Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Related artifacts: IOC/not IOC #838

Closed
garanews opened this issue Dec 20, 2018 · 2 comments
Closed

Related artifacts: IOC/not IOC #838

garanews opened this issue Dec 20, 2018 · 2 comments
Assignees
Milestone

Comments

@garanews
Copy link
Contributor

Request Type

Feature Request

Problem Description

Analyst adds an observable, system tells him that there is a related artifact, but doesn't tell him if the related artifact is marked as IOC or not, so analyst doesn't know if that observable was already put in block for example.

Steps to Reproduce

  1. create case 1
  2. add observable A
  3. create case 2
  4. add observable A
  5. mark as IOC
  6. create case 3
  7. add observable A
  8. you will see that observable A in case 3 has 2 related artifacts but actually you don't know if is marked as IOC in some other case. (in this example yes, in case 2)

Possible Solutions

  1. change the color of the eye
  2. add a new icon in the observable view links

Complementary information

image
image

@nadouani
Copy link
Contributor

I guess the second screenshot can be made easily, and the first one requires probably some backend changes. We'll take a look on it

@garanews
Copy link
Contributor Author

For the first if is hard change color of the icon, I created #839 (tought was easier) but you answerd already also that one is hard...
Up to you to choose the less hard one ;)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants