Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[CSV Mapper] The Note object cannot be related to any entity #9829

Open
lightw1s3 opened this issue Feb 4, 2025 · 1 comment
Open

[CSV Mapper] The Note object cannot be related to any entity #9829

lightw1s3 opened this issue Feb 4, 2025 · 1 comment
Labels
feature use for describing a new feature to develop needs triage use to identify issue needing triage from Filigran Product team

Comments

@lightw1s3
Copy link

Description

There is no possible way to associate through a CSV Mapper a Note entity with another entity. Therefore, it is never possible to create a Note through a mapper.

There is no relationship that can be created linking the Note entity to another entity because no such relationship exists. And, through the entity object itself to which you want to associate the Note there is no field for it.

Environment

  1. OS (where OpenCTI server runs): docker
  2. OpenCTI version: 6.4.10
  3. OpenCTI client: backend

Reproducible Steps

Steps to create the smallest reproducible scenario:

  1. Create a CSV Mapper with two entities, e.g. Threat Actor Group and Note
  2. It can be verified that within the Threat Actor entity there is no field to associate the Note with.
  3. If you search among the list of relationship representations there is none that could indicate that the note would belong to the Threat Actor (normal because it is not a relationship created as such).

Expected Output

That the fields of the mapper associated to the Note made the note appear in the entity itself.

Actual Output

Nothing happens, it seems to be skipped.

Additional information

As a solution, it might be a good idea to include it as an attribute of the entity in which the Note is to be included, for example as an attribute of the Threat Actor in the example shown, and whose operation is the same as Label or External Reference so that 1 or more notes can be linked.

Image

@lightw1s3 lightw1s3 added bug use for describing something not working as expected needs triage use to identify issue needing triage from Filigran Product team labels Feb 4, 2025
@nino-filigran nino-filigran added feature use for describing a new feature to develop and removed bug use for describing something not working as expected labels Feb 6, 2025
@nino-filigran
Copy link

This is indeed a missing feature that was never implemented.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
feature use for describing a new feature to develop needs triage use to identify issue needing triage from Filigran Product team
Projects
None yet
Development

No branches or pull requests

2 participants