Threat Actor Enrichment
Enrichment & Analysis
Threat Intelligence Management
Overview
Enriches threat actor groups with computed last_seen dates from related indicators and reports.
Periodically enriches threat actor group entities by computing their real last_seen date from related indicators and reports. Fixes stale last_seen values that occur because OpenCTI does not automatically propagate activity dates from linked IOCs back to threat actor entities.
Basic information
Connectors
External import
7.260527.0
0