Alienvault and Crowdstrike connectors - use author's tag to indicate malware about connectors HOT 2 CLOSED

Added option to "guess" which tags represent malwares by making a malware query with the tag value to OpenCTI.

If the tag is identified as a malware then the malware will be used to create relationships with other entities.

This feature is disabled by default.

To enable this feature in AlienVault connector:

• Add following environmental variable to docker-compose.yml:

- ALIENVAULT_GUESS_MALWARE=true

• Add following key-value pair to config.yml under the alienvault key:

guess_malware: true

To enable this feature in CrowdStrike connector:

• Add following environmental variable to docker-compose.yml:

- CROWDSTRIKE_REPORT_GUESS_MALWARE=true

• Add following key-value pair to config.yml under the crowdstrike key:

report_guess_malware: true

from connectors.

Merged to master. Closing the issue.

from connectors.