TheHive-Project / TheHive-Project/Cortex-Analyzers

[FR] Custom Tags in Service Interaction Files (Flavors)

Open
#795 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

category:feature-request
Dominant language
Python
Stars
490
Forks
405
Avg merge
2d 43m
Merged PRs (30d)
8

Description

Feature description

Add the tags field, which will include a list of custom tags in the Service Interaction Files (Flavors) of both Analyzers and Responders.

Describe the solution you'd like

Add it after the author field, or even in the end of file. It doesn't matter much. Here is an example:

[...]
  "tags": ["react.ra2205", "react.rs0002"],
[...]

Additional context

We need these custom tags to map the Cortex Analyzers and Responders to the RE&CT framework, visualize the coverage and create tasks for Analyzers/Responders development for the second OSCD Initiative sprint.
Of course, we could do it without the tags field, but it would be much easier if it would be present, so we could do it automatically.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

No specific files or tests are named. Start by locating the Service Interaction File definitions or serialization entry points for both Analyzers and Responders, then check how existing fields are validated. Done means both file types accept and preserve a list-valued tags field in the requested format.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
backend
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.