Skip to content

TheHive send to many information to Cortex when an analyze is requested #196

Closed
@To-om

Description

Request Type

enhancement

Work Environment

any

Problem Description

TheHive send the all observable attributes to Cortex when it asks for an analyze. These attributes contains data can contain sensitive information, useless for Cortex (user who created the observable, tags, message, ...)

Possible Solutions

Cortex only needs "tlp", "dataType" and "data" (or "attachment") to run an analyze on the observable. TheHive should send only these information.

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions