You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
SouadHadjiat opened this issue
Feb 21, 2024
· 0 comments
· Fixed by #6069
Assignees
Labels
buguse for describing something not working as expectedmarkingLinked to data segregation via marking definitionsolveduse to identify issue that has been solved (must be linked to the solving PR)
When creating an observable from an indicator or vice versa, we create automatically a "based on" relationship that should inherit object markings and organization sharing. This is not the case.
The issue happens during indicator or observable creation with the option to promote or extract observable / indicators, also in corresponding playbooks, and bulk tasks (indicators/observables generation).
Environment
OS (where OpenCTI server runs): { e.g. Mac OS 10, Windows 10, Ubuntu 16.4, etc. }
OpenCTI version: latest (5.12.32)
OpenCTI client: frontend
Other environment details:
Reproducible Steps
Multiple scenarios for this bug :
Create an indicator with option "Create observables from this indicator"
Create an observable with option "Create an indicator from this observable"
Playbooks: Set a playbook with component "Promote observable to indicator" / and another one with "Extract observables from indicator"
Bulk actions : select multiple indicators / observables and apply action from the bottom toolbar "Indicators/observables generation".
All these scenarios will create observables or indicators with a relationship "based on". All the objects created and relationship should inherit markings and organization sharing.
The text was updated successfully, but these errors were encountered:
buguse for describing something not working as expectedmarkingLinked to data segregation via marking definitionsolveduse to identify issue that has been solved (must be linked to the solving PR)
Description
When creating an observable from an indicator or vice versa, we create automatically a "based on" relationship that should inherit object markings and organization sharing. This is not the case.
The issue happens during indicator or observable creation with the option to promote or extract observable / indicators, also in corresponding playbooks, and bulk tasks (indicators/observables generation).
Environment
Reproducible Steps
Multiple scenarios for this bug :
All these scenarios will create observables or indicators with a relationship "based on". All the objects created and relationship should inherit markings and organization sharing.
The text was updated successfully, but these errors were encountered: