OpenCTI
Manages OpenCTI platform. Compatible with OpenCTI 4.X API and OpenCTI 5.X API versions.
- Category
- Data Enrichment & Threat Intelligence
- Pack
- OpenCTI
Configuration parameters
- base_url — Base URL (required)
- credentials — API Key (leave empty. Fill in the API key in the password field.)
- insecure — Trust any certificate (not secure)
- proxy — Use system proxy settings
- redirect_std_out — Redirect stdout
Commands (25)
- opencti-external-reference-create — Create external reference.
- opencti-get-incidents — Get incidents in OpenCTI.
- opencti-get-indicators — Get indicators in OpenCTI.
- opencti-get-observables — Gets observables from OpenCTI.
- opencti-incident-create — Create new incident.
- opencti-incident-delete — Delete incident.
- opencti-incident-types-list — Get a list of all incident types.
- opencti-indicator-create — Create a new indicator in OpenCTI.
- opencti-indicator-field-add — Add a field to the indicator. Fields that can be added are marking definition and label.
- opencti-indicator-field-remove — Remove indicator field value. Fields whose values can be removed are marking definition and label.
- opencti-indicator-types-list — Get a list of all indicator types.
- opencti-indicator-update — Update a indicator in OpenCTI.
- opencti-label-create — Create a new label.
- opencti-label-list — Get list of all labels.
- opencti-marking-definition-list — Get a list of all marking definitions.
- opencti-observable-create — Create new observable.
- opencti-observable-delete — Delete observable.
- opencti-observable-field-add — Add a field to the observable. Fields that can be added are marking definition and label.
- opencti-observable-field-remove — Remove observable field value. Fields which values can be removed are marking definition and label.
- opencti-observable-field-update — Update the observable field. The fields that can be updated are: score, description.
- opencti-organization-create — Create a new organization.
- opencti-organization-list — Get a list of all organizations in OpenCTI.
- opencti-relationship-create — Create new relationship.
- opencti-relationship-delete — Delete relationship.
- opencti-relationship-list — Get a list of all relationships in OpenCTI.