Skip to content

OpenCTI Documentation

Home
Deployment & Setup
Deployment & Setup
- Platform
  Platform
- Ecosystem
  Ecosystem
- Advanced
  Advanced
- Breaking changes
  Breaking changes
  - Index
  - Migration guides
    Migration guides
    
    OpenBAS scenario generation
    
    Stream connectors data import
    
    Promote to Indicator
    
    SAML authentication
    
    New filter API
User Guide
User Guide
- Getting started
- Foundations
  Foundations
- Explore knowledge
  Explore knowledge
  - Overview
  - Search for knowledge
  - Insights and summaries ✨
  - Explore by entity types
    Explore by entity types
    
    Analysis
    
    Cases
    
    Events
    
    Observations
    
    Threats
    
    Arsenal
    
    Techniques
    
    Entities
    
    Locations
  - Pivot and investigate
- Create knowledge
  Create knowledge
- Enrich knowledge
  Enrich knowledge
- Act on knowledge
  Act on knowledge
  - Case management
  - Notifications and alerting
  - Background tasks
  - Dashboards
    Dashboards
    
    Custom dashboards
    
    Share custom dashboards
    
    Widget creation
    
    Tips for widget creation
  - Workflows and assignation
  - Indicators lifecycle
  - Automation
- Delete and restore knowledge
- Sharing and exports
  Sharing and exports
  - Native feeds
  - Manual export
Administration
Administration
- Introduction
- Enterprise edition
- Data management
  Data management
- Platform settings
  Platform settings
  - Parameters
  - Security
    Security
    
    Policies
    
    Users and RBAC
    Users and RBAC
    
    Users and RBAC
    
    Protect sensitive configuration
    
    Data segregation
    Data segregation
    
    Marking restriction
    
    Organization segregation
    
    Authorized members
    
    Request access
  - Customization
    Customization
    
    Entity types
    
    Rules engine
    
    Notifiers
    Notifiers
    
    Custom notifiers
    
    Notifier samples
    
    Retention policies
    
    Decay rules
    
    Exclusion lists
  - Taxonomies
  - Activity
    Activity
    
    Overview
    
    Events
    
    Configuration
    
    Activity triggers
  - File indexing
  - Support package
Reference
Reference
- Data
  Data
- APIs and feeds
  APIs and feeds
  - GraphQL API
  - Filters
    Filters
    
    Filters knowledge
  - Data Streaming
- Deployment and stack
  Deployment and stack
  - Usage telemetry
  - FIPS 140-2 installation
Development
Development
- Prerequisites
  Prerequisites
  - Ubuntu
  - Windows
- Platform
- Python library
- Connectors
- Playground

Insights (AI-powered)

Under construction

This page is under construction