Intel471 Connector Ingestion Issue

[nhuber0724]

Description

The Intel471 connector is ingesting data using incorrect entity types An APT intrusion set is ingested as a threat actor individual. A ransomware is ingested as a threat actor individual.

Environment

OpenCTI 6.5.3

Reproducible Steps

Steps to create the smallest reproducible scenario:

1. Examine the knowledge tab of a report ingested by Intel471 that contains multiple different entities.
2. Examine threat actor/individual types.
3. It appears the Intel471 connector is not ingesting certain entity types correctly.

Expected Output

The connector should ingest entity types appropriately in line with the STIX data model. For instance, APTs should be ingested as intrusion sets. Threat Actor Groups named should be ingested as Threat Actor Groups.

Actual Output

Entities are not ingested correctly.

Additional information

Screenshots available internally.