OpenCTI-Platform / datasets

OpenCTI datasets

Home Page:https://www.opencti.io

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Add the MISP dataset to our dataset

Lhorus6 opened this issue · comments

MISP has a threat actor dataset (intrusion set in STIX senses) that would be interesting to add to OpenCTI and could be integrated into our dataset.

Resources:

Note:

  • "cfr-suspected-state-sponsor" -> Seems to be the "Originates from" field for intrusions set
  • "cfr-suspected-victims" -> Should be a country and a relationship "targets" with the intrusion set
  • "cfr-target-category -> Should be a sector and a relationship "targets" with the intrusion set
  • "cfr-type-of-incident" -> Seems to be the "Primary motivation" field for intrusions set