[RST Cloud - Report Hub] Several issues

[Lhorus6]

Description

Many issues have been identified. As is, the connector can be deployed in production but its quality is very low.

Blocking problem

• Some relationships are poorly modeled
  • “related to” relationships between countries/sector and Intrusion sets/malware, instead of “targets” relationships
  • “related to” relationships between Attack Patterns and Intrusion sets, instead of “uses” relationships

Non-blocking problem

• Do not create Observables associated with Indicators

• An error "'NoneType' object is not subscriptable" is raised at each work:

• External references are attached to all entities, but no reports are created. What would be best would be:
  1. Create a report
  2. Attach the External Reference to the report
  3. Create all entities and relationships (as currently done)
  4. Put all entities in the report.

Other improvements

• It does not put markings on Notes and Organization it creates:

• It does not fill in the "Author" fields of the Attack Patterns and Notes it creates:

Environment

OCTI 6.3.5

Reproducible Steps

Steps to create the smallest reproducible scenario:

1. Deploy the connector