Scoring Calculator

An internal enrichment connector that dynamically adjusts Indicator scores based on the entities they are linked with (Threat Actors, Malware, Locations, Sectors, Attack Patterns, Authors). Operators apply priority labels to the entities that matter to their organisation; when an Indicator is enriched, the connector aggregates the priority of every linked entity (and, optionally, of every entity contained in the Reports that reference the Indicator) and applies a relative-percentage update to x_opencti_score so the score never exceeds 100 and reflects the operator's own threat-landscape priorities.