Closed
Description
openedon Mar 20, 2024
Description
When I use the "Promote observable to indicator" component, it crashes if I don't have a score on my observables.
Environment
OCTI 6.0.7
Reproducible Steps
Steps to create the smallest reproducible scenario:
- Create the playbooks describe in the screenshot below
- Create a report
- Create an observable without score
- Add the observable to the report
- Add the label "test" to the report
- Wait the execution of the playbook and check the log of execution
-> Error at the "promote observable" component
Additional information
When we try to create an indicator without a score (manually, in the GUI), the platform transparently sets 50. Perhaps this mechanism should be applied here too?
Screenshots
Playbooks
Error
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment