From 2a4a0fac7986fbc18f85d1ecc7f325dbe4c46a0d Mon Sep 17 00:00:00 2001 From: Jeremy Cloarec Date: Tue, 17 Sep 2024 14:57:42 +0200 Subject: [PATCH] [backend] add base draftWorkspace --- .../opencti-front/lang/back/de.json | 2 + .../opencti-front/lang/back/en.json | 2 + .../opencti-front/lang/back/es.json | 2 + .../opencti-front/lang/back/fr.json | 2 + .../opencti-front/lang/back/ja.json | 2 + .../opencti-front/lang/back/ko.json | 2 + .../opencti-front/lang/back/zh.json | 2 + .../src/schema/relay.schema.graphql | 32 ++++ .../src/utils/hooks/useAttributes.ts | 1 + .../addReportObservable.spec.ts | 8 +- .../opencti-graphql/config/default.json | 3 +- .../config/schema/opencti.graphql | 1 + .../opencti-graphql/src/database/engine.js | 153 ++++++++++++++++-- .../opencti-graphql/src/database/redis.ts | 4 +- .../opencti-graphql/src/database/utils.js | 3 + .../opencti-graphql/src/domain/user.js | 6 +- .../opencti-graphql/src/generated/graphql.ts | 118 +++++++++++++- ...726472121833-create-index-draft-objects.js | 16 ++ .../basicObject-registrationAttributes.ts | 2 + ...asicRelationship-registrationAttributes.ts | 2 + .../internalObject-registrationAttributes.ts | 1 + .../draftWorkspace-converter.ts | 12 ++ .../draftWorkspace/draftWorkspace-domain.ts | 59 +++++++ .../draftWorkspace/draftWorkspace-graphql.ts | 8 + .../draftWorkspace-resolvers.ts | 20 +++ .../draftWorkspace/draftWorkspace-types.ts | 15 ++ .../draftWorkspace/draftWorkspace.graphql | 56 +++++++ .../modules/draftWorkspace/draftWorkspace.ts | 32 ++++ .../opencti-graphql/src/modules/index.ts | 2 + .../src/schema/attribute-definition.ts | 13 ++ .../src/schema/internalObject.ts | 5 +- .../opencti-graphql/src/types/user.d.ts | 1 + .../opencti-graphql/src/utils/draftContext.ts | 5 + .../01-unit/utils/schema-attributes-test.ts | 15 +- .../02-resolvers/attribute-test.js | 22 +-- .../02-resolvers/draftWorkspace-test.ts | 132 +++++++++++++++ 36 files changed, 717 insertions(+), 44 deletions(-) create mode 100644 opencti-platform/opencti-graphql/src/migrations/1726472121833-create-index-draft-objects.js create mode 100644 opencti-platform/opencti-graphql/src/modules/draftWorkspace/draftWorkspace-converter.ts create mode 100644 opencti-platform/opencti-graphql/src/modules/draftWorkspace/draftWorkspace-domain.ts create mode 100644 opencti-platform/opencti-graphql/src/modules/draftWorkspace/draftWorkspace-graphql.ts create mode 100644 opencti-platform/opencti-graphql/src/modules/draftWorkspace/draftWorkspace-resolvers.ts create mode 100644 opencti-platform/opencti-graphql/src/modules/draftWorkspace/draftWorkspace-types.ts create mode 100644 opencti-platform/opencti-graphql/src/modules/draftWorkspace/draftWorkspace.graphql create mode 100644 opencti-platform/opencti-graphql/src/modules/draftWorkspace/draftWorkspace.ts create mode 100644 opencti-platform/opencti-graphql/src/utils/draftContext.ts create mode 100644 opencti-platform/opencti-graphql/tests/02-integration/02-resolvers/draftWorkspace-test.ts diff --git a/opencti-platform/opencti-front/lang/back/de.json b/opencti-platform/opencti-front/lang/back/de.json index 8205101462c03..3a3b999b270c1 100644 --- a/opencti-platform/opencti-front/lang/back/de.json +++ b/opencti-platform/opencti-front/lang/back/de.json @@ -140,6 +140,7 @@ "CRL distribution points": "CRL-Verteilungspunkte", "Csv_mapper_id": "Csv_mapper_id", "Ctime": "Ctime", + "Current draft context": "Aktueller Entwurfskontext", "Current state cursor": "Aktueller Status Cursor", "Current state date": "Aktuelles Statusdatum", "Current stated date": "Aktuell angegebenes Datum", @@ -196,6 +197,7 @@ "Display name": "Name anzeigen", "DLL service": "DLL-Dienst", "Do you want to delete this support package?": "Möchten Sie dieses Support-Paket löschen?", + "Draft ids": "Entwurfs-Ids", "DST": "DST", "DST byte count": "DST-Byte-Anzahl", "DST packets": "DST-Pakete", diff --git a/opencti-platform/opencti-front/lang/back/en.json b/opencti-platform/opencti-front/lang/back/en.json index b8c3fc4147b53..8907266bfc6e5 100644 --- a/opencti-platform/opencti-front/lang/back/en.json +++ b/opencti-platform/opencti-front/lang/back/en.json @@ -140,6 +140,7 @@ "CRL distribution points": "CRL distribution points", "Csv_mapper_id": "Csv_mapper_id", "Ctime": "Ctime", + "Current draft context": "Current draft context", "Current state cursor": "Current state cursor", "Current state date": "Current state date", "Current stated date": "Current stated date", @@ -196,6 +197,7 @@ "Display name": "Display name", "DLL service": "DLL service", "Do you want to delete this support package?": "Do you want to delete this support package?", + "Draft ids": "Draft ids", "DST": "DST", "DST byte count": "DST byte count", "DST packets": "DST packets", diff --git a/opencti-platform/opencti-front/lang/back/es.json b/opencti-platform/opencti-front/lang/back/es.json index e08a9133f4d41..87aa892b46dc2 100644 --- a/opencti-platform/opencti-front/lang/back/es.json +++ b/opencti-platform/opencti-front/lang/back/es.json @@ -140,6 +140,7 @@ "CRL distribution points": "Puntos de distribución CRL", "Csv_mapper_id": "Csv_mapper_id", "Ctime": "Ctime", + "Current draft context": "Contexto actual del proyecto", "Current state cursor": "Cursor de estado actual", "Current state date": "Fecha de estado actual", "Current stated date": "Fecha actual", @@ -196,6 +197,7 @@ "Display name": "Mostrar nombre", "DLL service": "Servicio DLL", "Do you want to delete this support package?": "¿Desea eliminar este paquete de soporte?", + "Draft ids": "Id. de borrador", "DST": "DST", "DST byte count": "DST byte count", "DST packets": "Paquetes DST", diff --git a/opencti-platform/opencti-front/lang/back/fr.json b/opencti-platform/opencti-front/lang/back/fr.json index 4fc89052885d3..271673e33252c 100644 --- a/opencti-platform/opencti-front/lang/back/fr.json +++ b/opencti-platform/opencti-front/lang/back/fr.json @@ -140,6 +140,7 @@ "CRL distribution points": "Points de distribution des LCR", "Csv_mapper_id": "Csv_mapper_id", "Ctime": "Ctime", + "Current draft context": "Contexte du projet actuel", "Current state cursor": "Curseur d'état actuel", "Current state date": "Date de l'état actuel", "Current stated date": "Current stated date", @@ -196,6 +197,7 @@ "Display name": "Nom d'affichage", "DLL service": "Service DLL", "Do you want to delete this support package?": "Voulez-vous supprimer ce paquet de support ?", + "Draft ids": "Idées de projet", "DST": "DST", "DST byte count": "Nombre d'octets DST", "DST packets": "Paquets DST", diff --git a/opencti-platform/opencti-front/lang/back/ja.json b/opencti-platform/opencti-front/lang/back/ja.json index 5aa56f7be656f..d4a30ee9d7fb9 100644 --- a/opencti-platform/opencti-front/lang/back/ja.json +++ b/opencti-platform/opencti-front/lang/back/ja.json @@ -140,6 +140,7 @@ "CRL distribution points": "CRL配布ポイント", "Csv_mapper_id": "Csv_mapper_id", "Ctime": "Ctime", + "Current draft context": "現在のドラフト状況", "Current state cursor": "ヘッダー", "Current state date": "摂取実行", "Current stated date": "現在の記載日", @@ -196,6 +197,7 @@ "Display name": "表示名", "DLL service": "DLLサービス", "Do you want to delete this support package?": "このサポートパッケージを削除しますか？", + "Draft ids": "ドラフトID", "DST": "DST", "DST byte count": "DST バイト数", "DST packets": "DSTパケット", diff --git a/opencti-platform/opencti-front/lang/back/ko.json b/opencti-platform/opencti-front/lang/back/ko.json index 7ebd0ac4d39ee..367ce86fe3891 100644 --- a/opencti-platform/opencti-front/lang/back/ko.json +++ b/opencti-platform/opencti-front/lang/back/ko.json @@ -140,6 +140,7 @@ "CRL distribution points": "CRL 배포 지점", "Csv_mapper_id": "Csv_mapper_id", "Ctime": "변경 시간", + "Current draft context": "현재 초안 컨텍스트", "Current state cursor": "현재 상태 커서", "Current state date": "현재 상태 날짜", "Current stated date": "현재 명시된 날짜", @@ -196,6 +197,7 @@ "Display name": "표시 이름", "DLL service": "DLL 서비스", "Do you want to delete this support package?": "이 지원 패키지를 삭제하시겠습니까?", + "Draft ids": "초안 ID", "DST": "DST", "DST byte count": "DST 바이트 수", "DST packets": "DST 패킷", diff --git a/opencti-platform/opencti-front/lang/back/zh.json b/opencti-platform/opencti-front/lang/back/zh.json index 4fe2149f6add3..18842ce3dd53d 100644 --- a/opencti-platform/opencti-front/lang/back/zh.json +++ b/opencti-platform/opencti-front/lang/back/zh.json @@ -140,6 +140,7 @@ "CRL distribution points": "CRL 分发点", "Csv_mapper_id": "Csv_mapper_id", "Ctime": "Ctime", + "Current draft context": "当前草案背景", "Current state cursor": "当前状态游标", "Current state date": "当前状态日期", "Current stated date": "当前状态日期", @@ -196,6 +197,7 @@ "Display name": "显示名称", "DLL service": "DLL 服务", "Do you want to delete this support package?": "您想删除此支持包吗？", + "Draft ids": "草案 ID", "DST": "DST", "DST byte count": "DST 字节数", "DST packets": "DST 数据包", diff --git a/opencti-platform/opencti-front/src/schema/relay.schema.graphql b/opencti-platform/opencti-front/src/schema/relay.schema.graphql index 4e9f7707f7357..19ded12aace82 100644 --- a/opencti-platform/opencti-front/src/schema/relay.schema.graphql +++ b/opencti-platform/opencti-front/src/schema/relay.schema.graphql @@ -1608,6 +1608,7 @@ type MeUser implements BasicObject & InternalObject { submenu_show_icons: Boolean submenu_auto_collapse: Boolean monochrome_labels: Boolean + workspace_context: String } type SessionDetail { @@ -7849,6 +7850,9 @@ type Query { deleteOperations(first: Int, after: ID, orderBy: DeleteOperationOrdering, orderMode: OrderingMode, filters: FilterGroup, search: String): DeleteOperationConnection supportPackage(id: String!): SupportPackage supportPackages(first: Int, after: ID, orderBy: SupportPackageOrdering, orderMode: OrderingMode, filters: FilterGroup, search: String): SupportPackageConnection + draftWorkspace(id: String!): DraftWorkspace + draftWorkspaces(first: Int, after: ID, orderBy: DraftWorkspacesOrdering, orderMode: OrderingMode, filters: FilterGroup, search: String): DraftWorkspaceConnection + draftWorkspaceEntities(types: [String], first: Int, after: ID, orderBy: StixDomainObjectsOrdering, orderMode: OrderingMode, filters: FilterGroup, search: String): StixCoreObjectConnection } type Subscription { @@ -8660,6 +8664,8 @@ type Mutation { supportPackageAdd(input: SupportPackageAddInput!): SupportPackage supportPackageForceZip(input: SupportPackageForceZipInput!): SupportPackage supportPackageDelete(id: ID!): ID + draftWorkspaceAdd(input: DraftWorkspaceAddInput!): DraftWorkspace + draftWorkspaceDelete(id: ID!): ID } type Channel implements BasicObject & StixObject & StixCoreObject & StixDomainObject { @@ -11922,4 +11928,30 @@ input SupportPackageAddInput { input SupportPackageForceZipInput { id: String! +} + +type DraftWorkspace implements InternalObject & BasicObject { + id: ID! + entity_type: String! + standard_id: String! + parent_types: [String!]! + name: String! +} + +enum DraftWorkspacesOrdering { + name +} + +type DraftWorkspaceConnection { + pageInfo: PageInfo! + edges: [DraftWorkspaceEdge!]! +} + +type DraftWorkspaceEdge { + cursor: String! + node: DraftWorkspace! +} + +input DraftWorkspaceAddInput { + name: String! } \ No newline at end of file diff --git a/opencti-platform/opencti-front/src/utils/hooks/useAttributes.ts b/opencti-platform/opencti-front/src/utils/hooks/useAttributes.ts index 48a74ee166bb3..c9a9916b70775 100644 --- a/opencti-platform/opencti-front/src/utils/hooks/useAttributes.ts +++ b/opencti-platform/opencti-front/src/utils/hooks/useAttributes.ts @@ -3,6 +3,7 @@ import useAuth from './useAuth'; const ignoredAttributes = [ 'id', + 'draft_ids', 'parent_types', 'base_type', 'internal_id', diff --git a/opencti-platform/opencti-front/tests_e2e/enableReferences/addReportObservable.spec.ts b/opencti-platform/opencti-front/tests_e2e/enableReferences/addReportObservable.spec.ts index 165bd67e71fb1..f9bef6e4d823e 100644 --- a/opencti-platform/opencti-front/tests_e2e/enableReferences/addReportObservable.spec.ts +++ b/opencti-platform/opencti-front/tests_e2e/enableReferences/addReportObservable.spec.ts @@ -127,6 +127,9 @@ test('Add and remove observable from Observables tab of a Report as Admin user', await expect(containerObservablesPage.getPage()).toBeVisible(); await containerObservablesPage.getAddObservableListButton().click(); await containerAddObservablesPage.createNewIPV4Observable('8.8.8.8'); + await page.getByRole('textbox', { name: 'Search these results...' }).click(); + await page.getByRole('textbox', { name: 'Search these results...' }).pressSequentially('8.8.8.8', { delay: 100 }); + await page.getByRole('textbox', { name: 'Search these results...' }).press('Enter'); await expect(containerAddObservablesPage.getObservable('IPv4 address 8.8.8.8')).toBeVisible(); await containerAddObservablesPage.getObservable('IPv4 address 8.8.8.8').click(); await containerAddObservablesPage.getCloseObservablesListButton().click(); @@ -164,6 +167,7 @@ test.describe('Add and remove observable from Observables tab of a Report as noB const containerAddObservablesPage = new ContainerAddObservablesPage(page); const commitMessagePage = new CommitMessagePage(page); const leftBarPage = new LeftBarPage(page); + const search = new SearchPageModel(page); // Create a report and check that adding an observable is possible await reportPage.goto(); @@ -177,6 +181,9 @@ test.describe('Add and remove observable from Observables tab of a Report as noB await expect(containerObservablesPage.getPage()).toBeVisible(); await containerObservablesPage.getAddObservableListButton().click(); await containerAddObservablesPage.createNewIPV4Observable('9.9.9.9'); + await page.getByRole('textbox', { name: 'Search these results...' }).click(); + await page.getByRole('textbox', { name: 'Search these results...' }).pressSequentially('9.9.9.9', { delay: 100 }); + await page.getByRole('textbox', { name: 'Search these results...' }).press('Enter'); await expect(containerAddObservablesPage.getObservable('IPv4 address 9.9.9.9')).toBeVisible(); await containerAddObservablesPage.getObservable('IPv4 address 9.9.9.9').click(); await containerAddObservablesPage.getCloseObservablesListButton().click(); @@ -184,7 +191,6 @@ test.describe('Add and remove observable from Observables tab of a Report as noB // Enable report references and check that removing observable asks for an external reference await leftBarPage.clickOnMenu('Settings', 'Customization'); - const search = new SearchPageModel(page); await search.addSearch('report'); await page.getByRole('link', { name: 'Report' }).click(); await page.locator('span').filter({ hasText: 'Enforce references' }).click(); diff --git a/opencti-platform/opencti-graphql/config/default.json b/opencti-platform/opencti-graphql/config/default.json index 998cc081d4c53..1528ae8b3aa98 100644 --- a/opencti-platform/opencti-graphql/config/default.json +++ b/opencti-platform/opencti-graphql/config/default.json @@ -11,7 +11,8 @@ "NEW_IMPORT_SCREENS", "FILIGRAN_LOADER", "CONTAINERS_AUTHORIZED_MEMBERS", - "TELEMETRY_COUNT_ACTIVE_USERS" + "TELEMETRY_COUNT_ACTIVE_USERS", + "DRAFT_WORKSPACE" ], "https_cert": { "ca": [], diff --git a/opencti-platform/opencti-graphql/config/schema/opencti.graphql b/opencti-platform/opencti-graphql/config/schema/opencti.graphql index 10e732102a242..aa448a524c2b9 100644 --- a/opencti-platform/opencti-graphql/config/schema/opencti.graphql +++ b/opencti-platform/opencti-graphql/config/schema/opencti.graphql @@ -1542,6 +1542,7 @@ type MeUser implements BasicObject & InternalObject { submenu_show_icons: Boolean submenu_auto_collapse: Boolean monochrome_labels: Boolean + workspace_context: String } type SessionDetail { id: ID! diff --git a/opencti-platform/opencti-graphql/src/database/engine.js b/opencti-platform/opencti-graphql/src/database/engine.js index 1cfe86c97398f..bb36efeba735d 100644 --- a/opencti-platform/opencti-graphql/src/database/engine.js +++ b/opencti-platform/opencti-graphql/src/database/engine.js @@ -15,6 +15,7 @@ import { cursorToOffset, ES_INDEX_PREFIX, INDEX_DELETED_OBJECTS, + INDEX_DRAFT, INDEX_INTERNAL_OBJECTS, inferIndexFromConceptType, isEmptyField, @@ -25,6 +26,7 @@ import { pascalize, READ_DATA_INDICES, READ_ENTITIES_INDICES, + READ_INDEX_DRAFT, READ_INDEX_INFERRED_ENTITIES, READ_INDEX_INFERRED_RELATIONSHIPS, READ_INDEX_INTERNAL_OBJECTS, @@ -89,7 +91,7 @@ import { import { isBasicObject, isStixCoreObject, isStixObject } from '../schema/stixCoreObject'; import { isBasicRelationship, isStixRelationship } from '../schema/stixRelationship'; import { isStixCoreRelationship, RELATION_INDICATES, RELATION_PUBLISHES, STIX_CORE_RELATIONSHIPS } from '../schema/stixCoreRelationship'; -import { INTERNAL_FROM_FIELD, INTERNAL_TO_FIELD } from '../schema/identifier'; +import { generateInternalId, INTERNAL_FROM_FIELD, INTERNAL_TO_FIELD } from '../schema/identifier'; import { BYPASS, computeUserMemberAccessIds, @@ -165,6 +167,7 @@ import { ENTITY_TYPE_DELETE_OPERATION } from '../modules/deleteOperation/deleteO import { buildEntityData } from './data-builder'; import { controlUserConfidenceAgainstElement } from '../utils/confidence-level'; import { enrichWithRemoteCredentials } from '../config/credentials'; +import { inDraftContext } from '../utils/draftContext'; const ELK_ENGINE = 'elk'; const OPENSEARCH_ENGINE = 'opensearch'; @@ -2621,6 +2624,11 @@ const completeSpecialFilterKeys = async (context, user, inputFilters) => { }; }; +const getIndicesToQuery = (index, user) => { + const draftContext = inDraftContext(user); + return index + (!draftContext ? '' : (`,${READ_INDEX_DRAFT}`)); +}; + const elQueryBodyBuilder = async (context, user, options) => { // eslint-disable-next-line no-use-before-define const { ids = [], after, orderBy = null, orderMode = 'asc', noSize = false, noSort = false, intervalInclude = false } = options; @@ -2713,11 +2721,39 @@ const elQueryBodyBuilder = async (context, user, options) => { } else { // If not ordering criteria, order by standard_id ordering.push({ 'standard_id.keyword': 'asc' }); } + // Handle draft + const draftContext = inDraftContext(user); + const draftMust = []; + if (draftContext) { + const mustLive = { + bool: { + must_not: [ + { term: { _index: READ_INDEX_DRAFT } }, + { match: { draft_ids: draftContext } } + ] + } + }; + const mustDraft = { + bool: { + must: [ + { term: { _index: READ_INDEX_DRAFT } }, + { match: { draft_ids: draftContext } } + ] + } + }; + const draftBool = { + bool: { + should: [mustLive, mustDraft], + minimum_should_match: 1, + }, + }; + draftMust.push(draftBool); + } // Build query const body = { query: { bool: { - must: [...accessMust, ...mustFilters], + must: [...accessMust, ...mustFilters, ...draftMust], must_not: accessMustNot, }, }, @@ -2749,7 +2785,7 @@ export const elRawCount = async (query) => { }; export const elCount = async (context, user, indexName, options = {}) => { const body = await elQueryBodyBuilder(context, user, { ...options, noSize: true, noSort: true }); - const query = { index: indexName, body }; + const query = { index: getIndicesToQuery(indexName, user), body }; logApp.debug('[SEARCH] elCount', { query }); return elRawCount(query); }; @@ -2796,7 +2832,7 @@ export const elHistogramCount = async (context, user, indexName, options = {}) = }, }; const query = { - index: indexName, + index: getIndicesToQuery(indexName, user), _source_excludes: '*', // Dont need to get anything body, }; @@ -2829,7 +2865,7 @@ export const elAggregationCount = async (context, user, indexName, options = {}) }, }; const query = { - index: indexName, + index: getIndicesToQuery(indexName, user), body, }; logApp.debug('[SEARCH] aggregationCount', { query }); @@ -2943,7 +2979,7 @@ export const elAggregationRelationsCount = async (context, user, indexName, opti }, }; } - const query = { index: indexName, body }; + const query = { index: getIndicesToQuery(indexName, user), body }; logApp.debug('[SEARCH] aggregationRelationsCount', { query }); const isIdFields = field?.endsWith('internal_id'); return elRawSearch(context, user, types, query) @@ -2994,7 +3030,7 @@ export const elAggregationNestedTermsWithFilter = async (context, user, indexNam } }; const query = { - index: indexName, + index: getIndicesToQuery(indexName, user), body, }; logApp.debug('[SEARCH] elAggregationNestedTermsWithFilter', { query }); @@ -3037,7 +3073,7 @@ export const elAggregationsList = async (context, user, indexName, aggregations, } } const query = { - index: indexName, + index: getIndicesToQuery(indexName, user), track_total_hits: true, _source: false, body, @@ -3074,7 +3110,7 @@ export const elPaginate = async (context, user, indexName, options = {}) => { body.size = ES_MAX_PAGINATION; } const query = { - index: indexName, + index: getIndicesToQuery(indexName, user), track_total_hits: true, _source: baseData ? baseFields : true, body, @@ -3404,7 +3440,7 @@ const computeDeleteElementsImpacts = async (cleanupRelations, toBeRemovedIds, re return elementsImpact; }; -export const elReindexElements = async (context, user, ids, sourceIndex, destIndex) => { +export const elReindexElements = async (context, user, ids, sourceIndex, destIndex, customScript = '') => { const reindexParams = { body: { source: { @@ -3419,7 +3455,7 @@ export const elReindexElements = async (context, user, ids, sourceIndex, destInd index: destIndex }, script: { // remove old fields that are not mapped anymore but can be present in DB - source: "ctx._source.remove('fromType'); ctx._source.remove('toType'); ctx._source.remove('spec_version'); ctx._source.remove('representative'); ctx._source.remove('rel_has-reference');" + source: `ctx._source.remove('fromType'); ctx._source.remove('toType'); ctx._source.remove('spec_version'); ctx._source.remove('representative'); ctx._source.remove('rel_has-reference'); ${customScript}` }, } }; @@ -3428,6 +3464,20 @@ export const elReindexElements = async (context, user, ids, sourceIndex, destInd }); }; +export const elDeleteDraftElements = async (context, user, draftId) => { + return elRawDeleteByQuery({ + index: READ_INDEX_DRAFT, + refresh: true, + body: { + query: { + term: { 'draft_ids.keyword': draftId }, + } + }, + }).catch((err) => { + throw DatabaseError('Error deleting draft elements', { cause: err }); + }); +}; + export const elDeleteElements = async (context, user, elements, opts = {}) => { if (elements.length === 0) return; const { forceDelete = true } = opts; @@ -3595,15 +3645,86 @@ const prepareIndexing = async (elements) => { } return preparedElements; }; +// Creates a copy of a live element in the draft index with the current draft context +const copyLiveElementToDraft = async (context, user, element) => { + const draftContext = inDraftContext(user); + if (!draftContext || element._index.includes(INDEX_DRAFT)) return element; + + const updatedElement = structuredClone(element); + const newId = generateInternalId(); + const setDraftData = `ctx._id="${newId}";ctx._source.draft_change = [:];ctx._source.draft_ids=['${draftContext}'];`; + await elReindexElements(context, user, [element.id], element._index, INDEX_DRAFT, setDraftData); + updatedElement._id = newId; + updatedElement._index = INDEX_DRAFT; + + // Add draftId to live element draftsIds + const addDraftIdScript = { + script: { + source: ` + if (ctx._source.containsKey('draft_ids')) + {ctx._source['draft_ids'].add('${draftContext}');} + else + {ctx._source.draft_ids = ['${draftContext}']} + ` + } + }; + await elUpdate(element._index, element.id, addDraftIdScript); + + return updatedElement; +}; +// Gets the version of the element in current draft context if it exists +// If it doesn't exist, creates a copy of live element to draft context then returns it +const getElementDraftVersion = async (context, user, element) => { + if (element._index.includes(INDEX_DRAFT)) return element; + + const loadedElement = await elLoadById(context, user, element.internal_id); + if (loadedElement && loadedElement._index.includes(INDEX_DRAFT)) return loadedElement; + + return await copyLiveElementToDraft(context, user, element); +}; + export const elIndexElements = async (context, user, indexingType, elements) => { + // If we are in a draft, relations from and to need to be elements that are also in draft. + const draftContext = inDraftContext(user); + if (draftContext) { + if (elements.some((e) => isInternalObject(e.entity_type) || isInternalRelationship(e.entity_type))) throw new Error('Cannot index internal element in draft context'); + for (let i = 0; i < elements.length; i += 1) { + const element = elements[i]; + if (element.base_type === BASE_TYPE_RELATION) { + const { from, to } = element; + if (!elements.some((e) => e.internal_id === from.internal_id)) { + const draftFrom = await getElementDraftVersion(context, user, from); + element.from = draftFrom; + element.fromId = draftFrom.id; + } else { + element.from._index = INDEX_DRAFT; + } + if (!elements.some((e) => e.internal_id === to.internal_id)) { + const draftTo = await getElementDraftVersion(context, user, to); + element.to = draftTo; + element.toId = draftTo.id; + } else { + element.to._index = INDEX_DRAFT; + } + } + } + } + const elIndexElementsFn = async () => { // 00. Relations must be transformed before indexing. const transformedElements = await prepareIndexing(elements); // 01. Bulk the indexing of row elements - const body = transformedElements.flatMap((doc) => [ - { index: { _index: doc._index, _id: doc.internal_id, retry_on_conflict: ES_RETRY_ON_CONFLICT } }, - R.pipe(R.dissoc('_index'))(doc), - ]); + const body = transformedElements.flatMap((doc) => { + const elementDoc = doc; + if (draftContext) { + elementDoc._index = INDEX_DRAFT; + elementDoc.draft_ids = [draftContext]; + } + return [ + { index: { _index: doc._index, _id: doc.internal_id, retry_on_conflict: ES_RETRY_ON_CONFLICT } }, + R.pipe(R.dissoc('_index'))(doc), + ]; + }); if (body.length > 0) { meterManager.directBulk(body.length, { type: indexingType }); await elBulk({ refresh: true, timeout: BULK_TIMEOUT, body }); @@ -3670,7 +3791,7 @@ export const elIndexElements = async (context, user, indexingType, elements) => return { ...entity, id: entityId, data: { script: { source, params } } }; }); const bodyUpdate = elementsToUpdate.flatMap((doc) => [ - { update: { _index: doc._index, _id: doc.id, retry_on_conflict: ES_RETRY_ON_CONFLICT } }, + { update: { _index: doc._index, _id: doc._id ?? doc.id, retry_on_conflict: ES_RETRY_ON_CONFLICT } }, R.dissoc('_index', doc.data), ]); if (bodyUpdate.length > 0) { diff --git a/opencti-platform/opencti-graphql/src/database/redis.ts b/opencti-platform/opencti-graphql/src/database/redis.ts index 2fd450f54740b..10b0a74cc4637 100644 --- a/opencti-platform/opencti-graphql/src/database/redis.ts +++ b/opencti-platform/opencti-graphql/src/database/redis.ts @@ -26,6 +26,7 @@ import type { ExecutionEnvelop } from '../manager/playbookManager'; import { generateCreateMessage, generateDeleteMessage, generateMergeMessage, generateRestoreMessage } from './generate-message'; import { INPUT_OBJECTS } from '../schema/general'; import { enrichWithRemoteCredentials } from '../config/credentials'; +import { inDraftContext } from '../utils/draftContext'; const USE_SSL = booleanConf('redis:use_ssl', false); const REDIS_CA = conf.get('redis:ca').map((path: string) => loadCert(path)); @@ -452,7 +453,8 @@ const mapJSToStream = (event: any) => { return cmdArgs; }; const pushToStream = async (context: AuthContext, user: AuthUser, client: Cluster | Redis, event: BaseEvent, opts: EventOpts = {}) => { - if (isStreamPublishable(opts)) { + const draftContext = inDraftContext(user); + if (!draftContext && isStreamPublishable(opts)) { const pushToStreamFn = async () => { if (streamTrimming) { await client.call('XADD', REDIS_STREAM_NAME, 'MAXLEN', '~', streamTrimming, '*', ...mapJSToStream(event)); diff --git a/opencti-platform/opencti-graphql/src/database/utils.js b/opencti-platform/opencti-graphql/src/database/utils.js index 46fbb6099a458..046bd0d94a8be 100644 --- a/opencti-platform/opencti-graphql/src/database/utils.js +++ b/opencti-platform/opencti-graphql/src/database/utils.js @@ -65,6 +65,8 @@ export const INDEX_INFERRED_ENTITIES = `${ES_INDEX_PREFIX}_inferred_entities`; export const READ_INDEX_INFERRED_ENTITIES = `${INDEX_INFERRED_ENTITIES}*`; export const INDEX_INFERRED_RELATIONSHIPS = `${ES_INDEX_PREFIX}_inferred_relationships`; export const READ_INDEX_INFERRED_RELATIONSHIPS = `${INDEX_INFERRED_RELATIONSHIPS}*`; +export const INDEX_DRAFT = `${ES_INDEX_PREFIX}_draft_objects`; +export const READ_INDEX_DRAFT = `${INDEX_DRAFT}*`; export const isInferredIndex = (index) => index.startsWith(INDEX_INFERRED_ENTITIES) || index.startsWith(INDEX_INFERRED_RELATIONSHIPS); // indices that we only use as read only, not created anymore on new platforms @@ -83,6 +85,7 @@ export const WRITE_PLATFORM_INDICES = [ INDEX_STIX_CORE_RELATIONSHIPS, INDEX_INFERRED_ENTITIES, INDEX_INFERRED_RELATIONSHIPS, + INDEX_DRAFT, INDEX_STIX_SIGHTING_RELATIONSHIPS, INDEX_STIX_META_RELATIONSHIPS, ]; diff --git a/opencti-platform/opencti-graphql/src/domain/user.js b/opencti-platform/opencti-graphql/src/domain/user.js index de391be31a063..ac281862004e9 100644 --- a/opencti-platform/opencti-graphql/src/domain/user.js +++ b/opencti-platform/opencti-graphql/src/domain/user.js @@ -697,8 +697,8 @@ export const userEditField = async (context, user, userId, rawInputs) => { inputs.push({ key: 'account_status', value: [ACCOUNT_STATUS_EXPIRED] }); await killUserSessions(userId); } - if (input.key === 'user_confidence_level') { - // user's effective level might have changed, we need to refresh session info + if (input.key === 'user_confidence_level' || input.key === 'workspace_context') { + // user's effective level or workspace context might have changed, we need to refresh session info await userSessionRefresh(userId); } inputs.push(input); @@ -797,6 +797,7 @@ const ME_USER_MODIFIABLE_ATTRIBUTES = [ 'submenu_auto_collapse', 'monochrome_labels', 'password', + 'workspace_context', ]; export const meEditField = async (context, user, userId, inputs, password = null) => { const input = R.head(inputs); @@ -1262,6 +1263,7 @@ const buildSessionUser = (origin, impersonate, provider, settings) => { no_creators: user.no_creators, restrict_delete: user.restrict_delete, personal_notifiers: user.personal_notifiers, + workspace_context: user.workspace_context, ...user.provider_metadata }; }; diff --git a/opencti-platform/opencti-graphql/src/generated/graphql.ts b/opencti-platform/opencti-graphql/src/generated/graphql.ts index 9309000d7371c..ba5834baa5d62 100644 --- a/opencti-platform/opencti-graphql/src/generated/graphql.ts +++ b/opencti-platform/opencti-graphql/src/generated/graphql.ts @@ -6330,6 +6330,35 @@ export type DomainNameAddInput = { value: Scalars['String']['input']; }; +export type DraftWorkspace = BasicObject & InternalObject & { + __typename?: 'DraftWorkspace'; + entity_type: Scalars['String']['output']; + id: Scalars['ID']['output']; + name: Scalars['String']['output']; + parent_types: Array; + standard_id: Scalars['String']['output']; +}; + +export type DraftWorkspaceAddInput = { + name: Scalars['String']['input']; +}; + +export type DraftWorkspaceConnection = { + __typename?: 'DraftWorkspaceConnection'; + edges: Array; + pageInfo: PageInfo; +}; + +export type DraftWorkspaceEdge = { + __typename?: 'DraftWorkspaceEdge'; + cursor: Scalars['String']['output']; + node: DraftWorkspace; +}; + +export enum DraftWorkspacesOrdering { + Name = 'name' +} + export type EditContext = { focusOn?: InputMaybe; }; @@ -12781,6 +12810,7 @@ export type MeUser = BasicObject & InternalObject & { unit_system?: Maybe; user_confidence_level?: Maybe; user_email: Scalars['String']['output']; + workspace_context?: Maybe; }; @@ -13160,6 +13190,8 @@ export type Mutation = { deleteImport?: Maybe; deleteOperationConfirm?: Maybe; deleteOperationRestore?: Maybe; + draftWorkspaceAdd?: Maybe; + draftWorkspaceDelete?: Maybe; entitySettingsFieldPatch?: Maybe>>; eventAdd?: Maybe; eventContextClean?: Maybe; @@ -13906,6 +13938,16 @@ export type MutationDeleteOperationRestoreArgs = { }; +export type MutationDraftWorkspaceAddArgs = { + input: DraftWorkspaceAddInput; +}; + + +export type MutationDraftWorkspaceDeleteArgs = { + id: Scalars['ID']['input']; +}; + + export type MutationEntitySettingsFieldPatchArgs = { commitMessage?: InputMaybe; ids: Array; @@ -18796,6 +18838,9 @@ export type Query = { decayRules?: Maybe; deleteOperation?: Maybe; deleteOperations?: Maybe; + draftWorkspace?: Maybe; + draftWorkspaceEntities?: Maybe; + draftWorkspaces?: Maybe; elasticSearchMetrics?: Maybe; enrichmentConnectors?: Maybe>>; entitySetting?: Maybe; @@ -19479,6 +19524,32 @@ export type QueryDeleteOperationsArgs = { }; +export type QueryDraftWorkspaceArgs = { + id: Scalars['String']['input']; +}; + + +export type QueryDraftWorkspaceEntitiesArgs = { + after?: InputMaybe; + filters?: InputMaybe; + first?: InputMaybe; + orderBy?: InputMaybe; + orderMode?: InputMaybe; + search?: InputMaybe; + types?: InputMaybe>>; +}; + + +export type QueryDraftWorkspacesArgs = { + after?: InputMaybe; + filters?: InputMaybe; + first?: InputMaybe; + orderBy?: InputMaybe; + orderMode?: InputMaybe; + search?: InputMaybe; +}; + + export type QueryEnrichmentConnectorsArgs = { type: Scalars['String']['input']; }; @@ -29916,13 +29987,13 @@ export type ResolversUnionTypes<_RefType extends Record> = Reso /** Mapping of interface types */ export type ResolversInterfaceTypes<_RefType extends Record> = ResolversObject<{ BackgroundTask: ( Omit & { authorized_members?: Maybe> } ) | ( Omit & { authorized_members?: Maybe> } ) | ( RuleTask ); - BasicObject: ( BasicStoreEntityAdministrativeArea ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, coursesOfAction?: Maybe<_RefType['CourseOfActionConnection']>, createdBy?: Maybe<_RefType['Identity']>, dataComponents?: Maybe<_RefType['DataComponentConnection']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, killChainPhases?: Maybe>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, parentAttackPatterns?: Maybe<_RefType['AttackPatternConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, subAttackPatterns?: Maybe<_RefType['AttackPatternConnection']>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Capability ) | ( BasicStoreEntityCaseIncident ) | ( BasicStoreEntityCaseRfi ) | ( BasicStoreEntityCaseRft ) | ( BasicStoreEntityCaseTemplate ) | ( BasicStoreEntityChannel ) | ( Omit & { administrativeArea?: Maybe<_RefType['AdministrativeArea']>, avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, country?: Maybe<_RefType['Country']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { configurations?: Maybe>, connector_user?: Maybe<_RefType['User']>, works?: Maybe>> } ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, region?: Maybe<_RefType['Region']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { attackPatterns?: Maybe<_RefType['AttackPatternConnection']>, avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityCsvMapper ) | ( BasicStoreEntityDataComponent ) | ( BasicStoreEntityDataSource ) | ( BasicStoreEntityDecayRule ) | ( BasicStoreEntityDeleteOperation ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityEntitySetting ) | ( BasicStoreEntityEvent ) | ( Omit & { connectors?: Maybe>>, exportFiles?: Maybe<_RefType['FileConnection']>, importFiles: _RefType['FileConnection'], jobs?: Maybe>>, pendingFiles: _RefType['FileConnection'], references?: Maybe<_RefType['StixObjectOrStixRelationshipConnection']>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityFeedback ) | ( Omit & { allowed_marking?: Maybe>, default_dashboard?: Maybe<_RefType['Workspace']>, default_marking?: Maybe>, max_shareable_marking: Array<_RefType['MarkingDefinition']>, members?: Maybe<_RefType['UserConnection']> } ) | ( BasicStoreEntityGrouping ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, countries?: Maybe<_RefType['CountryConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, countries?: Maybe<_RefType['CountryConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityIndicator ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, organizations?: Maybe<_RefType['OrganizationConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, killChainPhases?: Maybe>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityIngestionCsv ) | ( BasicStoreEntityIngestionRss ) | ( BasicStoreEntityIngestionTaxii ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, locations?: Maybe<_RefType['LocationConnection']>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { x_opencti_inferences?: Maybe>> } ) | ( Omit & { x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityLanguage ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, killChainPhases?: Maybe>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, samples?: Maybe>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityMalwareAnalysis ) | ( BasicStoreEntityManagerConfiguration ) | ( Omit & { x_opencti_inferences?: Maybe>> } ) | ( Omit & { administrated_organizations: Array<_RefType['Organization']>, allowed_marking?: Maybe>, default_dashboard?: Maybe<_RefType['Workspace']>, default_dashboards: Array<_RefType['Workspace']>, default_marking?: Maybe>, effective_confidence_level?: Maybe<_RefType['EffectiveConfidenceLevel']>, groups?: Maybe<_RefType['GroupConnection']>, max_shareable_marking?: Maybe>, personal_notifiers?: Maybe> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityNarrative ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { authorized_members?: Maybe>, avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, objects?: Maybe<_RefType['StixObjectOrStixRelationshipRefConnection']>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, relatedContainers?: Maybe<_RefType['ContainerConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityNotification ) | ( BasicStoreEntityNotifier ) | ( Omit & { authorized_members?: Maybe>, avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, objects?: Maybe<_RefType['StixObjectOrStixRelationshipRefConnection']>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, relatedContainers?: Maybe<_RefType['ContainerConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { authorized_members?: Maybe>, avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, objects?: Maybe<_RefType['StixObjectOrStixRelationshipRefConnection']>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, relatedContainers?: Maybe<_RefType['ContainerConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityOrganization ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityPlaybook ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, city?: Maybe<_RefType['City']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, serviceDlls?: Maybe<_RefType['StixFileConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityPublicDashboard ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, countries?: Maybe<_RefType['CountryConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, parentRegions?: Maybe<_RefType['RegionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, subRegions?: Maybe<_RefType['RegionConnection']>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { authorized_members?: Maybe>, avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, objects?: Maybe<_RefType['StixObjectOrStixRelationshipRefConnection']>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, relatedContainers?: Maybe<_RefType['ContainerConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Role ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, parentSectors?: Maybe<_RefType['SectorConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, subSectors?: Maybe<_RefType['SectorConnection']>, targetedOrganizations?: Maybe<_RefType['StixCoreRelationshipConnection']>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { activity_listeners?: Maybe>, messages_administration?: Maybe>, platform_critical_alerts: Array<_RefType['PlatformCriticalAlert']>, platform_messages?: Maybe>, platform_organization?: Maybe<_RefType['Organization']> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, vulnerabilities?: Maybe<_RefType['VulnerabilityConnection']>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, obsContent?: Maybe<_RefType['Artifact']>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntitySupportPackage ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, organizations?: Maybe<_RefType['OrganizationConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityTask ) | ( TaskTemplate ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, countries?: Maybe<_RefType['CountryConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, locations?: Maybe<_RefType['LocationConnection']>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityThreatActorIndividual ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, killChainPhases?: Maybe>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityTrigger ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { administrated_organizations: