Go back to Browse the knowledge
The knowledge on the OpenCTI platform can be added by manually creating new entities or relationships.
In each list of entities, you can add new entities of the corresponding type by clicking on the "+" button on the bottom right of the page. For instance, if you are in the reports section, you will only be able to create reports.
A menu will appear and need to be filled out with information on the new entity, as shown in the image below. Only the name and the description are mandatory fields.
Labels and authors can be chosen from the scrolling menu, or created directly from this window, using the small "+" button, as shown below. In this example, you can see the temporary window for creating a new "author" while creating a new "intrusion set".
New marking levels cannot be added from this menu directly. Adding and editig marking levels is available in the "Settings" menu. Admin level-rights are required to edit the list of marking levels.
The creation menu contains the bare minimum of fields necessary to create the entity. More fields are available for modification once the entity is created, in the "editing" mode (see below for more informaiton on editing)
<aside> 💡 If you are looking for the whole OpenCTI data model (entities, properties), please refer to the dedicated documentation, which you can find here : https://www.notion.so/luatix/Data-model-4427344d93a74fe194d5a52ce4a41a8d
</aside>
Reports are a specific entity in the platform, allowing to trace back the source of a relation between two entities. The knowledge tab of a report is specific to this entity and different from the knwoledge tab of all other entities.