Actions149
- Attack Pattern Actions
- Campaign Actions
- City Actions
- Country Actions
- Course of Action Actions
- External Reference Actions
- Incident Actions
- Indicator Actions
- Individual Actions
- Infrastructure Actions
- Intrusion Set Actions
- Kill Chain Phase Actions
- Label Actions
- Malware Actions
- Marking Definition Actions
- Note (RFI) Actions
- Observable Actions
- Observed Data Actions
- Opinion Actions
- Position Actions
- Region Actions
- Relationship Actions
- Report Actions
- Sector Actions
- Sighting Actions
- System Actions
- Task Actions
- Threat Actor Actions
- Tool Actions
- Vulnerability Actions
Opinion → Create
AI-generatedSummary
Create an opinion in openCti
Inputs
- opinion (required) — The opinion value
- authors — Comma-separated author names
- confidence — Confidence percentage (0-100)
- createdBy — Identity ID of the creator
- explanation — Explanation of the opinion
- externalReferences — Comma-separated IDs of external references
- objectLabel — Comma-separated IDs of labels
- objectMarking — Comma-separated IDs of marking definitions
- objects — Comma-separated IDs of STIX objects related to this opinion
Output shape
a single opinion object
Returns the created opinion object; may include generated ID and timestamps; errors are indicated by HTTP status codes.
Examples
Example 1: Create a new opinion with a confidence of 80 and two authors
opinion='Threat is high', authors='alice,bob', confidence=80
Example 2: Add an opinion with full metadata
opinion='Malware detected', explanation='Suspicious file activity', externalReferences='ref1,ref2', objectLabel='label1', objectMarking='mark1', objects='obj1,obj2'