Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[MISP] Timestamp issue #3145

Closed
NiQuintin opened this issue Dec 16, 2024 · 1 comment
Closed

[MISP] Timestamp issue #3145

NiQuintin opened this issue Dec 16, 2024 · 1 comment
Labels
bug use for describing something not working as expected needs triage use to identify issue needing triage from Filigran Product team

Comments

@NiQuintin
Copy link

Description

Entities and containers ingested by the MISP connector can have incorrectly adjusted timestamps. Sometimes the original creation date of the entity in OCTI is prior to the creation of the report itself in the source.

Environment

OpenCTI version: 6.4.4

Reproducible Steps

Steps to create the smallest reproducible scenario:

  1. Deploying MISP connector for ingestion of reports (for example),
  2. Comparing in the platform the Original creation date and the MISP event's date (+publication date of the source)

Expected Output

The entity's original creation date in the platform corresponds to the date of the ingested MISP event.

Actual Output

The original creation date may be prior to the publication of the report in the source.

Screenshots (optional)

Image
Image
Image
Image

@NiQuintin NiQuintin added bug use for describing something not working as expected needs triage use to identify issue needing triage from Filigran Product team labels Dec 16, 2024
@NiQuintin NiQuintin reopened this Dec 16, 2024
@NiQuintin
Copy link
Author

Think it's not linked to the connector but the platform: OpenCTI-Platform/opencti#9357

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug use for describing something not working as expected needs triage use to identify issue needing triage from Filigran Product team
Projects
None yet
Development

No branches or pull requests

1 participant