[client] Adapt to TLP v2

Author: SamuelHassine

pycti/connector/opencti_connector_helper.py

@@ -1059,10 +1059,22 @@ def check_max_tlp(tlp: str, max_tlp: str) -> bool:
         """
 
         allowed_tlps: Dict[str, List[str]] = {
-            "TLP:RED": ["TLP:WHITE", "TLP:GREEN", "TLP:AMBER", "TLP:RED"],
-            "TLP:AMBER": ["TLP:WHITE", "TLP:GREEN", "TLP:AMBER"],
-            "TLP:GREEN": ["TLP:WHITE", "TLP:GREEN"],
-            "TLP:WHITE": ["TLP:WHITE"],
+            "TLP:RED": [
+                "TLP:CLEAR",
+                "TLP:GREEN",
+                "TLP:AMBER",
+                "TLP:AMBER+STRICT",
+                "TLP:RED",
+            ],
+            "TLP:AMBER+STRICT": [
+                "TLP:CLEAR",
+                "TLP:GREEN",
+                "TLP:AMBER",
+                "TLP:AMBER+STRICT",
+            ],
+            "TLP:AMBER": ["TLP:CLEAR", "TLP:GREEN", "TLP:AMBER"],
+            "TLP:GREEN": ["TLP:CLEAR", "TLP:GREEN"],
+            "TLP:CLEAR": ["TLP:CLEAR"],
         }
 
         return tlp in allowed_tlps[max_tlp]

pycti/utils/opencti_stix2.py

@@ -523,7 +523,7 @@ def extract_embedded_relationships(
                             self.opencti.marking_definition.read(
                                 filters=[
                                     {"key": "definition_type", "values": ["TLP"]},
-                                    {"key": "definition", "values": ["TLP:WHITE"]},
+                                    {"key": "definition", "values": ["TLP:CLEAR"]},
                                 ]
                             )
                         )