client-python icon indicating copy to clipboard operation
client-python copied to clipboard

Optional Indicators load in the case of SCO creation

Open lydiym opened this issue 11 months ago • 0 comments

Problem to Solve

Call of StixCyberObservable.create in pycti produces extra indicators retrieving (that should be optional): https://github.com/OpenCTI-Platform/client-python/blob/7d3f09dbf7ec80ba83533574f7cef94c3eaefc55/pycti/entities/opencti_stix_cyber_observable.py#L462-L470

The extra retrieving produces extra workload to the Platform (that can be harmful in some cases, for example in intensive SCO creation)

Current Workaround

Make you own create function with custom query (might be with custom signature) and call it using query method or using your favorite HTTP client.

Proposed Solution

Add parameter to StixCyberObservable.create for optional indicators retrieving, for example bool or use existing one: createIndicator. Make it False by default.

lydiym avatar Mar 07 '25 09:03 lydiym