Skip to content
This repository was archived by the owner on Dec 5, 2025. It is now read-only.

Commit 41f9ba2

Browse files
committed
[client] implement inferred_entity & inferred_rel
1 parent f1336d9 commit 41f9ba2

File tree

1 file changed

+8
-8
lines changed

1 file changed

+8
-8
lines changed

pycti/utils/opencti_stix2.py

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -2722,15 +2722,15 @@ def apply_opencti_operation(self, item, operation):
27222722
elif operation == "rule_apply":
27232723
self.rule_apply(item=item)
27242724
elif operation == "inferred_entity":
2725-
raise ValueError(
2726-
"Not supported opencti_operation",
2727-
{"operation": operation},
2728-
)
2725+
opencti_inferred_input = self.opencti.get_attribute_in_extension("opencti_inferred_input", item)
2726+
if opencti_inferred_input is None:
2727+
opencti_inferred_input = item["opencti_inferred_input"]
2728+
self.opencti.inferred.create_inferred_entity(input=opencti_inferred_input)
27292729
elif operation == "inferred_rel":
2730-
raise ValueError(
2731-
"Not supported opencti_operation",
2732-
{"operation": operation},
2733-
)
2730+
opencti_inferred_input = self.opencti.get_attribute_in_extension("opencti_inferred_input", item)
2731+
if opencti_inferred_input is None:
2732+
opencti_inferred_input = item["opencti_inferred_input"]
2733+
self.opencti.inferred.create_inferred_rel(input=opencti_inferred_input)
27342734
elif operation == "rule_clear":
27352735
self.rule_clear(item=item)
27362736
elif operation == "rules_rescan":

0 commit comments

Comments
 (0)