diff --git a/pycti/entities/opencti_case_incident.py b/pycti/entities/opencti_case_incident.py index 40cc75ba9..1b0b81a58 100644 --- a/pycti/entities/opencti_case_incident.py +++ b/pycti/entities/opencti_case_incident.py @@ -690,6 +690,7 @@ def create(self, **kwargs): priority = kwargs.get("priority", None) x_opencti_stix_ids = kwargs.get("x_opencti_stix_ids", None) object_assignee = kwargs.get("objectAssignee", None) + object_participant = kwargs.get("objectParticipant", None) granted_refs = kwargs.get("objectOrganization", None) response_types = kwargs.get("response_types", None) x_opencti_workflow_id = kwargs.get("x_opencti_workflow_id", None) @@ -717,6 +718,7 @@ def create(self, **kwargs): "objectLabel": object_label, "objectOrganization": granted_refs, "objectAssignee": object_assignee, + "objectParticipant": object_participant, "objects": objects, "externalReferences": external_references, "revoked": revoked, @@ -865,7 +867,12 @@ def import_from_stix2(self, **kwargs): stix_object["x_opencti_assignee_ids"] = ( self.opencti.get_attribute_in_extension("assignee_ids", stix_object) ) - + if "x_opencti_participant_ids" not in stix_object: + stix_object["x_opencti_participant_ids"] = ( + self.opencti.get_attribute_in_extension( + "participant_ids", stix_object + ) + ) return self.create( stix_id=stix_object["id"], createdBy=( @@ -920,6 +927,11 @@ def import_from_stix2(self, **kwargs): if "x_opencti_assignee_ids" in stix_object else None ), + objectParticipant=( + stix_object["x_opencti_participant_ids"] + if "x_opencti_participant_ids" in stix_object + else None + ), x_opencti_workflow_id=( stix_object["x_opencti_workflow_id"] if "x_opencti_workflow_id" in stix_object diff --git a/pycti/entities/opencti_case_rfi.py b/pycti/entities/opencti_case_rfi.py index afa4b5be6..da0efe5dd 100644 --- a/pycti/entities/opencti_case_rfi.py +++ b/pycti/entities/opencti_case_rfi.py @@ -674,6 +674,8 @@ def create(self, **kwargs): objects = kwargs.get("objects", None) object_marking = kwargs.get("objectMarking", None) object_label = kwargs.get("objectLabel", None) + object_assignee = kwargs.get("objectAssignee", None) + object_participant = kwargs.get("objectParticipant", None) external_references = kwargs.get("externalReferences", None) revoked = kwargs.get("revoked", None) confidence = kwargs.get("confidence", None) @@ -709,6 +711,8 @@ def create(self, **kwargs): "objectMarking": object_marking, "objectLabel": object_label, "objectOrganization": granted_refs, + "objectAssignee": object_assignee, + "objectParticipant": object_participant, "objects": objects, "externalReferences": external_references, "revoked": revoked, @@ -846,6 +850,16 @@ def import_from_stix2(self, **kwargs): stix_object["x_opencti_workflow_id"] = ( self.opencti.get_attribute_in_extension("workflow_id", stix_object) ) + if "x_opencti_assignee_ids" not in stix_object: + stix_object["x_opencti_assignee_ids"] = ( + self.opencti.get_attribute_in_extension("assignee_ids", stix_object) + ) + if "x_opencti_participant_ids" not in stix_object: + stix_object["x_opencti_participant_ids"] = ( + self.opencti.get_attribute_in_extension( + "participant_ids", stix_object + ) + ) return self.create( stix_id=stix_object["id"], @@ -889,6 +903,16 @@ def import_from_stix2(self, **kwargs): if "x_opencti_granted_refs" in stix_object else None ), + objectAssignee=( + stix_object["x_opencti_assignee_ids"] + if "x_opencti_assignee_ids" in stix_object + else None + ), + objectParticipant=( + stix_object["x_opencti_participant_ids"] + if "x_opencti_participant_ids" in stix_object + else None + ), x_opencti_workflow_id=( stix_object["x_opencti_workflow_id"] if "x_opencti_workflow_id" in stix_object diff --git a/pycti/entities/opencti_case_rft.py b/pycti/entities/opencti_case_rft.py index dddf601a3..49fee7f12 100644 --- a/pycti/entities/opencti_case_rft.py +++ b/pycti/entities/opencti_case_rft.py @@ -673,6 +673,8 @@ def create(self, **kwargs): objects = kwargs.get("objects", None) object_marking = kwargs.get("objectMarking", None) object_label = kwargs.get("objectLabel", None) + object_assignee = kwargs.get("objectAssignee", None) + object_participant = kwargs.get("objectParticipant", None) external_references = kwargs.get("externalReferences", None) revoked = kwargs.get("revoked", None) confidence = kwargs.get("confidence", None) @@ -708,6 +710,8 @@ def create(self, **kwargs): "objectMarking": object_marking, "objectLabel": object_label, "objectOrganization": granted_refs, + "objectAssignee": object_assignee, + "objectParticipant": object_participant, "objects": objects, "externalReferences": external_references, "revoked": revoked, @@ -845,7 +849,16 @@ def import_from_stix2(self, **kwargs): stix_object["x_opencti_workflow_id"] = ( self.opencti.get_attribute_in_extension("workflow_id", stix_object) ) - + if "x_opencti_assignee_ids" not in stix_object: + stix_object["x_opencti_assignee_ids"] = ( + self.opencti.get_attribute_in_extension("assignee_ids", stix_object) + ) + if "x_opencti_participant_ids" not in stix_object: + stix_object["x_opencti_participant_ids"] = ( + self.opencti.get_attribute_in_extension( + "participant_ids", stix_object + ) + ) return self.create( stix_id=stix_object["id"], createdBy=( @@ -893,6 +906,16 @@ def import_from_stix2(self, **kwargs): if "x_opencti_granted_refs" in stix_object else None ), + objectAssignee=( + stix_object["x_opencti_assignee_ids"] + if "x_opencti_assignee_ids" in stix_object + else None + ), + objectParticipant=( + stix_object["x_opencti_participant_ids"] + if "x_opencti_participant_ids" in stix_object + else None + ), x_opencti_workflow_id=( stix_object["x_opencti_workflow_id"] if "x_opencti_workflow_id" in stix_object diff --git a/pycti/entities/opencti_task.py b/pycti/entities/opencti_task.py index bdda9cea7..9aea86699 100644 --- a/pycti/entities/opencti_task.py +++ b/pycti/entities/opencti_task.py @@ -448,6 +448,7 @@ def create(self, **kwargs): object_marking = kwargs.get("objectMarking", None) object_label = kwargs.get("objectLabel", None) object_assignee = kwargs.get("objectAssignee", None) + object_participant = kwargs.get("objectParticipant", None) granted_refs = kwargs.get("objectOrganization", None) x_opencti_workflow_id = kwargs.get("x_opencti_workflow_id", None) update = kwargs.get("update", False) @@ -478,6 +479,7 @@ def create(self, **kwargs): "objectMarking": object_marking, "objectOrganization": granted_refs, "objectAssignee": object_assignee, + "objectParticipant": object_participant, "x_opencti_workflow_id": x_opencti_workflow_id, "update": update, } @@ -628,7 +630,12 @@ def import_from_stix2(self, **kwargs): stix_object["x_opencti_assignee_ids"] = ( self.opencti.get_attribute_in_extension("assignee_ids", stix_object) ) - + if "x_opencti_participant_ids" not in stix_object: + stix_object["x_opencti_participant_ids"] = ( + self.opencti.get_attribute_in_extension( + "participant_ids", stix_object + ) + ) return self.create( stix_id=stix_object["id"], createdBy=( @@ -661,6 +668,11 @@ def import_from_stix2(self, **kwargs): if "x_opencti_assignee_ids" in stix_object else None ), + objectParticipant=( + stix_object["x_opencti_participant_ids"] + if "x_opencti_participant_ids" in stix_object + else None + ), x_opencti_workflow_id=( stix_object["x_opencti_workflow_id"] if "x_opencti_workflow_id" in stix_object