opencti

Open Cyber Threat Intelligence Platform

22 articles 8.8k View on GitHub ↗
22 articles
How to Build a Custom Python Connector Using the OpenCTIConnectorHelper Class

Easily build a custom Python connector for OpenCTI using the OpenCTIConnectorHelper class. Streamline configuration, logging, and STIX bundle submission for seamless integration.

how-to-guide
Feb 19, 2026
OpenCTI Protected Sensitive Configuration: How It Works and How to Manage It

Secure your OpenCTI platform with protected sensitive configuration. Learn how to manage critical settings like roles and rules, ensuring only authorized users can modify them.

how-to-guide
Feb 19, 2026
How to Configure Redis for Caching and Pub/Sub in OpenCTI

Learn to configure Redis for OpenCTI caching and pub/sub using environment variables for seamless real-time data updates.

how-to-guide
Feb 19, 2026
How the OpenCTI Ingestion Manager Handles CSV Feeds: Architecture and Implementation

Learn how the OpenCTI ingestion manager processes CSV feeds by parsing rows, converting them to STIX bundles, and queuing for import.

architecture
Feb 19, 2026
Understanding the Notification Manager in OpenCTI: Architecture and Operation

Discover the OpenCTI notification manager, a background service that monitors SSE, evaluates triggers, and generates real-time alerts or digest summaries for security analysts.

architecture
Feb 19, 2026
How to Configure MinIO for File Storage in OpenCTI: Complete Setup Guide

Learn to configure MinIO for file storage in OpenCTI. Follow this complete guide to deploy MinIO and set environment variables for seamless file handling.

how-to-guide
Feb 19, 2026
What Is the Garbage Collection Manager in OpenCTI and How to Configure It

Discover the OpenCTI garbage collection manager, a background process that deletes soft-deleted entities. Learn how to configure retention periods and batch processing for efficient database management.

how-to-guide
Feb 19, 2026
How the OpenCTI Sync Manager Handles Data Synchronization: Architecture and Event Processing

Discover how the OpenCTI Sync Manager achieves fault-tolerant data synchronization by processing Server-Sent Events, transforming them into actions, and using Redis for reliable state persistence.

architecture
Feb 19, 2026
OpenCTI Connector Manager Explained: How to Register Custom Connectors

Discover the OpenCTI Connector Manager and learn to register custom connectors using GraphQL mutations, ingestion helpers, or the Python SDK. Streamline your threat intelligence.

how-to-guide
Feb 19, 2026
How to Configure SMTP for Notifications in OpenCTI: Complete Setup Guide

Learn how to configure SMTP for notifications in OpenCTI. Follow this complete setup guide to send password resets and alerts effortlessly.

how-to-guide
Feb 19, 2026
What Is the File Indexing Manager in OpenCTI and How Does It Work?

Discover OpenCTI's file indexing manager. Learn how this background module creates a searchable index of platform attachments, synchronizing metadata and content with access controls in real time.

internals
Feb 19, 2026
How the OpenCTI Indicator Decay Manager Works: A Technical Deep Dive

Understand how the OpenCTI indicator decay manager automatically ages indicators. Learn about scheduled jobs, score recomputation, and validity updates for stale indicators.

deep-dive
Feb 19, 2026

Have a question about this repo?

These articles cover the highlights, but your codebase questions are specific. Give your agent direct access to the source. Share this with your agent to get started:

Share the following with your agent to get started:
curl -s "https://instagit.com/install.md"
Works with
Claude Codex Cursor VS Code OpenClaw Any MCP Client

Maintain an open-source project? Get it listed too →