Skip to content

OpenCTI Documentation

Home
Deployment & Setup
Deployment & Setup
- Platform
  Platform
- Ecosystem
  Ecosystem
- Advanced
  Advanced
User Guide
User Guide
- Getting started
- Foundations
  Foundations
- Explore knowledge
  Explore knowledge
  - Overview
  - Search for knowledge
  - Explore by entity types
    Explore by entity types
    
    Analysis
    
    Cases
    
    Events
    
    Observations
    
    Threats
    
    Arsenal
    
    Techniques
    
    Entities
    
    Locations
  - Pivot and investigate
- Create knowledge
  Create knowledge
- Enrich knowledge
  Enrich knowledge
- Act on knowledge
  Act on knowledge
  - Case management
  - Notifications and alerting
  - Background tasks
  - Dashboards
    Dashboards
    
    Custom dashboards
    
    Share custom dashboards
    
    Widget creation
    
    Tips for widget creation
  - Workflows and assignation
  - Indicators lifecycle
  - Automation
- Delete and restore knowledge
- Sharing and exports
  Sharing and exports
  - Native feeds
  - Manual export
Administration
Administration
- Introduction
- Enterprise edition
- Data management
  Data management
  - Merging and de-duplication
  - CSV Mappers
- Platform settings
  Platform settings
  - Parameters
  - Security
    Security
    
    Policies
    
    Users and RBAC
    Users and RBAC
    
    Users and RBAC
    
    Protect sensitive configuration
    
    Data segregation
    Data segregation
    
    Marking restriction
    
    Organization segregation
  - Customization
    Customization
    
    Entity types
    
    Rules engine
    
    Notifiers
    Notifiers
    
    Custom notifiers
    
    Notifier samples
    
    Retention policies
    
    Decay rules
  - Taxonomies
  - Activity
    Activity
    
    Overview
    
    Events
    
    Configuration
    
    Activity triggers
  - File indexing
  - Support package
Reference
Reference
- Data
  Data
- APIs and feeds
  APIs and feeds
  - GraphQL API
  - Filters
    Filters
    
    Filters knowledge
    
    Filter migration for 5.12
  - Data Streaming
- Deployment and stack
  Deployment and stack
  - Usage telemetry
  - FIPS 140-2 installation
Development
Development
- Prerequisites
  Prerequisites
  - Ubuntu
  - Windows
- Platform
- Python library
- Connectors
- Playground

Data model

Under construction

This page will be automatically generated to reference the platform's data model. We are doing our best to implement this automatic generation as quickly as possible.