From 36968f0850d47bde5868eef561d2ef81e5d1ea63 Mon Sep 17 00:00:00 2001
From: Romain Guignard <romain.guignard@filigran.io>
Date: Thu, 25 Jul 2024 18:19:48 +0200
Subject: [PATCH] alert action form improvements

---
 README.md                                                       | 2 +-
 .../default/data/ui/alerts/opencti_create_incident.html         | 2 +-
 .../data/ui/alerts/opencti_create_incident_response.html        | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/README.md b/README.md
index 72f455e..76751f7 100644
--- a/README.md
+++ b/README.md
@@ -150,7 +150,7 @@ To extract and model alert fields as OpenCTI observables attached to the inciden
 
 #### CIM model
 
-The “CIM Model” method is based on the definition of CIM model fields. With this method, the Add-on will extract all the following fields and model them as follows:
+The “CIM model” method is based on the definition of CIM model fields. With this method, the Add-on will extract all the following fields and model them as follows:
 
 | CIM Field         | Observable type                     |
 |-------------------|-------------------------------------|
diff --git a/TA-opencti-add-on/default/data/ui/alerts/opencti_create_incident.html b/TA-opencti-add-on/default/data/ui/alerts/opencti_create_incident.html
index f2dc719..91bb639 100644
--- a/TA-opencti-add-on/default/data/ui/alerts/opencti_create_incident.html
+++ b/TA-opencti-add-on/default/data/ui/alerts/opencti_create_incident.html
@@ -1 +1 @@
-<form class="form-horizontal form-complex">

    <div class="control-group">
        <label class="control-label" for="opencti_create_incident_name">Name <span class="required">*</span> </label>
        <div class="controls">
            <input type="text" name="action.opencti_create_incident.param.name" id="opencti_create_incident_name"/>
        </div>
    </div>

    <div class="control-group">
        <label class="control-label" for="opencti_create_incident_description">Description  </label>
        <div class="controls">
            <input type="text" name="action.opencti_create_incident.param.description" id="opencti_create_incident_description"/>
        </div>
    </div>

    <div class="control-group">
        <label class="control-label" for="opencti_create_incident_type">Type </label>
        <div class="controls">
            <input type="text" name="action.opencti_create_incident.param.type" id="opencti_create_incident_type"/>
        </div>
    </div>

    <div class="control-group">
        <label class="control-label" for="opencti_create_incident_severity">Severity </label>
        <div class="controls">
            <select name="action.opencti_create_incident.param.severity" id="opencti_create_incident_severity">
                <option value="low">Low</option>
                <option value="medium">Medium</option>
                <option value="high">High</option>
                <option value="critical">Critical</option>
            </select>
        </div>
    </div>

    <div class="control-group">
        <label class="control-label" for="opencti_create_incident_labels">Labels  </label>
        <div class="controls">
            <input type="text" name="action.opencti_create_incident.param.labels" id="opencti_create_incident_labels"/>
        </div>
    </div>

    <div class="control-group">
        <label class="control-label" for="opencti_create_incident_tlp">TLP  </label>
        <div class="controls">
            <select name="action.opencti_create_incident.param.tlp" id="opencti_create_incident_tlp">
                <option value="tlp_clear">TLP:CLEAR</option>
                <option value="tlp_green">TLP:GREEN</option>
                <option value="tlp_amber">TLP:AMBER</option>
                <option value="tlp_red">TLP_RED</option>
            </select>
        </div>
    </div>

    <div class="control-group">
        <label class="control-label" for="opencti_create_incident_observables_extraction">Observables extraction <span class="required">*</span> </label>
        <div class="controls">
            <select name="action.opencti_create_incident.param.observables_extraction" id="opencti_create_incident_observables_extraction">
                <option value="disable">Disable</option>
                <option value="cim_model">CIM Model</option>
                <option value="field_mapping">OpenCTI Fields mapping</option>
            </select>
            <span class="help-block">
                Enable extraction of observables
            </span>
        </div>
    </div>

</form>
\ No newline at end of file
+<form class="form-horizontal form-complex">

    <div class="control-group">
        <label class="control-label" for="opencti_create_incident_name">Name <span class="required">*</span> </label>
        <div class="controls">
            <input type="text" name="action.opencti_create_incident.param.name" id="opencti_create_incident_name"/>
        </div>
    </div>

    <div class="control-group">
        <label class="control-label" for="opencti_create_incident_description">Description  </label>
        <div class="controls">
            <input type="text" name="action.opencti_create_incident.param.description" id="opencti_create_incident_description"/>
        </div>
    </div>

    <div class="control-group">
        <label class="control-label" for="opencti_create_incident_type">Type </label>
        <div class="controls">
            <input type="text" name="action.opencti_create_incident.param.type" id="opencti_create_incident_type"/>
        </div>
    </div>

    <div class="control-group">
        <label class="control-label" for="opencti_create_incident_severity">Severity </label>
        <div class="controls">
            <select name="action.opencti_create_incident.param.severity" id="opencti_create_incident_severity">
                <option value="low">Low</option>
                <option value="medium">Medium</option>
                <option value="high">High</option>
                <option value="critical">Critical</option>
            </select>
        </div>
    </div>

    <div class="control-group">
        <label class="control-label" for="opencti_create_incident_labels">Labels  </label>
        <div class="controls">
            <input type="text" name="action.opencti_create_incident.param.labels" id="opencti_create_incident_labels"/>
        </div>
    </div>

    <div class="control-group">
        <label class="control-label" for="opencti_create_incident_tlp">TLP  </label>
        <div class="controls">
            <select name="action.opencti_create_incident.param.tlp" id="opencti_create_incident_tlp">
                <option value="tlp_clear">TLP:CLEAR</option>
                <option value="tlp_green">TLP:GREEN</option>
                <option value="tlp_amber">TLP:AMBER</option>
                <option value="tlp_red">TLP_RED</option>
            </select>
        </div>
    </div>

    <div class="control-group">
        <label class="control-label" for="opencti_create_incident_observables_extraction">Observables extraction <span class="required">*</span> </label>
        <div class="controls">
            <select name="action.opencti_create_incident.param.observables_extraction" id="opencti_create_incident_observables_extraction">
                <option value="disable">Disable</option>
                <option value="cim_model">CIM model</option>
                <option value="field_mapping">Field mapping</option>
            </select>
            <span class="help-block">
                Enable extraction of observables
            </span>
        </div>
    </div>

</form>
\ No newline at end of file
diff --git a/TA-opencti-add-on/default/data/ui/alerts/opencti_create_incident_response.html b/TA-opencti-add-on/default/data/ui/alerts/opencti_create_incident_response.html
index 9b72d74..d5a6263 100644
--- a/TA-opencti-add-on/default/data/ui/alerts/opencti_create_incident_response.html
+++ b/TA-opencti-add-on/default/data/ui/alerts/opencti_create_incident_response.html
@@ -1 +1 @@
-<form class="form-horizontal form-complex">

    <div class="control-group">
        <label class="control-label" for="opencti_create_incident_response_name">Name <span class="required">*</span> </label>
        <div class="controls">
            <input type="text" name="action.opencti_create_incident_response.param.name" id="opencti_create_incident_response_name"/>
        </div>
    </div>

    <div class="control-group">
        <label class="control-label" for="opencti_create_incident_response_description">Description  </label>
        <div class="controls">
            <input type="text" name="action.opencti_create_incident_response.param.description" id="opencti_create_incident_response_description"/>
        </div>
    </div>

    <div class="control-group">
        <label class="control-label" for="opencti_create_incident_response_severity">Severity  </label>
        <div class="controls">
            <select name="action.opencti_create_incident_response.param.severity" id="opencti_create_incident_response_severity">
                <option value="low">Low</option>
                <option value="medium">Medium</option>
                <option value="high">High</option>
                <option value="critical">Critical</option>
            </select>
        </div>
    </div>

    <div class="control-group">
        <label class="control-label" for="opencti_create_incident_response_priority">Priority  </label>
        <div class="controls">
            <select name="action.opencti_create_incident_response.param.priority" id="opencti_create_incident_response_priority">
                <option value="p1">P1</option>
                <option value="p2">P2</option>
                <option value="p3">P3</option>
                <option value="p4">P4</option>
            </select>
        </div>
    </div>

    <div class="control-group">
        <label class="control-label" for="opencti_create_incident_response_type">Type  </label>
        <div class="controls">
            <input type="text" name="action.opencti_create_incident_response.param.type" id="opencti_create_incident_response_type"/>
        </div>
    </div>

