Closed
Description
Request Type
Bug
Work Environment
| Question | Answer |
|---|---|
| OS version (server) | Debian |
| TheHive version / git hash | 3.0.1 |
| Package Type | DEB |
Problem Description
When merging two cases, if sighted flags are set they are not reported back to the newly created artifacts, event if those were existing in only one of the merged cases.
Steps to Reproduce
- Create case A with artifact IP 8.8.8.8 and set it to sighted
- Create case B with artifact IP 1.2.3.4
- Merge case A and B together
- Check for artifacts, none of them have sighted flags set
Possible solutions
Apply same logic as ioc flags when merging artifacts.