Description
When ingesting GTI Campaign objects, reports referenced within the campaign context are not linked back to the Campaign in OpenCTI. The connector does not create Report → related-to → Campaign (or object_refs) relationships for reports associated with a campaign.
Expected Behavior
When a GTI Campaign references associated reports, the connector should:
- Resolve the referenced reports (either already ingested or fetch them)
- Create STIX relationships linking the Report to the Campaign (e.g.,
Report → object_refs → Campaign or Campaign → related-to → Report)
Current Behavior
Campaign objects are ingested without links to their associated reports. Users cannot navigate from a Campaign to the reports that describe it.
Related
Component
external-import/google-threat-intelligence
Description
When ingesting GTI Campaign objects, reports referenced within the campaign context are not linked back to the Campaign in OpenCTI. The connector does not create
Report → related-to → Campaign(orobject_refs) relationships for reports associated with a campaign.Expected Behavior
When a GTI Campaign references associated reports, the connector should:
Report → object_refs → CampaignorCampaign → related-to → Report)Current Behavior
Campaign objects are ingested without links to their associated reports. Users cannot navigate from a Campaign to the reports that describe it.
Related
Component
external-import/google-threat-intelligence