    <div class="control-group">
        <label class="control-label" for="opencti_create_incident_response_labels">Labels  </label>
        <div class="controls">
            <input type="text" name="action.opencti_create_incident_response.param.labels" id="opencti_create_incident_response_labels"/>
        </div>
    </div>

    <div class="control-group">
        <label class="control-label" for="opencti_create_incident_response_tlp">TLP  </label>
        <div class="controls">
            <select name="action.opencti_create_incident_response.param.tlp" id="opencti_create_incident_response_tlp">
                <option value="tlp_clear">TLP:CLEAR</option>
                <option value="tlp_green">TLP:GREEN</option>
                <option value="tlp_amber">TLP:AMBER</option>
                <option value="tlp_red">TLP:RED</option>
            </select>
        </div>
    </div>

    <div class="control-group">
        <label class="control-label" for="opencti_create_incident_response_extraction">Observables extraction <span class="required">*</span> </label>
        <div class="controls">
            <select name="action.opencti_create_incident_response.param.observables_extraction" id="opencti_create_incident_response_extraction">
                <option value="disable">Disable</option>
                <option value="cim_model">CIM Model</option>
                <option value="field_mapping">OpenCTI Fields mapping</option>
            </select>
            <span class="help-block">
                Enable extraction of observables
            </span>
        </div>
    </div>

</form>
\ No newline at end of file
+<form class="form-horizontal form-complex">

    <div class="control-group">
        <label class="control-label" for="opencti_create_incident_response_name">Name <span class="required">*</span> </label>
        <div class="controls">
            <input type="text" name="action.opencti_create_incident_response.param.name" id="opencti_create_incident_response_name"/>
        </div>
    </div>

    <div class="control-group">
        <label class="control-label" for="opencti_create_incident_response_description">Description  </label>
        <div class="controls">
            <input type="text" name="action.opencti_create_incident_response.param.description" id="opencti_create_incident_response_description"/>
        </div>
    </div>

    <div class="control-group">
        <label class="control-label" for="opencti_create_incident_response_severity">Severity  </label>
        <div class="controls">
            <select name="action.opencti_create_incident_response.param.severity" id="opencti_create_incident_response_severity">
                <option value="low">Low</option>
                <option value="medium">Medium</option>
                <option value="high">High</option>
                <option value="critical">Critical</option>
            </select>
        </div>
    </div>

    <div class="control-group">
        <label class="control-label" for="opencti_create_incident_response_priority">Priority  </label>
        <div class="controls">
            <select name="action.opencti_create_incident_response.param.priority" id="opencti_create_incident_response_priority">
                <option value="p1">P1</option>
                <option value="p2">P2</option>
                <option value="p3">P3</option>
                <option value="p4">P4</option>
            </select>
        </div>
    </div>

    <div class="control-group">
        <label class="control-label" for="opencti_create_incident_response_type">Type  </label>
        <div class="controls">
            <input type="text" name="action.opencti_create_incident_response.param.type" id="opencti_create_incident_response_type"/>
        </div>
    </div>

    <div class="control-group">
        <label class="control-label" for="opencti_create_incident_response_labels">Labels  </label>
        <div class="controls">
            <input type="text" name="action.opencti_create_incident_response.param.labels" id="opencti_create_incident_response_labels"/>
        </div>
    </div>

    <div class="control-group">
        <label class="control-label" for="opencti_create_incident_response_tlp">TLP  </label>
        <div class="controls">
            <select name="action.opencti_create_incident_response.param.tlp" id="opencti_create_incident_response_tlp">
                <option value="tlp_clear">TLP:CLEAR</option>
                <option value="tlp_green">TLP:GREEN</option>
                <option value="tlp_amber">TLP:AMBER</option>
                <option value="tlp_red">TLP:RED</option>
            </select>
        </div>
    </div>

    <div class="control-group">
        <label class="control-label" for="opencti_create_incident_response_extraction">Observables extraction <span class="required">*</span> </label>
        <div class="controls">
            <select name="action.opencti_create_incident_response.param.observables_extraction" id="opencti_create_incident_response_extraction">
                <option value="disable">Disable</option>
                <option value="cim_model">CIM model</option>
                <option value="field_mapping">Field mapping</option>
            </select>
            <span class="help-block">
                Enable extraction of observables
            </span>
        </div>
    </div>

</form>
\ No newline at end of file