Skip to content

OpenCTI Documentation

Home
Deployment & Setup
Deployment & Setup
- Platform
  Platform
- Ecosystem
  Ecosystem
- Advanced
  Advanced
User Guide
User Guide
- Getting started
- Foundations
  Foundations
- Explore knowledge
  Explore knowledge
  - Overview
  - Search for knowledge
  - Explore by entity types
    Explore by entity types
    
    Analysis
    
    Cases
    
    Events
    
    Observations
    
    Threats
    
    Arsenal
    
    Techniques
    
    Entities
    
    Locations
  - Pivot and investigate
- Create knowledge
  Create knowledge
- Enrich knowledge
  Enrich knowledge
- Act on knowledge
  Act on knowledge
  - Case management
  - Notifications and alerting
  - Background tasks
  - Dashboards
    Dashboards
    
    Custom dashboards
    
    Widget creation
    
    Tips for widget creation
  - Workflows and assignation
  - Indicators lifecycle
  - Automation
- Sharing and exports
  Sharing and exports
  - Native feeds
  - Manual export
Administration
Administration
- Introduction
- Enterprise edition
- Data management
  Data management
  - Merging and de-duplication
  - CSV Mappers
- Platform settings
  Platform settings
  - Parameters
  - Security
    Security
    
    Policies
    
    Users and RBAC
    
    Data segregation
  - Customization
    Customization
    
    Entity types
    
    Rules engine
    
    Notifiers
    Notifiers
    
    Custom notifiers
    
    Notifier samples
    
    Retention policies
    
    Decay rules
  - Taxonomies
  - Activity
    Activity
    
    Overview
    
    Events
    
    Configuration
    
    Activity triggers
  - File indexing
Reference
Reference
- Deployment
  Deployment
  - FIPS 140-2 installation
- Data
  Data
- APIs and feeds
  APIs and feeds
  - GraphQL API
  - Filters
    Filters
    
    Filters knowledge
    
    Filter migration for 5.12
  - Data Streaming
Development
Development
- Prerequisites
  Prerequisites
  - Ubuntu
  - Windows
- Platform
- Python library
- Connectors
- Playground

Data model

Under construction

We are doing our best to complete this page. If you want to participate, don't hesitate to join the Filigran Community on Slack or submit your pull request on the Github doc repository.