unfetter-discover/unfetter

Associate Changed Reports with Appropriate Threat Boards

Opened this issue · 0 comments

Task

If a user adds some metadata to a report (associates it to a technique, intrusion set, or target; for example), need to make sure that it is associated as a potential matching report with appropriate threat boards and perhaps removed as a potential with incompatible potential boards.

Implementation

Should use similar if not same code as threat report ingest service.
Unsure if removal from potentials is handled at all currently