TheHive-Project / TheHive-Project/Cortex-Analyzers
Add new field "submittedBy" to data available from Responders [FR]
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 490
- Forks
- 405
- Avg merge
- 2d 43m
- Merged PRs (30d)
- 8
Description
Feature description
It would be great if it would be possible to recover which user run the Responder. Currently, it is included the owner of the case, who created it and the last user who updated it, but not the user executing the Responder. This can be interesting if the Responder needs to perform one action or another depending on the role of the user who executed it.
Describe the solution you'd like
In the same way that you can use:
case_owner = self.get_param('data.owner')
I would like to have something like:
responder_submittedBy = self.get_param('data.submittedBy')
Additional context
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating where Responder data is assembled and compare the existing data.owner value with the get_param('data.owner') usage shown in the issue. Trace how the submitting user is available during execution, then verify that data.submittedBy can be retrieved through get_param and that the existing responder behavior remains unchanged.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- backend
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100