Skip to content
This repository was archived by the owner on Dec 5, 2025. It is now read-only.

[client] Add assignee through automation playbook (#7728) #792

Merged
SouadHadjiat merged 2 commits into from
Dec 10, 2024
Merged

[client] Add assignee through automation playbook (#7728) #792

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
7478fbc
[client] Add assignee through automation playbook (#7728)
SarahBocognano Nov 25, 2024
2bfbcda
[client] Add participant
SarahBocognano Dec 3, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 13 additions & 1 deletion pycti/entities/opencti_case_incident.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -690,6 +690,7 @@ def create(self, **kwargs):
priority = kwargs.get("priority", None)
x_opencti_stix_ids = kwargs.get("x_opencti_stix_ids", None)
object_assignee = kwargs.get("objectAssignee", None)
object_participant = kwargs.get("objectParticipant", None)
granted_refs = kwargs.get("objectOrganization", None)
response_types = kwargs.get("response_types", None)
x_opencti_workflow_id = kwargs.get("x_opencti_workflow_id", None)
Expand Down Expand Up @@ -717,6 +718,7 @@ def create(self, **kwargs):
"objectLabel": object_label,
"objectOrganization": granted_refs,
"objectAssignee": object_assignee,
"objectParticipant": object_participant,
"objects": objects,
"externalReferences": external_references,
"revoked": revoked,
Expand Down Expand Up @@ -865,7 +867,12 @@ def import_from_stix2(self, **kwargs):
stix_object["x_opencti_assignee_ids"] = (
self.opencti.get_attribute_in_extension("assignee_ids", stix_object)
)

if "x_opencti_participant_ids" not in stix_object:
stix_object["x_opencti_participant_ids"] = (
self.opencti.get_attribute_in_extension(
"participant_ids", stix_object
)
)
return self.create(
stix_id=stix_object["id"],
createdBy=(
Expand Down Expand Up @@ -920,6 +927,11 @@ def import_from_stix2(self, **kwargs):
if "x_opencti_assignee_ids" in stix_object
else None
),
objectParticipant=(
stix_object["x_opencti_participant_ids"]
if "x_opencti_participant_ids" in stix_object
else None
),
x_opencti_workflow_id=(
stix_object["x_opencti_workflow_id"]
if "x_opencti_workflow_id" in stix_object
Expand Down
24 changes: 24 additions & 0 deletions pycti/entities/opencti_case_rfi.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -674,6 +674,8 @@ def create(self, **kwargs):
objects = kwargs.get("objects", None)
object_marking = kwargs.get("objectMarking", None)
object_label = kwargs.get("objectLabel", None)
object_assignee = kwargs.get("objectAssignee", None)
object_participant = kwargs.get("objectParticipant", None)
external_references = kwargs.get("externalReferences", None)
revoked = kwargs.get("revoked", None)
confidence = kwargs.get("confidence", None)
Expand Down Expand Up @@ -709,6 +711,8 @@ def create(self, **kwargs):
"objectMarking": object_marking,
"objectLabel": object_label,
"objectOrganization": granted_refs,
"objectAssignee": object_assignee,
"objectParticipant": object_participant,
"objects": objects,
"externalReferences": external_references,
"revoked": revoked,
Expand Down Expand Up @@ -846,6 +850,16 @@ def import_from_stix2(self, **kwargs):
stix_object["x_opencti_workflow_id"] = (
self.opencti.get_attribute_in_extension("workflow_id", stix_object)
)
if "x_opencti_assignee_ids" not in stix_object:
stix_object["x_opencti_assignee_ids"] = (
self.opencti.get_attribute_in_extension("assignee_ids", stix_object)
)
if "x_opencti_participant_ids" not in stix_object:
stix_object["x_opencti_participant_ids"] = (
self.opencti.get_attribute_in_extension(
"participant_ids", stix_object
)
)

