Actions149
- Attack Pattern Actions
- Campaign Actions
- City Actions
- Country Actions
- Course of Action Actions
- External Reference Actions
- Incident Actions
- Indicator Actions
- Individual Actions
- Infrastructure Actions
- Intrusion Set Actions
- Kill Chain Phase Actions
- Label Actions
- Malware Actions
- Marking Definition Actions
- Note (RFI) Actions
- Observable Actions
- Observed Data Actions
- Opinion Actions
- Position Actions
- Region Actions
- Relationship Actions
- Report Actions
- Sector Actions
- Sighting Actions
- System Actions
- Task Actions
- Threat Actor Actions
- Tool Actions
- Vulnerability Actions
Country → Create
AI-generatedSummary
Create a Country resource in OpenCTI
Inputs
- name (required) — Human‑readable name of the country.
- additionalFields — Optional map of extra attributes (aliases, confidence, etc.) to attach to the country.
Output shape
A single Country node object representing the created resource.
The response contains the full created node with all its properties, including system‑assigned IDs.
Examples
Example 1: Add a new country with basic attributes.
Name: "France", Additional Fields: {"description": "EU member", "latitude": 46.2276, "longitude": 2.2137, "objectLabel": "EU", "createdBy": "admin"}
Example 2: Create a country with extensive metadata.
Name: "Germany", Additional Fields: {"x_opencti_aliases": "DE,Deutschland", "confidence": 85, "description": "Core EU economy", "externalReferences": "12345,67890", "objectMarking": "STIX2", "latitude": 51.1657, "longitude": 10.4515, "objectLabel": "EU", "createdBy": "admin"}
Example 3: Create a country using minimal required fields.
Name: "Japan"