Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

The actual STIX ID for referencing the object in the OpenCTI platform #10203

Open
SinaMobasheri opened this issue Mar 8, 2025 · 0 comments
Open
Labels
bug use for describing something not working as expected needs triage use to identify issue needing triage from Filigran Product team

Comments

@SinaMobasheri
Copy link

Description

I set up a TAXII feed for MITRE ATT&CK in the OpenCTI platform. I navigated to techniques, attack patterns, and randomly opened a technique.

Now, I am looking for the technique's STIX ID so I can reference the object from OpenCTI using its ID.

There are two places where I can acquire its STIX ID:

  1. By exporting it.
  2. From the "Standard STIX ID" in the Basic Information section.

However, neither of these IDs matches the MITRE technique STIX ID from the original MITRE attack pattern STIX object downloaded from mitre data repository!

Environment

  1. OS (where OpenCTI server runs): Debian 12
  2. OpenCTI version: { OpenCTI 6.4.5 }
  3. OpenCTI client: { frontend }
  4. Other environment details:

Reproducible Steps

Steps to create the smallest reproducible scenario:

  1. set up a TAXII feed for MITRE ATT&CK in the OpenCTI platform
  2. navigated to techniques, attack patterns, and randomly opened a technique
  3. acquire its STIX ID

Expected Output

No IDs matches the MITRE technique STIX ID from the original MITRE attack pattern STIX object downloaded from mitre data repository!

@SinaMobasheri SinaMobasheri added bug use for describing something not working as expected needs triage use to identify issue needing triage from Filigran Product team labels Mar 8, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug use for describing something not working as expected needs triage use to identify issue needing triage from Filigran Product team
Projects
None yet
Development

No branches or pull requests

1 participant