Scoring Calculator
Filigranの提供による
Other
概要
Recalculates an Indicator's x_opencti_score from the priorities of its linked entities (threats, malware, locations, sectors, TTPs, authors), driven by label-based per-category impact configuration.
An internal enrichment connector that dynamically adjusts Indicator scores based on the entities they are linked with (Threat Actors, Malware, Locations, Sectors, Attack Patterns, Authors). Operators apply priority labels to the entities that matter to their organisation; when an Indicator is enriched, the connector aggregates the priority of every linked entity (and, optionally, of every entity contained in the Reports that reference the Indicator) and applies a relative-percentage update to x_opencti_score so the score never exceeds 100 and reflects the operator's own threat-landscape priorities.