Actions149
- Attack Pattern Actions
- Campaign Actions
- City Actions
- Country Actions
- Course of Action Actions
- External Reference Actions
- Incident Actions
- Indicator Actions
- Individual Actions
- Infrastructure Actions
- Intrusion Set Actions
- Kill Chain Phase Actions
- Label Actions
- Malware Actions
- Marking Definition Actions
- Note (RFI) Actions
- Observable Actions
- Observed Data Actions
- Opinion Actions
- Position Actions
- Region Actions
- Relationship Actions
- Report Actions
- Sector Actions
- Sighting Actions
- System Actions
- Task Actions
- Threat Actor Actions
- Tool Actions
- Vulnerability Actions
Relationship → Create
AI-generatedSummary
Create a STIX relationship between two entities
Inputs
- relationshipType (required) — Type of STIX relationship
- fromId (required) — Source entity ID
- toId (required) — Target entity ID
- additionalFields — Optional fields such as confidence, description, labels, etc.
Output shape
a single created relationship object
Returns the full relationship object including its generated ID and all specified properties.
Examples
Example 1: Create a relationship linking a malware to an indicator
relationshipType: 'uses', fromId: 'malware--abc', toId: 'indicator--xyz', additionalFields: { confidence: 85 }