Skip to content

Commit

Permalink
#1113 add README for the doc.
Browse files Browse the repository at this point in the history
  • Loading branch information
jeromeleonard committed Jul 22, 2022
1 parent a1b7710 commit 5728524
Showing 1 changed file with 17 additions and 0 deletions.
17 changes: 17 additions & 0 deletions analyzers/OpenCTI/README.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,17 @@
[OpenCTI](https://www.opencti.io/en/) is an open cyber threat intelligence platform which aims at providing a powerful knowledge management database with an enforced schema especially tailored for cyber threat intelligence and cyber operations and based on STIX 2.

The analyzer comes in only one flavor to look for an observable in the platform.
The analyzer comes in two flavors to search for an observable in the platform:

- OpenCTI_**SearchExactObservable**: returns an exact match only
- OpenCTI_**SearchObservables**: returns all observables containing the input data

#### Requirements

The OpenCTI analyzer requires you to have access to one or several [OpenCTI](https://www.opencti.io/en/)
instances. You can also deploy your own instance.
instances in version 4. You can also deploy your own instance.

Three parameters are required for each instance to make the analyzer work:

- `url` : URL of the instance, e.g. "https://demo.opencti.io"

0 comments on commit 5728524

Please sign in to comment.