "test.txt".
Additional information
The text was updated successfully, but these errors were encountered: