Skip to content
This repository was archived by the owner on Dec 5, 2025. It is now read-only.

Commit b27f475

Browse files
SarahBocognanoSarahBocognano
authored
[client] Add assignee through automation playbook (opencti/7728)
1 parent de3d1d2 commit b27f475

File tree

4 files changed

+74
-3
lines changed

4 files changed

+74
-3
lines changed

‎pycti/entities/opencti_case_incident.py‎

Lines changed: 13 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -690,6 +690,7 @@ def create(self, **kwargs):
690690
priority = kwargs.get("priority", None)
691691
x_opencti_stix_ids = kwargs.get("x_opencti_stix_ids", None)
692692
object_assignee = kwargs.get("objectAssignee", None)
693+
object_participant = kwargs.get("objectParticipant", None)
693694
granted_refs = kwargs.get("objectOrganization", None)
694695
response_types = kwargs.get("response_types", None)
695696
x_opencti_workflow_id = kwargs.get("x_opencti_workflow_id", None)
@@ -717,6 +718,7 @@ def create(self, **kwargs):
717718
"objectLabel": object_label,
718719
"objectOrganization": granted_refs,
719720
"objectAssignee": object_assignee,
721+
"objectParticipant": object_participant,
720722
"objects": objects,
721723
"externalReferences": external_references,
722724
"revoked": revoked,
@@ -865,7 +867,12 @@ def import_from_stix2(self, **kwargs):
865867
stix_object["x_opencti_assignee_ids"] = (
866868
self.opencti.get_attribute_in_extension("assignee_ids", stix_object)
867869
)
868-
870+
if "x_opencti_participant_ids" not in stix_object:
871+
stix_object["x_opencti_participant_ids"] = (
872+
self.opencti.get_attribute_in_extension(
873+
"participant_ids", stix_object
874+
)
875+
)
869876
return self.create(
870877
stix_id=stix_object["id"],
871878
createdBy=(
@@ -920,6 +927,11 @@ def import_from_stix2(self, **kwargs):
920927
if "x_opencti_assignee_ids" in stix_object
921928
else None
922929
),
930+
objectParticipant=(
931+
stix_object["x_opencti_participant_ids"]
932+
if "x_opencti_participant_ids" in stix_object
933+
else None
934+
),
923935
x_opencti_workflow_id=(
924936
stix_object["x_opencti_workflow_id"]
925937
if "x_opencti_workflow_id" in stix_object

‎pycti/entities/opencti_case_rfi.py‎

Lines changed: 24 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -674,6 +674,8 @@ def create(self, **kwargs):
674674
objects = kwargs.get("objects", None)
675675
object_marking = kwargs.get("objectMarking", None)
676676
object_label = kwargs.get("objectLabel", None)
677+
object_assignee = kwargs.get("objectAssignee", None)
678+
object_participant = kwargs.get("objectParticipant", None)
677679
external_references = kwargs.get("externalReferences", None)
678680
revoked = kwargs.get("revoked", None)
679681
confidence = kwargs.get("confidence", None)
@@ -709,6 +711,8 @@ def create(self, **kwargs):
709711
"objectMarking": object_marking,
710712
"objectLabel": object_label,
711713
"objectOrganization": granted_refs,
714+
"objectAssignee": object_assignee,
715+
"objectParticipant": object_participant,
712716
"objects": objects,
713717
"externalReferences": external_references,
714718
"revoked": revoked,
@@ -846,6 +850,16 @@ def import_from_stix2(self, **kwargs):
846850
stix_object["x_opencti_workflow_id"] = (
847851
self.opencti.get_attribute_in_extension("workflow_id", stix_object)
848852
)
853+
if "x_opencti_assignee_ids" not in stix_object:
854+
stix_object["x_opencti_assignee_ids"] = (
855+
self.opencti.get_attribute_in_extension("assignee_ids", stix_object)
856+
)
857+
if "x_opencti_participant_ids" not in stix_object:
858+
stix_object["x_opencti_participant_ids"] = (
859+
self.opencti.get_attribute_in_extension(
860+
"participant_ids", stix_object
861+
)
862+
)
849863

850864
return self.create(
851865
stix_id=stix_object["id"],
@@ -889,6 +903,16 @@ def import_from_stix2(self, **kwargs):
889903
if "x_opencti_granted_refs" in stix_object
890904
else None
891905
),
906+
objectAssignee=(
907+
stix_object["x_opencti_assignee_ids"]
908+
if "x_opencti_assignee_ids" in stix_object
909+
else None
910+
),
911+
objectParticipant=(
912+
stix_object["x_opencti_participant_ids"]
913+
if "x_opencti_participant_ids" in stix_object
914+
else None
915+
),
892916
x_opencti_workflow_id=(
893917
stix_object["x_opencti_workflow_id"]
894918
if "x_opencti_workflow_id" in stix_object

‎pycti/entities/opencti_case_rft.py‎

Lines changed: 24 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -673,6 +673,8 @@ def create(self, **kwargs):
673673
objects = kwargs.get("objects", None)
674674
object_marking = kwargs.get("objectMarking", None)
675675
object_label = kwargs.get("objectLabel", None)
676+
object_assignee = kwargs.get("objectAssignee", None)
677+
object_participant = kwargs.get("objectParticipant", None)
676678
external_references = kwargs.get("externalReferences", None)
677679
revoked = kwargs.get("revoked", None)
678680
confidence = kwargs.get("confidence", None)
@@ -708,6 +710,8 @@ def create(self, **kwargs):
708710
"objectMarking": object_marking,
709711
"objectLabel": object_label,
710712
"objectOrganization": granted_refs,
713+
"objectAssignee": object_assignee,
714+
"objectParticipant": object_participant,
711715
"objects": objects,
712716
"externalReferences": external_references,
713717
"revoked": revoked,
@@ -845,7 +849,16 @@ def import_from_stix2(self, **kwargs):
845849
stix_object["x_opencti_workflow_id"] = (
846850
self.opencti.get_attribute_in_extension("workflow_id", stix_object)
847851
)
848-
852+
if "x_opencti_assignee_ids" not in stix_object:
853+
stix_object["x_opencti_assignee_ids"] = (
854+
self.opencti.get_attribute_in_extension("assignee_ids", stix_object)
855+
)
856+
if "x_opencti_participant_ids" not in stix_object:
857+
stix_object["x_opencti_participant_ids"] = (
858+
self.opencti.get_attribute_in_extension(
859+
"participant_ids", stix_object
860+
)
861+
)
849862
return self.create(
850863
stix_id=stix_object["id"],
851864
createdBy=(
@@ -893,6 +906,16 @@ def import_from_stix2(self, **kwargs):
893906
if "x_opencti_granted_refs" in stix_object
894907
else None
895908
),
909+
objectAssignee=(
910+
stix_object["x_opencti_assignee_ids"]
911+
if "x_opencti_assignee_ids" in stix_object
912+
else None
913+
),
914+
objectParticipant=(
915+
stix_object["x_opencti_participant_ids"]
916+
if "x_opencti_participant_ids" in stix_object
917+
else None
918+
),
896919
x_opencti_workflow_id=(
897920
stix_object["x_opencti_workflow_id"]
898921
if "x_opencti_workflow_id" in stix_object

‎pycti/entities/opencti_task.py‎

Lines changed: 13 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -448,6 +448,7 @@ def create(self, **kwargs):
448448
object_marking = kwargs.get("objectMarking", None)
449449
object_label = kwargs.get("objectLabel", None)
450450
object_assignee = kwargs.get("objectAssignee", None)
451+
object_participant = kwargs.get("objectParticipant", None)
451452
granted_refs = kwargs.get("objectOrganization", None)
452453
x_opencti_workflow_id = kwargs.get("x_opencti_workflow_id", None)
453454
update = kwargs.get("update", False)
@@ -478,6 +479,7 @@ def create(self, **kwargs):
478479
"objectMarking": object_marking,
479480
"objectOrganization": granted_refs,
480481
"objectAssignee": object_assignee,
482+
"objectParticipant": object_participant,
481483
"x_opencti_workflow_id": x_opencti_workflow_id,
482484
"update": update,
483485
}
@@ -628,7 +630,12 @@ def import_from_stix2(self, **kwargs):
628630
stix_object["x_opencti_assignee_ids"] = (
629631
self.opencti.get_attribute_in_extension("assignee_ids", stix_object)
630632
)
631-
633+
if "x_opencti_participant_ids" not in stix_object:
634+
stix_object["x_opencti_participant_ids"] = (
635+
self.opencti.get_attribute_in_extension(
636+
"participant_ids", stix_object
637+
)
638+
)
632639
return self.create(
633640
stix_id=stix_object["id"],
634641
createdBy=(
@@ -661,6 +668,11 @@ def import_from_stix2(self, **kwargs):
661668
if "x_opencti_assignee_ids" in stix_object
662669
else None
663670
),
671+
objectParticipant=(
672+
stix_object["x_opencti_participant_ids"]
673+
if "x_opencti_participant_ids" in stix_object
674+
else None
675+
),
664676
x_opencti_workflow_id=(
665677
stix_object["x_opencti_workflow_id"]
666678
if "x_opencti_workflow_id" in stix_object

0 commit comments

Comments
 (0)