Custom Objects
Custom Objects are custom STIX objects that provide additional context to any threat intel. Custom Objects characterize threat data components that are not described by STIX components. The application allows you to create custom objects that can be mapped with custom attributes and are used while creating custom intel packages in the application. Custom objects can be organization- or sector-specific. Some examples include Payment Card information, IMEI numbers, SIM Card number, and so on.
Create Custom Object
Custom Objects are included in STIX packages that are created in the CTIX application. You can choose Custom Objects in the details submission form that allows the creation of custom STIX packages.
Before you Start
Ensure that your user group has View and Update Configuration permissions.
Steps
To create custom objects, follow these steps
Go to Administration > Custom Entities Management.
Click the Custom Object tab under Custom Entities Management and, click Add Custom Object.
Enter the following details:
Title: Enter a title within 50 characters to uniquely the custom object.
Description: Enter a description for the custom object.
Search Custom Attributes: Search for the custom attribute to include any custom attributes or custom indicators for the custom Object. If the search attribute does not exist you can create a new attribute. To create a custom attribute, see →Custom Attributes.
Select Attributes: Select one or more custom attributes to set as required attributes or as a primary attribute.
Note
If you choose a multi-select custom attribute, you cannot set it as the primary attribute for the custom object. This is a because a primary attribute is expected to have a singular value for clear identification, whereas a multi-select attribute may contain multiple values.
Click Save.
You can view the new custom object under Custom Object which lists the details such as type, primary attribute, created date, and modified date.
Edit a Custom Object
You can edit the details of an existing custom object such as title, description, and attributes.
Before you Start
Ensure that your user group has View and Update Configuration permissions.
Steps
To edit a custom object, follow these steps:
Go to Administration > Custom Entities Management.
Click the Custom Object tab, select an object, and click Edit.
Edit details of the object such as title, description, and search and select custom attributes.
Click Save.
You can view the updated custom object details under Custom Object which lists the details such as type, primary attribute, created date, and modified date.