OpenCTI

Manages OpenCTI platform. Compatible with OpenCTI 4.X API and OpenCTI 5.X API versions.

Data Enrichment & Threat Intelligence · OpenCTI

Configuration parameters

  • base_url — Base URL (required)
  • credentials — API Key (leave empty. Fill in the API key in the password field.)
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings
  • redirect_std_out — Redirect stdout

Commands (25)

  • opencti-external-reference-create

    Create external reference.

  • opencti-get-incidents

    Get incidents in OpenCTI.

  • opencti-get-indicators

    Get indicators in OpenCTI.

  • opencti-get-observables

    Gets observables from OpenCTI.

  • opencti-incident-create

    Create new incident.

  • opencti-incident-delete

    Delete incident.

  • opencti-incident-types-list

    Get a list of all incident types.

  • opencti-indicator-create

    Create a new indicator in OpenCTI.

  • opencti-indicator-field-add

    Add a field to the indicator. Fields that can be added are marking definition and label.

  • opencti-indicator-field-remove

    Remove indicator field value. Fields whose values can be removed are marking definition and label.

  • opencti-indicator-types-list

    Get a list of all indicator types.

  • opencti-indicator-update

    Update a indicator in OpenCTI.

  • opencti-label-create

    Create a new label.

  • opencti-label-list

    Get list of all labels.

  • opencti-marking-definition-list

    Get a list of all marking definitions.

  • opencti-observable-create

    Create new observable.

  • opencti-observable-delete

    Delete observable.

  • opencti-observable-field-add

    Add a field to the observable. Fields that can be added are marking definition and label.

  • opencti-observable-field-remove

    Remove observable field value. Fields which values can be removed are marking definition and label.

  • opencti-observable-field-update

    Update the observable field. The fields that can be updated are: score, description.

  • opencti-organization-create

    Create a new organization.

  • opencti-organization-list

    Get a list of all organizations in OpenCTI.

  • opencti-relationship-create

    Create new relationship.

  • opencti-relationship-delete

    Delete relationship.

  • opencti-relationship-list

    Get a list of all relationships in OpenCTI.