Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Import Document] Changing type of multiple observables in workbench removes an observable #2748

Open
debelyoo opened this issue Oct 2, 2024 · 0 comments
Labels
bug use for describing something not working as expected needs triage use to identify issue needing triage from Filigran Product team

Comments

@debelyoo
Copy link
Contributor

debelyoo commented Oct 2, 2024

Description

I'm importing a PDF with the import-document connector. A workbench is created with the extracted entities. When I change the type of two (or more) observables (e.g. from File to Artifact), the observable that has been modified first is removed from the workbench.

Environment

  1. OS (where OpenCTI server runs): Ubuntu 22.04
  2. OpenCTI version: OpenCTI 6.2.15
  3. OpenCTI client: frontend
  4. Other environment details:

Reproducible Steps

Steps to create the smallest reproducible scenario:

  1. Import PDF document with observables (see attached file)
  2. Open the corresponding workbench (created by the import-document connector)
  3. Change the type of one observable from 'File' to 'Artifact'
  4. Change the type of another observable from 'File' to 'Artifact'

Expected Output

The two observables should have the new type 'Artifact'

Actual Output

The first modified observable is removed from the workbench.

Additional information

Sample PDF:
test_supervision_report_v2.pdf

Screenshots (optional)

@debelyoo debelyoo added bug use for describing something not working as expected needs triage use to identify issue needing triage from Filigran Product team labels Oct 2, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug use for describing something not working as expected needs triage use to identify issue needing triage from Filigran Product team
Projects
None yet
Development

No branches or pull requests

1 participant