return self.create(
stix_id=stix_object["id"],
Expand Down Expand Up @@ -889,6 +903,16 @@ def import_from_stix2(self, **kwargs):
if "x_opencti_granted_refs" in stix_object
else None
),
objectAssignee=(
stix_object["x_opencti_assignee_ids"]
if "x_opencti_assignee_ids" in stix_object
else None
),
objectParticipant=(
stix_object["x_opencti_participant_ids"]
if "x_opencti_participant_ids" in stix_object
else None
),
x_opencti_workflow_id=(
stix_object["x_opencti_workflow_id"]
if "x_opencti_workflow_id" in stix_object
Expand Down
25 changes: 24 additions & 1 deletion pycti/entities/opencti_case_rft.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -673,6 +673,8 @@ def create(self, **kwargs):
objects = kwargs.get("objects", None)
object_marking = kwargs.get("objectMarking", None)
object_label = kwargs.get("objectLabel", None)
object_assignee = kwargs.get("objectAssignee", None)
object_participant = kwargs.get("objectParticipant", None)
external_references = kwargs.get("externalReferences", None)
revoked = kwargs.get("revoked", None)
confidence = kwargs.get("confidence", None)
Expand Down Expand Up @@ -708,6 +710,8 @@ def create(self, **kwargs):
"objectMarking": object_marking,
"objectLabel": object_label,
"objectOrganization": granted_refs,
"objectAssignee": object_assignee,
"objectParticipant": object_participant,
"objects": objects,
"externalReferences": external_references,
"revoked": revoked,
Expand Down Expand Up @@ -845,7 +849,16 @@ def import_from_stix2(self, **kwargs):
stix_object["x_opencti_workflow_id"] = (
self.opencti.get_attribute_in_extension("workflow_id", stix_object)
)

if "x_opencti_assignee_ids" not in stix_object:
stix_object["x_opencti_assignee_ids"] = (
self.opencti.get_attribute_in_extension("assignee_ids", stix_object)
)
if "x_opencti_participant_ids" not in stix_object:
stix_object["x_opencti_participant_ids"] = (
self.opencti.get_attribute_in_extension(
"participant_ids", stix_object
)
)
return self.create(
stix_id=stix_object["id"],
createdBy=(
Expand Down Expand Up @@ -893,6 +906,16 @@ def import_from_stix2(self, **kwargs):
if "x_opencti_granted_refs" in stix_object
else None
),
objectAssignee=(
stix_object["x_opencti_assignee_ids"]
if "x_opencti_assignee_ids" in stix_object
else None
),
objectParticipant=(
stix_object["x_opencti_participant_ids"]
if "x_opencti_participant_ids" in stix_object
else None
),
x_opencti_workflow_id=(
stix_object["x_opencti_workflow_id"]
if "x_opencti_workflow_id" in stix_object
Expand Down
14 changes: 13 additions & 1 deletion pycti/entities/opencti_task.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -448,6 +448,7 @@ def create(self, **kwargs):
object_marking = kwargs.get("objectMarking", None)
object_label = kwargs.get("objectLabel", None)
object_assignee = kwargs.get("objectAssignee", None)
object_participant = kwargs.get("objectParticipant", None)
granted_refs = kwargs.get("objectOrganization", None)
x_opencti_workflow_id = kwargs.get("x_opencti_workflow_id", None)
update = kwargs.get("update", False)
Expand Down Expand Up @@ -478,6 +479,7 @@ def create(self, **kwargs):
"objectMarking": object_marking,
"objectOrganization": granted_refs,
"objectAssignee": object_assignee,
"objectParticipant": object_participant,
"x_opencti_workflow_id": x_opencti_workflow_id,
"update": update,
}
Expand Down Expand Up @@ -628,7 +630,12 @@ def import_from_stix2(self, **kwargs):
stix_object["x_opencti_assignee_ids"] = (
self.opencti.get_attribute_in_extension("assignee_ids", stix_object)
)

if "x_opencti_participant_ids" not in stix_object:
stix_object["x_opencti_participant_ids"] = (
self.opencti.get_attribute_in_extension(
"participant_ids", stix_object
)
)
return self.create(
stix_id=stix_object["id"],
createdBy=(
Expand Down Expand Up @@ -661,6 +668,11 @@ def import_from_stix2(self, **kwargs):
if "x_opencti_assignee_ids" in stix_object
else None
),
objectParticipant=(
stix_object["x_opencti_participant_ids"]
if "x_opencti_participant_ids" in stix_object
else None
),
x_opencti_workflow_id=(
stix_object["x_opencti_workflow_id"]
if "x_opencti_workflow_id" in stix_object
Expand Down
Loading