A Model Context Protocol server that facilitates integration with OpenCTI, allowing users to query and retrieve cyber threat intelligence data via a standardized interface.
暂无评论. 成为第一个评论的人！
登录以参与讨论
Retrieves the most recent threat intelligence reports. Parameters: first (optional, defaults to 10)
Retrieves a specific report by its ID. Parameters: id (required, report-uuid)
Searches for malware information in the OpenCTI database. Parameters: query (string), first (optional, defaults to 10)
Searches for indicators of compromise. Parameters: query (string), first (optional, defaults to 10)
Searches for threat actor information. Parameters: query (string), first (optional, defaults to 10)
Retrieves user information by ID. Parameters: id (required, user-uuid)
Lists all users in the system. Parameters: none
Lists all groups with their members. Parameters: first (optional, defaults to 10)
Lists all attack patterns in the system. Parameters: first (optional, defaults to 10)
Retrieves campaign information by name. Parameters: name (required, campaign-name)
Lists all system connectors. Parameters: none
Lists all status templates. Parameters: none
Retrieves file information by ID. Parameters: id (required, file-uuid)
Lists all files in the system. Parameters: none
Lists all marking definitions. Parameters: none
Lists all available labels. Parameters: none
