# opencti | OpenCTI Platform | Knowledge Base | Instagit

Open Cyber Threat Intelligence Platform

GitHub Stars: 8.8k

Repository: https://github.com/opencti-platform/opencti

---

## Articles

### [How to Build a Custom Python Connector Using the OpenCTIConnectorHelper Class](/opencti-platform/opencti/how-to-build-a-custom-python-connector-using-the-opencticonnectorhelper-class)

Easily build a custom Python connector for OpenCTI using the OpenCTIConnectorHelper class. Streamline configuration, logging, and STIX bundle submission for seamless integration.

- Tags: how-to-guide
- Published: 2026-02-19

### [OpenCTI Protected Sensitive Configuration: How It Works and How to Manage It](/opencti-platform/opencti/what-is-the-protected-sensitive-configuration-in-opencti-and-how-does-it-work)

Secure your OpenCTI platform with protected sensitive configuration. Learn how to manage critical settings like roles and rules, ensuring only authorized users can modify them.

- Tags: how-to-guide
- Published: 2026-02-19

### [How to Configure Redis for Caching and Pub/Sub in OpenCTI](/opencti-platform/opencti/how-to-configure-redis-for-caching-and-pubsub-in-opencti)

Learn to configure Redis for OpenCTI caching and pub/sub using environment variables for seamless real-time data updates.

- Tags: how-to-guide
- Published: 2026-02-19

### [How the OpenCTI Ingestion Manager Handles CSV Feeds: Architecture and Implementation](/opencti-platform/opencti/how-does-the-ingestion-manager-handle-csv-feeds-in-opencti)

Learn how the OpenCTI ingestion manager processes CSV feeds by parsing rows, converting them to STIX bundles, and queuing for import.

- Tags: architecture
- Published: 2026-02-19

### [Understanding the Notification Manager in OpenCTI: Architecture and Operation](/opencti-platform/opencti/what-is-the-notification-manager-in-opencti-and-how-does-it-operate)

Discover the OpenCTI notification manager, a background service that monitors SSE, evaluates triggers, and generates real-time alerts or digest summaries for security analysts.

- Tags: architecture
- Published: 2026-02-19

### [How to Configure MinIO for File Storage in OpenCTI: Complete Setup Guide](/opencti-platform/opencti/how-to-configure-minio-for-file-storage-in-opencti)

Learn to configure MinIO for file storage in OpenCTI. Follow this complete guide to deploy MinIO and set environment variables for seamless file handling.

- Tags: how-to-guide
- Published: 2026-02-19

### [What Is the Garbage Collection Manager in OpenCTI and How to Configure It](/opencti-platform/opencti/what-is-the-garbage-collection-manager-in-opencti-and-how-to-configure-it)

Discover the OpenCTI garbage collection manager, a background process that deletes soft-deleted entities. Learn how to configure retention periods and batch processing for efficient database management.

- Tags: how-to-guide
- Published: 2026-02-19

### [How the OpenCTI Sync Manager Handles Data Synchronization: Architecture and Event Processing](/opencti-platform/opencti/how-does-the-sync-manager-handle-data-synchronization-in-opencti)

Discover how the OpenCTI Sync Manager achieves fault-tolerant data synchronization by processing Server-Sent Events, transforming them into actions, and using Redis for reliable state persistence.

- Tags: architecture
- Published: 2026-02-19

### [OpenCTI Connector Manager Explained: How to Register Custom Connectors](/opencti-platform/opencti/what-is-the-connector-manager-and-how-to-register-custom-connectors-in-opencti)

Discover the OpenCTI Connector Manager and learn to register custom connectors using GraphQL mutations, ingestion helpers, or the Python SDK. Streamline your threat intelligence.

- Tags: how-to-guide
- Published: 2026-02-19

### [How to Configure SMTP for Notifications in OpenCTI: Complete Setup Guide](/opencti-platform/opencti/how-to-configure-smtp-for-notifications-in-opencti)

Learn how to configure SMTP for notifications in OpenCTI. Follow this complete setup guide to send password resets and alerts effortlessly.

- Tags: how-to-guide
- Published: 2026-02-19

### [What Is the File Indexing Manager in OpenCTI and How Does It Work?](/opencti-platform/opencti/what-is-the-file-indexing-manager-in-opencti-and-how-does-it-function)

Discover OpenCTI's file indexing manager. Learn how this background module creates a searchable index of platform attachments, synchronizing metadata and content with access controls in real time.

