Mandiant connector: valuable Indicator data is not ingested in the platform

[fruitcakej]

Use case

When I look at the Indicator entities that the mandiant connector is ingesting, the entities are lacking data that should be available in the Mandiant API output

• mscore (numeric)
• source (text)
• osint source (boolean)
• reference url to Mandiant Advantage

I understand the 'mscore' is mapped to 'score' within the platform already.
The data should be available in the Indicator entity in such a way that we can build playbooks around it.

Current Workaround

Proposed Solution

We understand that this is being replaced with the new Google TI API, but perhaps this could be implemented in the new connector.

Additional Information