Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Related artifacts: IOC/not IOC #838

garanews opened this Issue Dec 20, 2018 · 2 comments


None yet
3 participants
Copy link

garanews commented Dec 20, 2018

Request Type

Feature Request

Problem Description

Analyst adds an observable, system tells him that there is a related artifact, but doesn't tell him if the related artifact is marked as IOC or not, so analyst doesn't know if that observable was already put in block for example.

Steps to Reproduce

  1. create case 1
  2. add observable A
  3. create case 2
  4. add observable A
  5. mark as IOC
  6. create case 3
  7. add observable A
  8. you will see that observable A in case 3 has 2 related artifacts but actually you don't know if is marked as IOC in some other case. (in this example yes, in case 2)

Possible Solutions

  1. change the color of the eye
  2. add a new icon in the observable view links

Complementary information



This comment has been minimized.

Copy link

nadouani commented Dec 20, 2018

I guess the second screenshot can be made easily, and the first one requires probably some backend changes. We'll take a look on it


This comment has been minimized.

Copy link
Contributor Author

garanews commented Dec 20, 2018

For the first if is hard change color of the icon, I created #839 (tought was easier) but you answerd already also that one is hard...
Up to you to choose the less hard one ;)

@nadouani nadouani added this to the 3.3.0 RC3 milestone Feb 13, 2019

To-om added a commit that referenced this issue Feb 13, 2019

nadouani added a commit that referenced this issue Feb 13, 2019

@nadouani nadouani closed this Feb 13, 2019

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.