[FR] Tags as DropDown with optional custom field.

[X-Thomas]

Hey!

Is your feature request related to a problem? Please describe. Currently adding a new tag for e.g. an Asset, a timeline entry or an ioc may leads to different spelling between different analysts. e.g writing "CobaltStrike" and "Cobalt Strike" Therefore it would be useful to have an extendable list of already added ioc

Describe the solution you'd like The current textfield for tags could be a combobox which is extendable with custom values. That means if I type e.g. "Cobalt" it shows me the already existing tag "Cobalt Strike" which makes the dataset more accurate.

Describe alternatives you've considered A drop down list with preset tags would be no choice in my opinion, its extended way to often.

Additional context AFAIK the tags are stored in each table separately for assets, ioc and timeline. Therefore it might not be that performant to query all tables all the time.

Perhaps it makes sense to either refactor tags to be in an own table (probably some huge effort, but probably cleaner, as it would reduce the tag duplication) otherwise they could be stored in a "helper view", which would be easier and quicker but perhaps not the cleanest way.

Best regard Thomas