Actions149
- Attack Pattern Actions
- Campaign Actions
- City Actions
- Country Actions
- Course of Action Actions
- External Reference Actions
- Incident Actions
- Indicator Actions
- Individual Actions
- Infrastructure Actions
- Intrusion Set Actions
- Kill Chain Phase Actions
- Label Actions
- Malware Actions
- Marking Definition Actions
- Note (RFI) Actions
- Observable Actions
- Observed Data Actions
- Opinion Actions
- Position Actions
- Region Actions
- Relationship Actions
- Report Actions
- Sector Actions
- Sighting Actions
- System Actions
- Task Actions
- Threat Actor Actions
- Tool Actions
- Vulnerability Actions
Individual → Create
AI-generatedSummary
Create a new openCti Individual entity.
Inputs
- name (required) — Name of the individual.
- additionalFields — Container for extra fields (e.g., confidence, aliases).
- x_opencti_firstname — First name of the individual.
- x_opencti_lastname — Last name of the individual.
- x_opencti_reliability — Reliability value (0-100).
- objectLabel — Comma-separated label IDs.
- createdBy — Identity ID of the creator.
- description — Free‑form description.
- externalReferences — Comma-separated external reference IDs.
Output shape
The created Individual object, including its generated ID and all provided fields.
Returns the full record of the newly created individual; optional pagination not applicable.
Examples
Example 1: Create an individual with a name and confidence.
Set Name to 'Alice', Additional Fields with confidence 75, optionally set First Name 'Alice' and Last Name 'Doe'.
Example 2: Create an individual with external references and description.
Name: 'Bob', External References: 'ref123,ref456', Description: 'Test individual', Additional Fields empty.