Skip to content

[GTI Connector] Campaigns: Associated Reports not linked #6247

@CTIBurn0ut

Description

@CTIBurn0ut

Description

When ingesting GTI Campaign objects, reports referenced within the campaign context are not linked back to the Campaign in OpenCTI. The connector does not create Report → related-to → Campaign (or object_refs) relationships for reports associated with a campaign.

Expected Behavior

When a GTI Campaign references associated reports, the connector should:

  1. Resolve the referenced reports (either already ingested or fetch them)
  2. Create STIX relationships linking the Report to the Campaign (e.g., Report → object_refs → Campaign or Campaign → related-to → Report)

Current Behavior

Campaign objects are ingested without links to their associated reports. Users cannot navigate from a Campaign to the reports that describe it.

Related

Component

external-import/google-threat-intelligence

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions