[client] Add new relation between Attack Pattern and Vulnerability

Author: Samuel Hassine

examples/create_incident_with_ttps_and_indicators.py

@@ -6,7 +6,7 @@
 from pycti import OpenCTIApiClient
 
 # Variables
-api_url = "https://demo.opencti.io"
+api_url = "https://reference.opencti.io"
 api_token = "2b4f29e3-5ea8-4890-8cf5-a76f61f1e2b2"
 
 # OpenCTI initialization

pycti/api/opencti_api_client.py

@@ -1735,6 +1735,9 @@ def resolve_role(self, relation_type, from_type, to_type):
                     "organization": {"from_role": "source", "to_role": "target"},
                     "vulnerability": {"from_role": "source", "to_role": "target"},
                 },
+                "attack-pattern": {
+                    "vulnerability": {"from_role": "source", "to_role": "target"},
+                },
             },
             "attributed-to": {
                 "threat-actor": {

pycti/entities/opencti_stix_observable.py

@@ -165,7 +165,31 @@ def list(self, **kwargs):
                 "orderMode": order_mode,
             },
         )
-        return self.opencti.process_multiple(result["data"]["stixObservables"])
+
+        if get_all:
+            final_data = []
+            data = self.opencti.process_multiple(result["data"]["stixObservables"])
+            final_data = final_data + data
+            while result["data"]["stixObservables"]["pageInfo"]["hasNextPage"]:
+                after = result["data"]["stixObservables"]["pageInfo"]["endCursor"]
+                self.opencti.log("info", "Listing StixObservables after " + after)
+                result = self.opencti.query(
+                    query,
+                    {
+                        "types": types,
+                        "filters": filters,
+                        "search": search,
+                        "first": first,
+                        "after": after,
+                        "orderBy": order_by,
+                        "orderMode": order_mode,
+                    },
+                )
+                data = self.opencti.process_multiple(result["data"]["stixObservables"])
+                final_data = final_data + data
+            return final_data
+        else:
+            return self.opencti.process_multiple(result["data"]["stixObservables"])
 
     """
         Read a StixObservable object