Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feature Request] Permit to disable similarity (case and alert) for some observable #1625

Closed
12 tasks done
To-om opened this issue Nov 6, 2020 · 0 comments
Closed
12 tasks done
Assignees
Labels
feature request TheHive4 TheHive4 related issues
Milestone

Comments

@To-om
Copy link
Contributor

To-om commented Nov 6, 2020

Request Type

Feature Request

Problem Description

Some observables should not be used for similarity. The aim of this issue is to add an attribute "ignoreSimilarity" to observables. This attribute, if true, disables similarity for that observable.

The ignoreSimilarity field is also propagated to case observables when an alert is promoted to a case. The UI needs to display this attribute and make it editable in a case:

UI changes

  • FE - Display the ignoreSimilarity flag in alert observables list
  • FE -Display the ignoreSimilarity flag in case observables list
  • FE - Display the ignoreSimilarity flag in case observable detail page
  • FE - Allow setting the attribute in the bulk update dialog
  • FE - Hide Link section from observable details page if ignoreSimilarity is set to true
  • FE - Filter observable lists using ignoreSimilarity flag
  • FE - Add ignoreSimilarity option in observable creation dialog

API changes

  • BE - Add ignoreSimilary to the /api/describe v0 APIs (Search and dashboards)
  • BE - Add ignoreSimilary to the /api/describe v1 APIs
  • BE - Rely on ignoreSimilary for related cases
  • BE - Take ignoreSimilary into account in observable PATCH API
  • BE - Take ignoreSimilary into account in observable bulk PATCH API
@To-om To-om added feature request TheHive4 TheHive4 related issues labels Nov 6, 2020
@To-om To-om added this to the 4.0.1 milestone Nov 6, 2020
@To-om To-om self-assigned this Nov 6, 2020
@To-om To-om assigned nadouani and unassigned To-om Nov 6, 2020
@nadouani nadouani removed their assignment Nov 8, 2020
To-om added a commit that referenced this issue Nov 9, 2020
nadouani added a commit that referenced this issue Nov 9, 2020
@nadouani nadouani closed this as completed Nov 9, 2020
nadouani added a commit that referenced this issue Nov 10, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
feature request TheHive4 TheHive4 related issues
Projects
None yet
Development

No branches or pull requests

2 participants