Skip to content

Commit e77855f

Browse files
committed
[client] implement inferred_entity & inferred_rel
1 parent 9e1e077 commit e77855f

File tree

1 file changed

+8
-8
lines changed

1 file changed

+8
-8
lines changed

pycti/utils/opencti_stix2.py

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -2729,15 +2729,15 @@ def apply_opencti_operation(self, item, operation):
27292729
elif operation == "rule_apply":
27302730
self.rule_apply(item=item)
27312731
elif operation == "inferred_entity":
2732-
raise ValueError(
2733-
"Not supported opencti_operation",
2734-
{"operation": operation},
2735-
)
2732+
opencti_inferred_input = self.opencti.get_attribute_in_extension("opencti_inferred_input", item)
2733+
if opencti_inferred_input is None:
2734+
opencti_inferred_input = item["opencti_inferred_input"]
2735+
self.opencti.inferred.create_inferred_entity(input=opencti_inferred_input)
27362736
elif operation == "inferred_rel":
2737-
raise ValueError(
2738-
"Not supported opencti_operation",
2739-
{"operation": operation},
2740-
)
2737+
opencti_inferred_input = self.opencti.get_attribute_in_extension("opencti_inferred_input", item)
2738+
if opencti_inferred_input is None:
2739+
opencti_inferred_input = item["opencti_inferred_input"]
2740+
self.opencti.inferred.create_inferred_rel(input=opencti_inferred_input)
27412741
elif operation == "rule_clear":
27422742
self.rule_clear(item=item)
27432743
elif operation == "rules_rescan":

0 commit comments

Comments
 (0)