ImportfilePDFobservables connector --> PDF not imported as a report and obsrvables not attached to it about connectors HOT 3 CLOSED

Hello @Fred-certeu,

As wrote here: https://opencti-platform.github.io/docs/usage/knowledge-import, if you want the observables to be associated to a report, you have to create the report and import the file directly from it. Using the "general upload" will conduct to create atomic entities. If it is a STIX2 containing a report, that's not a problem, it if is a PDF (or a CSV in the future), the best is to create the report, upload the file in this report and start the import from it.

from connectors.

Indeed, it is much better like this ;)
Thank you for the clarification.
One remark however:
The observables are attached to the report.
But no indicator is created for them.
So, when the user attached some knowledge to the report (e.g. an intrusion set or a malware), it is not possible - apparently - to record that these observables "indicate" an intrusion set or a malware...

from connectors.

If you want to create indicators from the observables with this connector, as you can see in the default configuration file, you just have to set create_indicator to True.

from connectors.