add SECURITY IdentityType

Author: CelineSebe

pycti/entities/opencti_identity.py

@@ -57,6 +57,9 @@ def __init__(self, opencti):
                     x_opencti_firstname
                     x_opencti_lastname
                 }
+                ... on SecurityPlatform {
+                    security_platform_type
+                }
             }
             objectMarking {
                 id
@@ -113,6 +116,9 @@ def __init__(self, opencti):
                 x_opencti_organization_type
                 x_opencti_score
             }
+            ... on SecurityPlatform {
+                security_platform_type
+            }
         """
         self.properties_with_files = """
             id
@@ -160,6 +166,9 @@ def __init__(self, opencti):
                     x_opencti_firstname
                     x_opencti_lastname
                 }
+                ... on SecurityPlatform {
+                    security_platform_type
+                }
             }
             objectMarking {
                 id
@@ -229,6 +238,9 @@ def __init__(self, opencti):
                 x_opencti_organization_type
                 x_opencti_score
             }
+            ... on SecurityPlatform {
+                security_platform_type
+            }
             importFiles {
                 edges {
                     node {
@@ -414,6 +426,7 @@ def create(self, **kwargs):
         contact_information = kwargs.get("contact_information", None)
         roles = kwargs.get("roles", None)
         x_opencti_aliases = kwargs.get("x_opencti_aliases", None)
+        security_platform_type = kwargs.get("security_platform_type", None)
         x_opencti_organization_type = kwargs.get("x_opencti_organization_type", None)
         x_opencti_reliability = kwargs.get("x_opencti_reliability", None)
         x_opencti_score = kwargs.get("x_opencti_score", None)
@@ -463,6 +476,21 @@ def create(self, **kwargs):
                 input_variables["x_opencti_reliability"] = x_opencti_reliability
                 input_variables["x_opencti_score"] = x_opencti_score
                 result_data_field = "organizationAdd"
+            elif type == IdentityTypes.SECURITY.value:
+                query = """
+                    mutation SecurityPlatformAdd($input: SecurityPlatformAddInput!) {
+                        securityPlatformAdd(input: $input) {
+                            id
+                            standard_id
+                            entity_type
+                            parent_types
+                        }
+                    }
+                """
+                input_variables["security_platform_type"] = (
+                    security_platform_type
+                )
+                result_data_field = "securityPlatformAdd"
             elif type == IdentityTypes.INDIVIDUAL.value:
                 query = """
                     mutation IndividualAdd($input: IndividualAddInput!) {
@@ -554,6 +582,12 @@ def import_from_stix2(self, **kwargs):
                         "organization_type", stix_object
                     )
                 )
+            if "security_platform_type" not in stix_object:
+                stix_object["security_platform_type"] = (
+                    self.opencti.get_attribute_in_extension(
+                        "security_platform_type", stix_object
+                    )
+                )
             if "x_opencti_reliability" not in stix_object:
                 stix_object["x_opencti_reliability"] = (
                     self.opencti.get_attribute_in_extension("reliability", stix_object)

pycti/utils/constants.py

@@ -58,6 +58,7 @@ class IdentityTypes(Enum):
     ORGANIZATION = "Organization"
     INDIVIDUAL = "Individual"
     SYSTEM = "System"
+    SECURITY = "Security_Platform"
 
     @classmethod
     def has_value(cls, value):