Skip to content

[Import-Document] Add support for extracting phone numbers, MEI, ICCID, and IMSI (opencti/#3182)#5685

Open
labo-flg wants to merge 1 commit intomasterfrom
issue/3182-new-observables-imei
Open

[Import-Document] Add support for extracting phone numbers, MEI, ICCID, and IMSI (opencti/#3182)#5685
labo-flg wants to merge 1 commit intomasterfrom
issue/3182-new-observables-imei

Conversation

@labo-flg
Copy link
Member

Proposed changes

  • Add support for extracting phone numbers, IMEI, ICCID, and IMSI from imported documents

Related issues

Checklist

  • I consider the submitted work as finished
  • I have signed my commits using GPG key.
  • I tested the code for its functionality using different use cases
  • I added/update the relevant documentation (either on github or on notion)
  • Where necessary I refactored code to improve the overall quality

Further comments

IMSI and IMEI cannot be distinguished from each other in certain situations. When a 15 digit number with no other characters is detected it will prioritize setting it as an IMSI. A separate update in the OpenCTI project would be needed to allow users to edit the observable type while in draft mode.

This PR initial state is a mirror of #5477 by @scarletmerlin123
We identified some problems platform side that need to be addressed before merging this new feature again.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant