Skip to content

Commit

Permalink
[graphs] Include cases, reports, and groupings as 2nd-degree connections
Browse files Browse the repository at this point in the history
For correlation graphs, include any cases, groupings, or reports as
correlations, regardless of the current container type
  • Loading branch information
ckane committed Jan 28, 2025
1 parent e58d2e5 commit 56756d4
Show file tree
Hide file tree
Showing 5 changed files with 541 additions and 5 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -1279,6 +1279,32 @@ const GroupingKnowledgeCorrelation = createFragmentContainer(
x_opencti_order
x_opencti_color
}
cases(first: 500000) {
edges {
node {
id
name
confidence
entity_type
parent_types
created_at
createdBy {
... on Identity {
id
name
entity_type
}
}
objectMarking {
id
definition_type
definition
x_opencti_order
x_opencti_color
}
}
}
}
groupings(first: 500000) {
edges {
node {
Expand Down Expand Up @@ -1306,6 +1332,33 @@ const GroupingKnowledgeCorrelation = createFragmentContainer(
}
}
}
reports(first: 500000) {
edges {
node {
id
name
published
confidence
entity_type
parent_types
created_at
createdBy {
... on Identity {
id
name
entity_type
}
}
objectMarking {
id
definition_type
definition
x_opencti_order
x_opencti_color
}
}
}
}
}
... on StixDomainObject {
created
Expand Down Expand Up @@ -1387,6 +1440,32 @@ const GroupingKnowledgeCorrelation = createFragmentContainer(
}
... on StixCyberObservable {
observable_value
cases(first: 500000) {
edges {
node {
id
name
confidence
entity_type
parent_types
created_at
createdBy {
... on Identity {
id
name
entity_type
}
}
objectMarking {
id
definition_type
definition
x_opencti_order
x_opencti_color
}
}
}
}
groupings(first: 500000) {
edges {
node {
Expand All @@ -1404,7 +1483,34 @@ const GroupingKnowledgeCorrelation = createFragmentContainer(
entity_type
}
}
objectMarking {
objectMarking {
id
definition_type
definition
x_opencti_order
x_opencti_color
}
}
}
}
reports(first: 500000) {
edges {
node {
id
name
published
confidence
entity_type
parent_types
created_at
createdBy {
... on Identity {
id
name
entity_type
}
}
objectMarking {
id
definition_type
definition
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -1274,6 +1274,59 @@ const ReportKnowledgeCorrelation = createFragmentContainer(
x_opencti_order
x_opencti_color
}
cases(first: 500000) {
edges {
node {
id
name
confidence
entity_type
parent_types
created_at
createdBy {
... on Identity {
id
name
entity_type
}
}
objectMarking {
id
definition_type
definition
x_opencti_order
x_opencti_color
}
}
}
}
groupings(first: 500000) {
edges {
node {
id
name
context
confidence
entity_type
parent_types
created_at
createdBy {
... on Identity {
id
name
entity_type
}
}
objectMarking {
id
definition_type
definition
x_opencti_order
x_opencti_color
}
}
}
}
reports(first: 500000) {
edges {
node {
Expand Down Expand Up @@ -1379,6 +1432,59 @@ const ReportKnowledgeCorrelation = createFragmentContainer(
}
... on StixCyberObservable {
observable_value
cases(first: 500000) {
edges {
node {
id
name
confidence
entity_type
parent_types
created_at
createdBy {
... on Identity {
id
name
entity_type
}
}
objectMarking {
id
definition_type
definition
x_opencti_order
x_opencti_color
}
}
}
}
groupings(first: 500000) {
edges {
node {
id
name
context
confidence
entity_type
parent_types
created_at
createdBy {
... on Identity {
id
name
entity_type
}
}
objectMarking {
id
definition_type
definition
x_opencti_order
x_opencti_color
}
}
}
}
reports(first: 500000) {
edges {
node {
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -1312,6 +1312,60 @@ const IncidentKnowledgeCorrelation = createFragmentContainer(
}
}
}
groupings(first: 500000) {
edges {
node {
id
name
context
confidence
entity_type
parent_types
created_at
createdBy {
... on Identity {
id
name
entity_type
}
}
objectMarking {
id
definition_type
definition
x_opencti_order
x_opencti_color
}
}
}
}
reports(first: 500000) {
edges {
node {
id
name
published
confidence
entity_type
parent_types
created_at
createdBy {
... on Identity {
id
name
entity_type
}
}
objectMarking {
id
definition_type
definition
x_opencti_order
x_opencti_color
}
}
}
}
}
... on StixDomainObject {
created
Expand Down Expand Up @@ -1416,6 +1470,60 @@ const IncidentKnowledgeCorrelation = createFragmentContainer(
}
}
}
groupings(first: 500000) {
edges {
node {
id
name
context
confidence
entity_type
parent_types
created_at
createdBy {
... on Identity {
id
name
entity_type
}
}
objectMarking {
id
definition_type
definition
x_opencti_order
x_opencti_color
}
}
}
}
reports(first: 500000) {
edges {
node {
id
name
published
confidence
entity_type
parent_types
created_at
createdBy {
... on Identity {
id
name
entity_type
}
}
objectMarking {
id
definition_type
definition
x_opencti_order
x_opencti_color
}
}
}
}
}
... on StixFile {
observableName: name
Expand Down
Loading

0 comments on commit 56756d4

Please sign in to comment.