You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When creating an observable from an indicator or vice versa, we create automatically a "based on" relationship that should inherit object markings and organization sharing. This is not the case.
The issue happens during indicator or observable creation with the option to promote or extract observable / indicators, also in corresponding playbooks, and bulk tasks (indicators/observables generation).
Environment
OS (where OpenCTI server runs): { e.g. Mac OS 10, Windows 10, Ubuntu 16.4, etc. }
OpenCTI version: latest (5.12.32)
OpenCTI client: frontend
Other environment details:
Reproducible Steps
Multiple scenarios for this bug :
Create an indicator with option "Create observables from this indicator"
Create an observable with option "Create an indicator from this observable"
Playbooks: Set a playbook with component "Promote observable to indicator" / and another one with "Extract observables from indicator"
Bulk actions : select multiple indicators / observables and apply action from the bottom toolbar "Indicators/observables generation".
All these scenarios will create observables or indicators with a relationship "based on". All the objects created and relationship should inherit markings and organization sharing.
The text was updated successfully, but these errors were encountered:
Description
When creating an observable from an indicator or vice versa, we create automatically a "based on" relationship that should inherit object markings and organization sharing. This is not the case.
The issue happens during indicator or observable creation with the option to promote or extract observable / indicators, also in corresponding playbooks, and bulk tasks (indicators/observables generation).
Environment
Reproducible Steps
Multiple scenarios for this bug :
All these scenarios will create observables or indicators with a relationship "based on". All the objects created and relationship should inherit markings and organization sharing.
The text was updated successfully, but these errors were encountered: