Relationships

Relationships#

Integrations that have the create relationships parameter creates relationships as part of the reputation commands.

- defaultvalue: 'true'
  additionalinfo: Create relationships between indicators as part of enrichment.
  display: Create relationships
  name: create_relationships
  required: false
  type: 8

Steps how to create relationships:#

Create an EntityRelationship object with the relationships data. If more than one relationship exists, create a list and append all of the EntityRelationship objects to it.

EntityRelationship(
   name='contains',
   entity_a='1.1.1.1',
   entity_a_type='IP',
   entity_b='2.2.2.2',
   entity_b_type='IP',
   source_reliability='B - Usually reliable',
   brand='My Integration ID')

When setting the name of the relationship, make sure to choose a value that appears in the the predefined list of relationships
For more information about creating a relationship entity, visit EntityRelationship.

Use the Common object when creating the indicator and in the relationships key set the list of EntityRelationship objects.
Use CommandResults, set the relationships key to the list of EntityRelationship objects.

Integrations for reference#