OpenCTI-Connector

Introduction

This is only personal projects. If you are develop the same connector, just save time and use it. It was developed to used with OpenCTII 3.0.3

Check out my code on github and let me know if there are any problems.

Compatible version

N/A	OpenCTI	PyCTI	Python	Talosip	internal-import	virustotal-reference
Version	3.0.3 -> 3.2.2	3.2.2	3.8	All	All	All

Changed logs

v1.6.0

• fix bug internal-import

v1.5.3

• fix bug internal-import v1.3.9

v1.5.2

• update internal-import v1.3.8
  • _report line is now optional in source IOCs files

v1.5.1

• update talosip
  • Add deleting IOCs option

v1.5.0

• release talosip v1.5.0
  • Improve performance. Reduce resource comsumed while addin new entities.
  • Remove stored IOCs that are no longer in IP blacklist.

v1.4.3

• update talosip v1.4.1
  • All entities now created by pycti client

v1.4.2

• update internal-import v1.3.6
  • All entities now created by pycti client

v.1.4.1

• update talosip v1.4.0
  • Add TLP:WHITE marking to all created observables

v1.4.1

• update internal-import v1.3.5
  • fix bug while archiving file that already exist in the archive folder

v1.4.0

• Add new connector virustotal-reference
  • This connector will add link search on virustotal to obervable as external reference.

v1.3.4

• Interval_scan time can be change from docker-compose.yml for internal-import connector

v1.3.3

• Modified Docker file

v1.3.2

• Add readme file for each connector
• Fix some smal bugs

v1.3.1

• fix bugs internal-import

v1.3.0

• Add feature internal-import
  • Add Virustotal, Threatcrowd as external refrences to created observable
• Fix bugs on internal-import
  • Observables and Indicators is now added to report

v1.2.0

• Add feature talosip
  • Add Virustotal, Threatcrowd as external refrences to created observable

v1.1.0

• Adding internal-import connector

v1.0.0

• Init release talosip connector - the TalosIntelligence IPv4 blacklist importing