Giters

dfir-iris / iris-web

Collaborative Incident Response platform

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

[BUG] - Untracked IOC relations between cases

rickenella opened this issue · comments

commented

Describe the bug
When updating an IOC, IRIS apparently does not check whether the IOC already exists in another case.

To Reproduce
Steps to reproduce the behavior:

  1. Create an IOC "example.com" under CASE_A
  2. Create an IOC "example.org" under CASE_B
  3. Change "example.org" to "example.com" under CASE_B

Expected behavior
We would expect IRIS to now link CASE_A and CASE_B due to the updated IOC.

Additional content
The behavior occurred under version 2.4.5 .