-
Notifications
You must be signed in to change notification settings - Fork 385
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
1 parent
a1b7710
commit 5728524
Showing
1 changed file
with
17 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,17 @@ | ||
[OpenCTI](https://www.opencti.io/en/) is an open cyber threat intelligence platform which aims at providing a powerful knowledge management database with an enforced schema especially tailored for cyber threat intelligence and cyber operations and based on STIX 2. | ||
|
||
The analyzer comes in only one flavor to look for an observable in the platform. | ||
The analyzer comes in two flavors to search for an observable in the platform: | ||
|
||
- OpenCTI_**SearchExactObservable**: returns an exact match only | ||
- OpenCTI_**SearchObservables**: returns all observables containing the input data | ||
|
||
#### Requirements | ||
|
||
The OpenCTI analyzer requires you to have access to one or several [OpenCTI](https://www.opencti.io/en/) | ||
instances. You can also deploy your own instance. | ||
instances in version 4. You can also deploy your own instance. | ||
|
||
Three parameters are required for each instance to make the analyzer work: | ||
|
||
- `url` : URL of the instance, e.g. "https://demo.opencti.io" |