LoginSign Up
← Back to all sparks
O

OpenCTI

ANALYTICS
Velocity5.0

Open cyber threat intelligence platform

filigran.io/solutions/open-cti ↗

OpenCTI rebuilds its knowledge graph: keyboard control, grouping by type, SVG export.

threat-intelligenceknowledge-graphxtm-oneanalyst-workflowaccess-control
◆Current state
Filigran shipped four OpenCTI weeklies in a week. 7.261021.1 (replacing a deleted 7.261021.0) lets Ask Ariane show and download decks, reports and videos made by XTM One and overhauls every graph surface. 7.261023.0 adds keyboard control of graphs, grouping of same-type objects and higher-resolution or SVG graph export, plus fixes for live-stream resource leaks. 7.261023.1 and 7.261026.0 are fix releases.
◆Where it's heading
The knowledge graph is getting the attention dashboards got the week before, closing feature requests that date back years (some issue numbers are under 2000). In parallel, XTM One output keeps moving into the chat, and organization segregation and connector catalog hygiene keep appearing in fix lists.
◆Prediction
Expect further graph work in coming weeklies and the Material UI 9 migration to finish, with occasional regressions. The entries do not indicate when a new LTS line will be cut.

◆Recent moves

  1. 2d ago

    OpenCTI 7.261026.0: bulk-update and dashboard access fixes

    A fix release: bulk-update dates are kept, dashboard group restrictions save, and the Python client accepts dictionary custom properties. The frontend moves to Material UI 9, which users should not notice.

    View source ↗
  2. 5d ago

    OpenCTI 7.261023.1: saved-filter switching fix

    Switching saved filters no longer requires clearing the current ones, and the SMTP settings form is fixed. Small follow-up to the graph release earlier the same day.

    View source ↗
  3. 6d ago

    OpenCTI 7.261023.0: keyboard graph control, grouping, SVG export

    Graphs can be driven from the keyboard, group same-type objects and export at higher resolution or as SVG, closing several long-open requests. Live-stream dependency resolution and heartbeat leaks are fixed too.

    View source ↗
  4. 7d ago

    OpenCTI 7.261021.1: XTM One outputs in Ask Ariane, graph refresh

    Ask Ariane can now show and download the decks, reports and videos XTM One produces, and every graph surface gets a refresh. It continues the 10-19 move of XTM One output into the chat.

    View source ↗
  5. 7d ago

    OpenCTI 7.261021.0 (withdrawn, replaced by 7.261021.1)

    A release tag that was deleted and replaced by 7.261021.1 the same day. Nothing to act on.

    View source ↗
  6. 9d ago

    Dashboard variables and XTM One decks and videos in chat

    Dashboard variables let one dashboard be re-scoped through shared filters instead of being cloned per case, and the chatbot now relays decks, reports and videos produced by XTM One. Both extend the knowledge-view ergonomics push of recent weeklies, while four backend fixes tighten reference-relation and access-check edge cases.

    View source ↗