[ImportDocument] Connector can process defanged IOCs

[damians-filigran]

Use case

As an analyst, I want OpenCTI to be able to import defanged IOCs contained in PDFs that are imported and processed by the ImportDocument connector

Current Workaround

Need to copy/paste the PDF text into a text editor, search and replace to remove the [ square brackets ], and then paste into a text import as a separate job

Proposed Solution

Adapt the ImportDocument connector to remove [ and ] from the processed text before regex parsing for domains, IPs, etc.

Additional Information

For common/standard methods, this python package was my first google hit. This may or may not be usable directly, depending on the process flow of the connector.

Would you be willing to submit a PR?

We strongly encourage you to submit a PR if you want and whenever you want. If your issue concern a "Community-support" connector, your PR will probably be accepted after some review. If the connector is "Partner-support" or "Filigran-support", a dev team make take over but will base its work on your PR, speeding the process. It will be much appreciated.