Skip to content

OpenCTI Documentation

Home
Deployment & Setup
Deployment & Setup
- Platform
  Platform
- Ecosystem
  Ecosystem
- Advanced
  Advanced
User Guide
User Guide
- Getting started
- Foundations
  Foundations
- Explore knowledge
  Explore knowledge
  - Overview
  - Search for knowledge
  - Explore by entity types
    Explore by entity types
    
    Analysis
    
    Cases
    
    Events
    
    Observations
    
    Threats
    
    Arsenal
    
    Techniques
    
    Entities
    
    Locations
  - Pivot and investigate
- Create knowledge
  Create knowledge
- Enrich knowledge
  Enrich knowledge
- Act on knowledge
  Act on knowledge
  - Case management
  - Notifications
    Notifications
    
    Notifications and alerting
    
    Sample notifiers
  - Background tasks
  - Custom dashboards
  - Workflows and assignation
  - Indicators lifecycle
  - Automation
- Sharing and exports
  Sharing and exports
Administration
Administration
- Introduction
- Enterprise edition
- Data management
  Data management
  - Merging and de-duplication
  - CSV Mappers
- Platform settings
  Platform settings
  - Parameters
  - Security
    Security
    
    Policies
    
    Users and RBAC
    
    Data segregation
  - Customization
    Customization
    
    Entity types
    
    Rules engine
    
    Retention policies
    
    Sourcing knowledge
  - Taxonomies
  - Activity
    Activity
    
    Overview
    
    Events
    
    Configuration
    
    Activity triggers
Reference
Reference
- Data
  Data
- APIs and feeds
  APIs and feeds
- Security and compliance
Development
Development
- Prerequisites
  Prerequisites
  - Ubuntu
  - Windows
- Platform
- Python library
- Connectors
- Playground

Workflows and assignation

Under construction

We are doing our best to complete this page. If you want to participate, don't hesitate to join the Filigran Community on Slack or submit your pull request on the Github doc repository.