Skip to content

OpenCTI#

OpenCTI_SearchObservables#

Author: ANSSI
License: AGPL-V3
Version: 2.0
Supported observables types:
- domain
- ip
- url
- fqdn
- uri_path
- user-agent
- hash
- mail
- mail_subject
- registry
- regexp
- other
- filename
Registration required: True
Subscription required: False
Free subscription: False
Third party service: https://www.opencti.io

Description#

Query multiple OpenCTI instances for a list of observables matching a pattern.

Configuration#

name Name of OpenCTI servers
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values True
Is required False
url URL of OpenCTI servers
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values True
Is required True
key API key for each server
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values True
Is required True
cert_check Verify server certificate
Default value if not configured True
Type of the configuration item boolean
The configuration item can contain multiple values False
Is required True

Templates samples for TheHive#

No template samples to display.

OpenCTI_SearchExactObservable#

Author: ANSSI
License: AGPL-V3
Version: 2.0
Supported observables types:
- domain
- ip
- url
- fqdn
- uri_path
- user-agent
- hash
- mail
- mail_subject
- registry
- regexp
- other
- filename
Registration required: True
Subscription required: False
Free subscription: False
Third party service: https://www.opencti.io

Description#

Query multiple OpenCTI instances for a specific observable.

Configuration#

name Name of OpenCTI servers
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values True
Is required False
url URL of OpenCTI servers
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values True
Is required True
key API key for each server
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values True
Is required True
cert_check Verify server certificate
Default value if not configured True
Type of the configuration item boolean
The configuration item can contain multiple values False
Is required True

Templates samples for TheHive#

No template samples to display.


Last update: November 15, 2021 06:39:13