- Tags: internals
- Published: 2026-02-19

### [How the OpenCTI Indicator Decay Manager Works: A Technical Deep Dive](/opencti-platform/opencti/how-does-the-indicator-decay-manager-work-in-opencti)

Understand how the OpenCTI indicator decay manager automatically ages indicators. Learn about scheduled jobs, score recomputation, and validity updates for stale indicators.

- Tags: deep-dive
- Published: 2026-02-19

### [OpenCTI Playbook Manager: How to Create Automated Workflows](/opencti-platform/opencti/what-is-the-playbook-manager-and-how-to-create-automated-workflows-in-opencti)

Learn how to create automated workflows with OpenCTI Playbook Manager. Orchestrate STIX events and cron triggers to build powerful security automation.

- Tags: how-to-guide
- Published: 2026-02-19

### [How to Configure Rate Limiting Protection in OpenCTI: A Complete Guide](/opencti-platform/opencti/how-to-configure-rate-limiting-protection-in-opencti)

Learn how to configure rate limiting protection in OpenCTI using JSON files or environment variables. Secure your GraphQL API with this comprehensive guide.

- Tags: how-to-guide
- Published: 2026-02-19

### [OpenCTI Live Streaming: How to Consume Real-Time Threat Intelligence via SSE](/opencti-platform/opencti/what-is-the-live-streaming-feature-in-opencti-and-how-to-use-it)

Discover OpenCTI live streaming. Consume real-time STIX 2.1 threat intelligence updates via SSE and Redis streams to enhance your security operations.

- Tags: how-to-guide
- Published: 2026-02-19

### [How OpenCTI Integrates with AI/ML Models Such as Mistral AI: A Technical Deep Dive](/opencti-platform/opencti/how-does-opencti-integrate-with-ai-ml-models-mistralai)

Discover how OpenCTI integrates with AI ML models like Mistral AI. Explore its unified layer for natural language querying and text summarization via GraphQL. A technical deep dive.

- Tags: deep-dive
- Published: 2026-02-19

### [OpenCTI Retention Manager: How It Automates Data Lifecycle and Stale Data Removal](/opencti-platform/opencti/what-is-the-retention-manager-and-how-does-it-work)

Automate OpenCTI data lifecycle with the retention manager. This service purges stale data based on rules every 30 seconds, improving platform efficiency and reducing storage.

- Tags: how-to-guide
- Published: 2026-02-19

### [How to Configure TAXII Feed Ingestion in OpenCTI: A Complete Guide](/opencti-platform/opencti/how-to-configure-taxii-feed-ingestion)

Learn to configure TAXII feed ingestion in OpenCTI with our complete guide. Set up a TAXII feed easily using server URL, collection UUID, and Bearer token authentication.

- Tags: how-to-guide
- Published: 2026-02-19

### [STIX2 Bundle Processing Flow in PyCTI: End-to-End Technical Guide](/opencti-platform/opencti/what-is-the-stix2-bundle-processing-flow-in-pycti)

Explore the STIX2 bundle processing flow in PyCTI. Learn how OpenCTI connectors efficiently handle enrichment, validation, splitting, and dispatch for seamless data ingestion.

- Tags: deep-dive
- Published: 2026-02-19

### [How to Configure Elasticsearch Indexing in OpenCTI: Complete Setup Guide](/opencti-platform/opencti/how-to-configure-elasticsearch-indexing-in-opencti)

Learn to configure Elasticsearch indexing in OpenCTI. Follow this guide to set up cluster URL, credentials, and advanced settings for optimal performance.

- Tags: how-to-guide
- Published: 2026-02-19

### [How to Configure GraphQL Armor Protection in OpenCTI](/opencti-platform/opencti/what-is-the-graphql-armor-protection-and-how-to-configure-it)

Learn how to configure GraphQL Armor protection in OpenCTI. Enable this crucial security feature to harden your Apollo Server against common exploits and ensure data integrity.

- Tags: how-to-guide
- Published: 2026-02-19

### [How OpenCTI Connector Architecture Works with RabbitMQ Message Queues](/opencti-platform/opencti/how-does-the-opencti-connector-architecture-work-with-rabbitmq-message-queues)

Discover how OpenCTI connector architecture leverages RabbitMQ message queues for efficient platform-to-connector communication and work distribution. Learn more now.

- Tags: internals
- Published: 2026-02-19