[client] Add the method promote_to_indicator in SCO class (#255)

Author: SamuelHassine

pycti/__init__.py

@@ -1,5 +1,5 @@
 # -*- coding: utf-8 -*-
-__version__ = "5.3.0"
+__version__ = "5.3.1"
 
 from .api.opencti_api_client import OpenCTIApiClient
 from .api.opencti_api_connector import OpenCTIApiConnector

pycti/entities/opencti_stix_cyber_observable.py

@@ -1282,6 +1282,46 @@ def update_field(self, **kwargs):
             )
             return None
 
+    """
+        Promote a Stix-Observable to an Indicator
+
+        :param id: the Stix-Observable id
+        :return void
+    """
+
+    def promote_to_indicator(self, **kwargs):
+        id = kwargs.get("id", None)
+        custom_attributes = kwargs.get("customAttributes", None)
+        if id is not None:
+            self.opencti.log("info", "Promoting Stix-Observable {" + id + "}.")
+            query = (
+                """
+                    mutation StixCyberObservableEdit($id: ID!) {
+                        stixCyberObservableEdit(id: $id) {
+                            promote {
+                                """
+                + (
+                    custom_attributes
+                    if custom_attributes is not None
+                    else self.properties
+                )
+                + """    
+                            }                               
+                        }
+                    }
+             """
+            )
+            result = self.opencti.query(query, {"id": id})
+            return self.opencti.process_multiple_fields(
+                result["data"]["stixCyberObservableEdit"]["promote"]
+            )
+        else:
+            self.opencti.log(
+                "error",
+                "[opencti_stix_cyber_observable_promote] Missing parameters: id",
+            )
+            return None
+
     """
         Delete a Stix-Observable