[client] wip inferred in bundle task manager

Author: JeremyCloarec

pycti/api/opencti_api_client.py

@@ -11,6 +11,7 @@
 from pycti import __version__
 from pycti.api.opencti_api_connector import OpenCTIApiConnector
 from pycti.api.opencti_api_draft import OpenCTIApiDraft
+from pycti.api.opencti_api_inferred import OpenCTIApiInferred
 from pycti.api.opencti_api_internal_file import OpenCTIApiInternalFile
 from pycti.api.opencti_api_notification import OpenCTIApiNotification
 from pycti.api.opencti_api_pir import OpenCTIApiPir
@@ -175,6 +176,7 @@ def __init__(
         # Define the dependencies
         self.work = OpenCTIApiWork(self)
         self.notification = OpenCTIApiNotification(self)
+        self.inferred = OpenCTIApiInferred(self)
         self.trash = OpenCTIApiTrash(self)
         self.draft = OpenCTIApiDraft(self)
         self.workspace = OpenCTIApiWorkspace(self)

pycti/api/opencti_api_inferred.py

@@ -0,0 +1,29 @@
+class OpenCTIApiInferred:
+    """OpenCTIApiInferred"""
+
+    def __init__(self, api):
+        self.api = api
+
+    def create_inferred_rel(self, **kwargs):
+        input = kwargs.get("input", None)
+        self.api.app_logger.info(
+            "Creating inferred rel", {"input": input}
+        )
+        query = """
+            mutation inferredRelationAdd($jsonInput: String!) {
+                inferredRelationAdd(jsonInput: $jsonInput)
+            }
+           """
+        self.api.query(query, {"jsonInput": input})
+
+    def create_inferred_entity(self, **kwargs):
+        input = kwargs.get("input", None)
+        self.api.app_logger.info(
+            "Creating inferred rel", {"input": input}
+        )
+        query = """
+            mutation inferredRelationAdd($jsonInput: String!) {
+                inferredRelationAdd(jsonInput: $jsonInput)
+            }
+           """
+        self.api.query(query, {"jsonInput": input})

pycti/utils/opencti_stix2.py

@@ -2643,11 +2643,17 @@ def apply_opencti_operation(self, item, operation):
             input = item["input"]
             self.opencti.pir.pir_unflag_element(id=id, input=input)
         elif operation == "rule_apply":
+            self.rule_apply(item=item)
+        elif operation == "inferred_entity":
+            raise ValueError(
+                "Not supported opencti_operation",
+                {"operation": operation},
+            )
+        elif operation == "inferred_rel":
             raise ValueError(
                 "Not supported opencti_operation",
                 {"operation": operation},
             )
-            self.rule_apply(item=item)
         elif operation == "rule_clear":
             self.rule_clear(item=item)
         elif operation == "rules_rescan":