Array<_RefType['Organization']>, effective_confidence_level?: Maybe<_RefType['EffectiveConfidenceLevel']>, groups?: Maybe<_RefType['GroupConnection']>, objectOrganization?: Maybe<_RefType['OrganizationConnection']>, personal_notifiers?: Maybe> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityVocabulary ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, softwares?: Maybe<_RefType['StixCyberObservableConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityWorkspace ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ); + BasicObject: ( BasicStoreEntityAdministrativeArea ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, coursesOfAction?: Maybe<_RefType['CourseOfActionConnection']>, createdBy?: Maybe<_RefType['Identity']>, dataComponents?: Maybe<_RefType['DataComponentConnection']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, killChainPhases?: Maybe>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, parentAttackPatterns?: Maybe<_RefType['AttackPatternConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, subAttackPatterns?: Maybe<_RefType['AttackPatternConnection']>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Capability ) | ( BasicStoreEntityCaseIncident ) | ( BasicStoreEntityCaseRfi ) | ( BasicStoreEntityCaseRft ) | ( BasicStoreEntityCaseTemplate ) | ( BasicStoreEntityChannel ) | ( Omit & { administrativeArea?: Maybe<_RefType['AdministrativeArea']>, avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, country?: Maybe<_RefType['Country']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { configurations?: Maybe>, connector_user?: Maybe<_RefType['User']>, works?: Maybe>> } ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, region?: Maybe<_RefType['Region']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { attackPatterns?: Maybe<_RefType['AttackPatternConnection']>, avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityCsvMapper ) | ( BasicStoreEntityDataComponent ) | ( BasicStoreEntityDataSource ) | ( BasicStoreEntityDecayRule ) | ( BasicStoreEntityDeleteOperation ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( DraftWorkspace ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityEntitySetting ) | ( BasicStoreEntityEvent ) | ( Omit & { connectors?: Maybe>>, exportFiles?: Maybe<_RefType['FileConnection']>, importFiles: _RefType['FileConnection'], jobs?: Maybe>>, pendingFiles: _RefType['FileConnection'], references?: Maybe<_RefType['StixObjectOrStixRelationshipConnection']>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityFeedback ) | ( Omit & { allowed_marking?: Maybe>, default_dashboard?: Maybe<_RefType['Workspace']>, default_marking?: Maybe>, max_shareable_marking: Array<_RefType['MarkingDefinition']>, members?: Maybe<_RefType['UserConnection']> } ) | ( BasicStoreEntityGrouping ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, countries?: Maybe<_RefType['CountryConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, countries?: Maybe<_RefType['CountryConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityIndicator ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, organizations?: Maybe<_RefType['OrganizationConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, killChainPhases?: Maybe>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityIngestionCsv ) | ( BasicStoreEntityIngestionRss ) | ( BasicStoreEntityIngestionTaxii ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, locations?: Maybe<_RefType['LocationConnection']>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { x_opencti_inferences?: Maybe>> } ) | ( Omit & { x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityLanguage ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, killChainPhases?: Maybe>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, samples?: Maybe>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityMalwareAnalysis ) | ( BasicStoreEntityManagerConfiguration ) | ( Omit & { x_opencti_inferences?: Maybe>> } ) | ( Omit & { administrated_organizations: Array<_RefType['Organization']>, allowed_marking?: Maybe>, default_dashboard?: Maybe<_RefType['Workspace']>, default_dashboards: Array<_RefType['Workspace']>, default_marking?: Maybe>, effective_confidence_level?: Maybe<_RefType['EffectiveConfidenceLevel']>, groups?: Maybe<_RefType['GroupConnection']>, max_shareable_marking?: Maybe>, personal_notifiers?: Maybe> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityNarrative ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { authorized_members?: Maybe>, avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, objects?: Maybe<_RefType['StixObjectOrStixRelationshipRefConnection']>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, relatedContainers?: Maybe<_RefType['ContainerConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityNotification ) | ( BasicStoreEntityNotifier ) | ( Omit & { authorized_members?: Maybe>, avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, objects?: Maybe<_RefType['StixObjectOrStixRelationshipRefConnection']>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, relatedContainers?: Maybe<_RefType['ContainerConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { authorized_members?: Maybe>, avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, objects?: Maybe<_RefType['StixObjectOrStixRelationshipRefConnection']>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, relatedContainers?: Maybe<_RefType['ContainerConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityOrganization ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityPlaybook ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, city?: Maybe<_RefType['City']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, serviceDlls?: Maybe<_RefType['StixFileConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityPublicDashboard ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, countries?: Maybe<_RefType['CountryConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, parentRegions?: Maybe<_RefType['RegionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, subRegions?: Maybe<_RefType['RegionConnection']>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { authorized_members?: Maybe>, avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, objects?: Maybe<_RefType['StixObjectOrStixRelationshipRefConnection']>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, relatedContainers?: Maybe<_RefType['ContainerConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Role ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, parentSectors?: Maybe<_RefType['SectorConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, subSectors?: Maybe<_RefType['SectorConnection']>, targetedOrganizations?: Maybe<_RefType['StixCoreRelationshipConnection']>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { activity_listeners?: Maybe>, messages_administration?: Maybe>, platform_critical_alerts: Array<_RefType['PlatformCriticalAlert']>, platform_messages?: Maybe>, platform_organization?: Maybe<_RefType['Organization']> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, vulnerabilities?: Maybe<_RefType['VulnerabilityConnection']>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, obsContent?: Maybe<_RefType['Artifact']>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntitySupportPackage ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, organizations?: Maybe<_RefType['OrganizationConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityTask ) | ( TaskTemplate ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, countries?: Maybe<_RefType['CountryConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, locations?: Maybe<_RefType['LocationConnection']>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityThreatActorIndividual ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, killChainPhases?: Maybe>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityTrigger ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { administrated_organizations: Array<_RefType['Organization']>, effective_confidence_level?: Maybe<_RefType['EffectiveConfidenceLevel']>, groups?: Maybe<_RefType['GroupConnection']>, objectOrganization?: Maybe<_RefType['OrganizationConnection']>, personal_notifiers?: Maybe> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityVocabulary ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, softwares?: Maybe<_RefType['StixCyberObservableConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityWorkspace ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ); BasicRelationship: ( Omit & { from?: Maybe<_RefType['InternalObject']>, to?: Maybe<_RefType['InternalObject']> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, from?: Maybe<_RefType['StixObjectOrStixRelationshipOrCreator']>, groupings?: Maybe<_RefType['GroupingConnection']>, killChainPhases?: Maybe>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, opinions?: Maybe<_RefType['OpinionConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, to?: Maybe<_RefType['StixObjectOrStixRelationshipOrCreator']>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, from?: Maybe<_RefType['StixObjectOrStixRelationshipOrCreator']>, groupings?: Maybe<_RefType['GroupingConnection']>, notes?: Maybe<_RefType['NoteConnection']>, objectMarking?: Maybe>, opinions?: Maybe<_RefType['OpinionConnection']>, reports?: Maybe<_RefType['ReportConnection']>, to?: Maybe<_RefType['StixObjectOrStixRelationshipOrCreator']>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, from?: Maybe<_RefType['StixObjectOrStixRelationshipOrCreator']>, groupings?: Maybe<_RefType['GroupingConnection']>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, opinions?: Maybe<_RefType['OpinionConnection']>, reports?: Maybe<_RefType['ReportConnection']>, to?: Maybe<_RefType['StixObjectOrStixRelationshipOrCreator']>, x_opencti_inferences?: Maybe>> } ); Case: ( BasicStoreEntityCaseIncident ) | ( BasicStoreEntityCaseRfi ) | ( BasicStoreEntityCaseRft ) | ( BasicStoreEntityFeedback ); Container: ( BasicStoreEntityCaseIncident ) | ( BasicStoreEntityCaseRfi ) | ( BasicStoreEntityCaseRft ) | ( BasicStoreEntityFeedback ) | ( BasicStoreEntityGrouping ) | ( Omit & { authorized_members?: Maybe>, avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, objects?: Maybe<_RefType['StixObjectOrStixRelationshipRefConnection']>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, relatedContainers?: Maybe<_RefType['ContainerConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { authorized_members?: Maybe>, avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, objects?: Maybe<_RefType['StixObjectOrStixRelationshipRefConnection']>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, relatedContainers?: Maybe<_RefType['ContainerConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { authorized_members?: Maybe>, avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, objects?: Maybe<_RefType['StixObjectOrStixRelationshipRefConnection']>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, relatedContainers?: Maybe<_RefType['ContainerConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { authorized_members?: Maybe>, avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, objects?: Maybe<_RefType['StixObjectOrStixRelationshipRefConnection']>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, relatedContainers?: Maybe<_RefType['ContainerConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityTask ); HashedObservable: ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, obsContent?: Maybe<_RefType['Artifact']>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ); Identity: ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, organizations?: Maybe<_RefType['OrganizationConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityOrganization ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, parentSectors?: Maybe<_RefType['SectorConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, subSectors?: Maybe<_RefType['SectorConnection']>, targetedOrganizations?: Maybe<_RefType['StixCoreRelationshipConnection']>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, organizations?: Maybe<_RefType['OrganizationConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ); - InternalObject: ( Capability ) | ( BasicStoreEntityCaseTemplate ) | ( Omit & { configurations?: Maybe>, connector_user?: Maybe<_RefType['User']>, works?: Maybe>> } ) | ( BasicStoreEntityCsvMapper ) | ( BasicStoreEntityDecayRule ) | ( BasicStoreEntityDeleteOperation ) | ( BasicStoreEntityEntitySetting ) | ( Omit & { allowed_marking?: Maybe>, default_dashboard?: Maybe<_RefType['Workspace']>, default_marking?: Maybe>, max_shareable_marking: Array<_RefType['MarkingDefinition']>, members?: Maybe<_RefType['UserConnection']> } ) | ( BasicStoreEntityIngestionCsv ) | ( BasicStoreEntityIngestionRss ) | ( BasicStoreEntityIngestionTaxii ) | ( BasicStoreEntityManagerConfiguration ) | ( Omit & { administrated_organizations: Array<_RefType['Organization']>, allowed_marking?: Maybe>, default_dashboard?: Maybe<_RefType['Workspace']>, default_dashboards: Array<_RefType['Workspace']>, default_marking?: Maybe>, effective_confidence_level?: Maybe<_RefType['EffectiveConfidenceLevel']>, groups?: Maybe<_RefType['GroupConnection']>, max_shareable_marking?: Maybe>, personal_notifiers?: Maybe> } ) | ( BasicStoreEntityNotification ) | ( BasicStoreEntityNotifier ) | ( BasicStoreEntityPlaybook ) | ( BasicStoreEntityPublicDashboard ) | ( Role ) | ( Omit & { activity_listeners?: Maybe>, messages_administration?: Maybe>, platform_critical_alerts: Array<_RefType['PlatformCriticalAlert']>, platform_messages?: Maybe>, platform_organization?: Maybe<_RefType['Organization']> } ) | ( BasicStoreEntitySupportPackage ) | ( TaskTemplate ) | ( BasicStoreEntityTrigger ) | ( Omit & { administrated_organizations: Array<_RefType['Organization']>, effective_confidence_level?: Maybe<_RefType['EffectiveConfidenceLevel']>, groups?: Maybe<_RefType['GroupConnection']>, objectOrganization?: Maybe<_RefType['OrganizationConnection']>, personal_notifiers?: Maybe> } ) | ( BasicStoreEntityWorkspace ); + InternalObject: ( Capability ) | ( BasicStoreEntityCaseTemplate ) | ( Omit & { configurations?: Maybe>, connector_user?: Maybe<_RefType['User']>, works?: Maybe>> } ) | ( BasicStoreEntityCsvMapper ) | ( BasicStoreEntityDecayRule ) | ( BasicStoreEntityDeleteOperation ) | ( DraftWorkspace ) | ( BasicStoreEntityEntitySetting ) | ( Omit & { allowed_marking?: Maybe>, default_dashboard?: Maybe<_RefType['Workspace']>, default_marking?: Maybe>, max_shareable_marking: Array<_RefType['MarkingDefinition']>, members?: Maybe<_RefType['UserConnection']> } ) | ( BasicStoreEntityIngestionCsv ) | ( BasicStoreEntityIngestionRss ) | ( BasicStoreEntityIngestionTaxii ) | ( BasicStoreEntityManagerConfiguration ) | ( Omit & { administrated_organizations: Array<_RefType['Organization']>, allowed_marking?: Maybe>, default_dashboard?: Maybe<_RefType['Workspace']>, default_dashboards: Array<_RefType['Workspace']>, default_marking?: Maybe>, effective_confidence_level?: Maybe<_RefType['EffectiveConfidenceLevel']>, groups?: Maybe<_RefType['GroupConnection']>, max_shareable_marking?: Maybe>, personal_notifiers?: Maybe> } ) | ( BasicStoreEntityNotification ) | ( BasicStoreEntityNotifier ) | ( BasicStoreEntityPlaybook ) | ( BasicStoreEntityPublicDashboard ) | ( Role ) | ( Omit & { activity_listeners?: Maybe>, messages_administration?: Maybe>, platform_critical_alerts: Array<_RefType['PlatformCriticalAlert']>, platform_messages?: Maybe>, platform_organization?: Maybe<_RefType['Organization']> } ) | ( BasicStoreEntitySupportPackage ) | ( TaskTemplate ) | ( BasicStoreEntityTrigger ) | ( Omit & { administrated_organizations: Array<_RefType['Organization']>, effective_confidence_level?: Maybe<_RefType['EffectiveConfidenceLevel']>, groups?: Maybe<_RefType['GroupConnection']>, objectOrganization?: Maybe<_RefType['OrganizationConnection']>, personal_notifiers?: Maybe> } ) | ( BasicStoreEntityWorkspace ); Location: ( BasicStoreEntityAdministrativeArea ) | ( Omit & { administrativeArea?: Maybe<_RefType['AdministrativeArea']>, avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, country?: Maybe<_RefType['Country']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, region?: Maybe<_RefType['Region']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, city?: Maybe<_RefType['City']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, countries?: Maybe<_RefType['CountryConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, parentRegions?: Maybe<_RefType['RegionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, subRegions?: Maybe<_RefType['RegionConnection']>, x_opencti_inferences?: Maybe>> } ); StixCoreObject: ( BasicStoreEntityAdministrativeArea ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, coursesOfAction?: Maybe<_RefType['CourseOfActionConnection']>, createdBy?: Maybe<_RefType['Identity']>, dataComponents?: Maybe<_RefType['DataComponentConnection']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, killChainPhases?: Maybe>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, parentAttackPatterns?: Maybe<_RefType['AttackPatternConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, subAttackPatterns?: Maybe<_RefType['AttackPatternConnection']>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityCaseIncident ) | ( BasicStoreEntityCaseRfi ) | ( BasicStoreEntityCaseRft ) | ( BasicStoreEntityChannel ) | ( Omit & { administrativeArea?: Maybe<_RefType['AdministrativeArea']>, avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, country?: Maybe<_RefType['Country']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, region?: Maybe<_RefType['Region']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { attackPatterns?: Maybe<_RefType['AttackPatternConnection']>, avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityDataComponent ) | ( BasicStoreEntityDataSource ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityEvent ) | ( BasicStoreEntityFeedback ) | ( BasicStoreEntityGrouping ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, countries?: Maybe<_RefType['CountryConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, countries?: Maybe<_RefType['CountryConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityIndicator ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, organizations?: Maybe<_RefType['OrganizationConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, killChainPhases?: Maybe>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, locations?: Maybe<_RefType['LocationConnection']>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityLanguage ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, killChainPhases?: Maybe>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, samples?: Maybe>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityMalwareAnalysis ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityNarrative ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { authorized_members?: Maybe>, avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, objects?: Maybe<_RefType['StixObjectOrStixRelationshipRefConnection']>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, relatedContainers?: Maybe<_RefType['ContainerConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { authorized_members?: Maybe>, avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, objects?: Maybe<_RefType['StixObjectOrStixRelationshipRefConnection']>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, relatedContainers?: Maybe<_RefType['ContainerConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { authorized_members?: Maybe>, avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, objects?: Maybe<_RefType['StixObjectOrStixRelationshipRefConnection']>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, relatedContainers?: Maybe<_RefType['ContainerConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityOrganization ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, city?: Maybe<_RefType['City']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, serviceDlls?: Maybe<_RefType['StixFileConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, countries?: Maybe<_RefType['CountryConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, parentRegions?: Maybe<_RefType['RegionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, subRegions?: Maybe<_RefType['RegionConnection']>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { authorized_members?: Maybe>, avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, objects?: Maybe<_RefType['StixObjectOrStixRelationshipRefConnection']>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, relatedContainers?: Maybe<_RefType['ContainerConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, parentSectors?: Maybe<_RefType['SectorConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, subSectors?: Maybe<_RefType['SectorConnection']>, targetedOrganizations?: Maybe<_RefType['StixCoreRelationshipConnection']>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, vulnerabilities?: Maybe<_RefType['VulnerabilityConnection']>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, obsContent?: Maybe<_RefType['Artifact']>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, organizations?: Maybe<_RefType['OrganizationConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityTask ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, countries?: Maybe<_RefType['CountryConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, locations?: Maybe<_RefType['LocationConnection']>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( BasicStoreEntityThreatActorIndividual ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, killChainPhases?: Maybe>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { avatar?: Maybe<_RefType['OpenCtiFile']>, cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, softwares?: Maybe<_RefType['StixCyberObservableConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ); StixCyberObservable: ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, countries?: Maybe<_RefType['CountryConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, countries?: Maybe<_RefType['CountryConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, serviceDlls?: Maybe<_RefType['StixFileConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, vulnerabilities?: Maybe<_RefType['VulnerabilityConnection']>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, obsContent?: Maybe<_RefType['Artifact']>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ) | ( Omit & { cases?: Maybe<_RefType['CaseConnection']>, connectors?: Maybe>>, containers?: Maybe<_RefType['ContainerConnection']>, createdBy?: Maybe<_RefType['Identity']>, exportFiles?: Maybe<_RefType['FileConnection']>, externalReferences?: Maybe<_RefType['ExternalReferenceConnection']>, groupings?: Maybe<_RefType['GroupingConnection']>, importFiles?: Maybe<_RefType['FileConnection']>, indicators?: Maybe<_RefType['IndicatorConnection']>, jobs?: Maybe>>, notes?: Maybe<_RefType['NoteConnection']>, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe<_RefType['ObservedDataConnection']>, opinions?: Maybe<_RefType['OpinionConnection']>, pendingFiles?: Maybe<_RefType['FileConnection']>, reports?: Maybe<_RefType['ReportConnection']>, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe<_RefType['StixCoreRelationshipConnection']>, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> } ); @@ -30144,6 +30215,11 @@ export type ResolversTypes = ResolversObject<{ DocsMetrics: ResolverTypeWrapper; DomainName: ResolverTypeWrapper & { cases?: Maybe, connectors?: Maybe>>, containers?: Maybe, createdBy?: Maybe, exportFiles?: Maybe, externalReferences?: Maybe, groupings?: Maybe, importFiles?: Maybe, indicators?: Maybe, jobs?: Maybe>>, notes?: Maybe, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe, opinions?: Maybe, pendingFiles?: Maybe, reports?: Maybe, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> }>; DomainNameAddInput: DomainNameAddInput; + DraftWorkspace: ResolverTypeWrapper; + DraftWorkspaceAddInput: DraftWorkspaceAddInput; + DraftWorkspaceConnection: ResolverTypeWrapper; + DraftWorkspaceEdge: ResolverTypeWrapper; + DraftWorkspacesOrdering: DraftWorkspacesOrdering; EditContext: EditContext; EditInput: EditInput; EditOperation: EditOperation; @@ -30944,6 +31020,10 @@ export type ResolversParentTypes = ResolversObject<{ DocsMetrics: DocsMetrics; DomainName: Omit & { cases?: Maybe, connectors?: Maybe>>, containers?: Maybe, createdBy?: Maybe, exportFiles?: Maybe, externalReferences?: Maybe, groupings?: Maybe, importFiles?: Maybe, indicators?: Maybe, jobs?: Maybe>>, notes?: Maybe, objectLabel?: Maybe>, objectMarking?: Maybe>, objectOrganization?: Maybe>, observedData?: Maybe, opinions?: Maybe, pendingFiles?: Maybe, reports?: Maybe, stixCoreObjectsDistribution?: Maybe>>, stixCoreRelationships?: Maybe, stixCoreRelationshipsDistribution?: Maybe>>, x_opencti_inferences?: Maybe>> }; DomainNameAddInput: DomainNameAddInput; + DraftWorkspace: DraftWorkspace; + DraftWorkspaceAddInput: DraftWorkspaceAddInput; + DraftWorkspaceConnection: DraftWorkspaceConnection; + DraftWorkspaceEdge: DraftWorkspaceEdge; EditContext: EditContext; EditInput: EditInput; EditUserContext: EditUserContext; @@ -31992,7 +32072,7 @@ export type BankAccountResolvers; export type BasicObjectResolvers = ResolversObject<{ - __resolveType: TypeResolveFn<'AdministrativeArea' | 'Artifact' | 'AttackPattern' | 'AutonomousSystem' | 'BankAccount' | 'Campaign' | 'Capability' | 'CaseIncident' | 'CaseRfi' | 'CaseRft' | 'CaseTemplate' | 'Channel' | 'City' | 'Connector' | 'Country' | 'CourseOfAction' | 'Credential' | 'CryptocurrencyWallet' | 'CryptographicKey' | 'CsvMapper' | 'DataComponent' | 'DataSource' | 'DecayRule' | 'DeleteOperation' | 'Directory' | 'DomainName' | 'EmailAddr' | 'EmailMessage' | 'EmailMimePartType' | 'EntitySetting' | 'Event' | 'ExternalReference' | 'Feedback' | 'Group' | 'Grouping' | 'Hostname' | 'IPv4Addr' | 'IPv6Addr' | 'Incident' | 'Indicator' | 'Individual' | 'Infrastructure' | 'IngestionCsv' | 'IngestionRss' | 'IngestionTaxii' | 'IntrusionSet' | 'KillChainPhase' | 'Label' | 'Language' | 'MacAddr' | 'Malware' | 'MalwareAnalysis' | 'ManagerConfiguration' | 'MarkingDefinition' | 'MeUser' | 'MediaContent' | 'Mutex' | 'Narrative' | 'NetworkTraffic' | 'Note' | 'Notification' | 'Notifier' | 'ObservedData' | 'Opinion' | 'Organization' | 'PaymentCard' | 'Persona' | 'PhoneNumber' | 'Playbook' | 'Position' | 'Process' | 'PublicDashboard' | 'Region' | 'Report' | 'Role' | 'Sector' | 'Settings' | 'Software' | 'StixFile' | 'SupportPackage' | 'System' | 'Task' | 'TaskTemplate' | 'Text' | 'ThreatActorGroup' | 'ThreatActorIndividual' | 'Tool' | 'TrackingNumber' | 'Trigger' | 'Url' | 'User' | 'UserAccount' | 'UserAgent' | 'Vocabulary' | 'Vulnerability' | 'WindowsRegistryKey' | 'WindowsRegistryValueType' | 'Workspace' | 'X509Certificate', ParentType, ContextType>; + __resolveType: TypeResolveFn<'AdministrativeArea' | 'Artifact' | 'AttackPattern' | 'AutonomousSystem' | 'BankAccount' | 'Campaign' | 'Capability' | 'CaseIncident' | 'CaseRfi' | 'CaseRft' | 'CaseTemplate' | 'Channel' | 'City' | 'Connector' | 'Country' | 'CourseOfAction' | 'Credential' | 'CryptocurrencyWallet' | 'CryptographicKey' | 'CsvMapper' | 'DataComponent' | 'DataSource' | 'DecayRule' | 'DeleteOperation' | 'Directory' | 'DomainName' | 'DraftWorkspace' | 'EmailAddr' | 'EmailMessage' | 'EmailMimePartType' | 'EntitySetting' | 'Event' | 'ExternalReference' | 'Feedback' | 'Group' | 'Grouping' | 'Hostname' | 'IPv4Addr' | 'IPv6Addr' | 'Incident' | 'Indicator' | 'Individual' | 'Infrastructure' | 'IngestionCsv' | 'IngestionRss' | 'IngestionTaxii' | 'IntrusionSet' | 'KillChainPhase' | 'Label' | 'Language' | 'MacAddr' | 'Malware' | 'MalwareAnalysis' | 'ManagerConfiguration' | 'MarkingDefinition' | 'MeUser' | 'MediaContent' | 'Mutex' | 'Narrative' | 'NetworkTraffic' | 'Note' | 'Notification' | 'Notifier' | 'ObservedData' | 'Opinion' | 'Organization' | 'PaymentCard' | 'Persona' | 'PhoneNumber' | 'Playbook' | 'Position' | 'Process' | 'PublicDashboard' | 'Region' | 'Report' | 'Role' | 'Sector' | 'Settings' | 'Software' | 'StixFile' | 'SupportPackage' | 'System' | 'Task' | 'TaskTemplate' | 'Text' | 'ThreatActorGroup' | 'ThreatActorIndividual' | 'Tool' | 'TrackingNumber' | 'Trigger' | 'Url' | 'User' | 'UserAccount' | 'UserAgent' | 'Vocabulary' | 'Vulnerability' | 'WindowsRegistryKey' | 'WindowsRegistryValueType' | 'Workspace' | 'X509Certificate', ParentType, ContextType>; entity_type?: Resolver; id?: Resolver; parent_types?: Resolver>, ParentType, ContextType>; @@ -33550,6 +33630,27 @@ export type DomainNameResolvers; }>; +export type DraftWorkspaceResolvers = ResolversObject<{ + entity_type?: Resolver; + id?: Resolver; + name?: Resolver; + parent_types?: Resolver, ParentType, ContextType>; + standard_id?: Resolver; + __isTypeOf?: IsTypeOfResolverFn; +}>; + +export type DraftWorkspaceConnectionResolvers = ResolversObject<{ + edges?: Resolver, ParentType, ContextType>; + pageInfo?: Resolver; + __isTypeOf?: IsTypeOfResolverFn; +}>; + +export type DraftWorkspaceEdgeResolvers = ResolversObject<{ + cursor?: Resolver; + node?: Resolver; + __isTypeOf?: IsTypeOfResolverFn; +}>; + export type EditUserContextResolvers = ResolversObject<{ focusOn?: Resolver, ParentType, ContextType>; name?: Resolver; @@ -34950,7 +35051,7 @@ export type IngestionTaxiiEdgeResolvers; export type InternalObjectResolvers = ResolversObject<{ - __resolveType: TypeResolveFn<'Capability' | 'CaseTemplate' | 'Connector' | 'CsvMapper' | 'DecayRule' | 'DeleteOperation' | 'EntitySetting' | 'Group' | 'IngestionCsv' | 'IngestionRss' | 'IngestionTaxii' | 'ManagerConfiguration' | 'MeUser' | 'Notification' | 'Notifier' | 'Playbook' | 'PublicDashboard' | 'Role' | 'Settings' | 'SupportPackage' | 'TaskTemplate' | 'Trigger' | 'User' | 'Workspace', ParentType, ContextType>; + __resolveType: TypeResolveFn<'Capability' | 'CaseTemplate' | 'Connector' | 'CsvMapper' | 'DecayRule' | 'DeleteOperation' | 'DraftWorkspace' | 'EntitySetting' | 'Group' | 'IngestionCsv' | 'IngestionRss' | 'IngestionTaxii' | 'ManagerConfiguration' | 'MeUser' | 'Notification' | 'Notifier' | 'Playbook' | 'PublicDashboard' | 'Role' | 'Settings' | 'SupportPackage' | 'TaskTemplate' | 'Trigger' | 'User' | 'Workspace', ParentType, ContextType>; entity_type?: Resolver; id?: Resolver; }>; @@ -35689,6 +35790,7 @@ export type MeUserResolvers, ParentType, ContextType>; user_confidence_level?: Resolver, ParentType, ContextType>; user_email?: Resolver; + workspace_context?: Resolver, ParentType, ContextType>; __isTypeOf?: IsTypeOfResolverFn; }>; @@ -35892,6 +35994,8 @@ export type MutationResolvers, ParentType, ContextType, Partial>; deleteOperationConfirm?: Resolver, ParentType, ContextType, RequireFields>; deleteOperationRestore?: Resolver, ParentType, ContextType, RequireFields>; + draftWorkspaceAdd?: Resolver, ParentType, ContextType, RequireFields>; + draftWorkspaceDelete?: Resolver, ParentType, ContextType, RequireFields>; entitySettingsFieldPatch?: Resolver>>, ParentType, ContextType, RequireFields>; eventAdd?: Resolver, ParentType, ContextType, RequireFields>; eventContextClean?: Resolver, ParentType, ContextType, RequireFields>; @@ -37281,6 +37385,9 @@ export type QueryResolvers, ParentType, ContextType, Partial>; deleteOperation?: Resolver, ParentType, ContextType, RequireFields>; deleteOperations?: Resolver, ParentType, ContextType, Partial>; + draftWorkspace?: Resolver, ParentType, ContextType, RequireFields>; + draftWorkspaceEntities?: Resolver, ParentType, ContextType, Partial>; + draftWorkspaces?: Resolver, ParentType, ContextType, Partial>; elasticSearchMetrics?: Resolver, ParentType, ContextType>; enrichmentConnectors?: Resolver>>, ParentType, ContextType, RequireFields>; entitySetting?: Resolver, ParentType, ContextType, RequireFields>; @@ -40462,6 +40569,9 @@ export type Resolvers = ResolversObject<{ Distribution?: DistributionResolvers; DocsMetrics?: DocsMetricsResolvers; DomainName?: DomainNameResolvers; + DraftWorkspace?: DraftWorkspaceResolvers; + DraftWorkspaceConnection?: DraftWorkspaceConnectionResolvers; + DraftWorkspaceEdge?: DraftWorkspaceEdgeResolvers; EditUserContext?: EditUserContextResolvers; EffectiveConfidenceLevel?: EffectiveConfidenceLevelResolvers; EffectiveConfidenceLevelOverride?: EffectiveConfidenceLevelOverrideResolvers; diff --git a/opencti-platform/opencti-graphql/src/migrations/1726472121833-create-index-draft-objects.js b/opencti-platform/opencti-graphql/src/migrations/1726472121833-create-index-draft-objects.js new file mode 100644 index 0000000000000..69c2e8b5d1e39 --- /dev/null +++ b/opencti-platform/opencti-graphql/src/migrations/1726472121833-create-index-draft-objects.js @@ -0,0 +1,16 @@ +import { logApp } from '../config/conf'; +import { elCreateIndex, engineMappingGenerator } from '../database/engine'; +import { INDEX_DRAFT } from '../database/utils'; + +const message = '[MIGRATION] Create index deleted objects'; +export const up = async (next) => { + logApp.info(`${message} > started`); + const mappingProperties = engineMappingGenerator(); + await elCreateIndex(INDEX_DRAFT, mappingProperties); + logApp.info(`${message} > done`); + next(); +}; + +export const down = async (next) => { + next(); +}; diff --git a/opencti-platform/opencti-graphql/src/modules/attributes/basicObject-registrationAttributes.ts b/opencti-platform/opencti-graphql/src/modules/attributes/basicObject-registrationAttributes.ts index 9e308574f55e3..7cddcdd0339c3 100644 --- a/opencti-platform/opencti-graphql/src/modules/attributes/basicObject-registrationAttributes.ts +++ b/opencti-platform/opencti-graphql/src/modules/attributes/basicObject-registrationAttributes.ts @@ -3,6 +3,7 @@ import { baseType, createdAt, creators, + draftIds, entityType, iAttributes, id, @@ -18,6 +19,7 @@ const basicObjectAttributes: Array = [ id, internalId, standardId, + draftIds, iAttributes, parentTypes, baseType, diff --git a/opencti-platform/opencti-graphql/src/modules/attributes/basicRelationship-registrationAttributes.ts b/opencti-platform/opencti-graphql/src/modules/attributes/basicRelationship-registrationAttributes.ts index adbbdbd7f3a9b..1564435455147 100644 --- a/opencti-platform/opencti-graphql/src/modules/attributes/basicRelationship-registrationAttributes.ts +++ b/opencti-platform/opencti-graphql/src/modules/attributes/basicRelationship-registrationAttributes.ts @@ -3,6 +3,7 @@ import { baseType, createdAt, creators, + draftIds, entityType, iAttributes, id, @@ -53,6 +54,7 @@ const basicRelationshipAttributes: Array = [ id, internalId, standardId, + draftIds, iAttributes, parentTypes, baseType, diff --git a/opencti-platform/opencti-graphql/src/modules/attributes/internalObject-registrationAttributes.ts b/opencti-platform/opencti-graphql/src/modules/attributes/internalObject-registrationAttributes.ts index 2b65e8f389e6f..d0cb06a234ced 100644 --- a/opencti-platform/opencti-graphql/src/modules/attributes/internalObject-registrationAttributes.ts +++ b/opencti-platform/opencti-graphql/src/modules/attributes/internalObject-registrationAttributes.ts @@ -309,6 +309,7 @@ const internalObjectsAttributes: { [k: string]: Array } = { { name: 'otp_qr', label: 'OTP QR', type: 'string', format: 'short', mandatoryType: 'no', editDefault: false, multiple: false, upsert: false, isFilterable: false }, { name: 'otp_activated', label: '2FA state', type: 'boolean', mandatoryType: 'no', editDefault: false, multiple: false, upsert: false, isFilterable: false }, { name: 'default_dashboard', label: 'Default dashboard', type: 'string', format: 'short', mandatoryType: 'no', editDefault: false, multiple: false, upsert: false, isFilterable: true }, + { name: 'workspace_context', label: 'Current draft context', type: 'string', format: 'short', mandatoryType: 'no', editDefault: false, multiple: false, upsert: false, isFilterable: true }, { name: 'default_time_field', label: 'Default time field', type: 'string', format: 'short', mandatoryType: 'no', editDefault: false, multiple: false, upsert: false, isFilterable: true }, { name: 'account_status', label: 'Account status', type: 'string', format: 'short', mandatoryType: 'external', editDefault: true, multiple: false, upsert: false, isFilterable: true }, { name: 'account_lock_after_date', label: 'Account expiration date', type: 'date', mandatoryType: 'no', editDefault: false, multiple: false, upsert: false, isFilterable: true }, diff --git a/opencti-platform/opencti-graphql/src/modules/draftWorkspace/draftWorkspace-converter.ts b/opencti-platform/opencti-graphql/src/modules/draftWorkspace/draftWorkspace-converter.ts new file mode 100644 index 0000000000000..cf36453f743b9 --- /dev/null +++ b/opencti-platform/opencti-graphql/src/modules/draftWorkspace/draftWorkspace-converter.ts @@ -0,0 +1,12 @@ +import { buildStixObject, } from '../../database/stix-converter'; +import type { StixDraftWorkspace, StoreEntityDraftWorkspace } from './draftWorkspace-types'; + +const convertDraftWorkspaceToStix = (instance: StoreEntityDraftWorkspace): StixDraftWorkspace => { + const stixObject = buildStixObject(instance); + return { + ...stixObject, + name: instance.name, + }; +}; + +export default convertDraftWorkspaceToStix; diff --git a/opencti-platform/opencti-graphql/src/modules/draftWorkspace/draftWorkspace-domain.ts b/opencti-platform/opencti-graphql/src/modules/draftWorkspace/draftWorkspace-domain.ts new file mode 100644 index 0000000000000..d99c2987387ef --- /dev/null +++ b/opencti-platform/opencti-graphql/src/modules/draftWorkspace/draftWorkspace-domain.ts @@ -0,0 +1,59 @@ +import type { AuthContext, AuthUser } from '../../types/user'; +import { type EntityOptions, listEntitiesPaginated, storeLoadById } from '../../database/middleware-loader'; +import type { DraftWorkspaceAddInput, QueryDraftWorkspaceEntitiesArgs, QueryDraftWorkspacesArgs } from '../../generated/graphql'; +import { createInternalObject } from '../../domain/internalObject'; +import { now } from '../../utils/format'; +import { type BasicStoreEntityDraftWorkspace, ENTITY_TYPE_DRAFT_WORKSPACE, type StoreEntityDraftWorkspace } from './draftWorkspace-types'; +import { elDeleteDraftElements } from '../../database/engine'; +import { READ_INDEX_DRAFT } from '../../database/utils'; +import { FunctionalError } from '../../config/errors'; +import { deleteElementById } from '../../database/middleware'; +import type { BasicStoreEntity } from '../../types/store'; +import { ABSTRACT_STIX_CORE_OBJECT } from '../../schema/general'; +import { isStixCoreObject } from '../../schema/stixCoreObject'; +import { isFeatureEnabled } from '../../config/conf'; + +export const findById = (context: AuthContext, user: AuthUser, id: string) => { + return storeLoadById(context, user, id, ENTITY_TYPE_DRAFT_WORKSPACE); +}; + +export const findAll = (context: AuthContext, user: AuthUser, args: QueryDraftWorkspacesArgs) => { + return listEntitiesPaginated(context, user, [ENTITY_TYPE_DRAFT_WORKSPACE], args); +}; + +export const findAllEntities = (context: AuthContext, user: AuthUser, args: QueryDraftWorkspaceEntitiesArgs) => { + let types: string[] = []; + if (args && args.types) { + types = args.types.filter((t) => t && isStixCoreObject(t)) as string[]; + } + if (types.length === 0) { + types.push(ABSTRACT_STIX_CORE_OBJECT); + } + const newArgs: EntityOptions = { ...args, types, indices: [READ_INDEX_DRAFT] }; + return listEntitiesPaginated(context, user, types, newArgs); +}; + +export const addDraftWorkspace = async (context: AuthContext, user: AuthUser, input: DraftWorkspaceAddInput) => { + const defaultOps = { + created_at: now(), + }; + + if (!isFeatureEnabled('DRAFT_WORKSPACE')) throw new Error('Feature not yet available'); + + const draftWorkspaceInput = { ...input, ...defaultOps }; + const createdDraftWorkspace = await createInternalObject(context, user, draftWorkspaceInput, ENTITY_TYPE_DRAFT_WORKSPACE); + + return createdDraftWorkspace; +}; + +export const deleteDraftWorkspace = async (context: AuthContext, user: AuthUser, id: string) => { + const draftWorkspace = await findById(context, user, id); + if (!draftWorkspace) { + throw FunctionalError(`Draft workspace ${id} cannot be found`, id); + } + + await elDeleteDraftElements(context, user, id); + await deleteElementById(context, user, id, ENTITY_TYPE_DRAFT_WORKSPACE); + + return id; +}; diff --git a/opencti-platform/opencti-graphql/src/modules/draftWorkspace/draftWorkspace-graphql.ts b/opencti-platform/opencti-graphql/src/modules/draftWorkspace/draftWorkspace-graphql.ts new file mode 100644 index 0000000000000..883909c7c83ce --- /dev/null +++ b/opencti-platform/opencti-graphql/src/modules/draftWorkspace/draftWorkspace-graphql.ts @@ -0,0 +1,8 @@ +import { registerGraphqlSchema } from '../../graphql/schema'; +import draftWorkspaceTypeDefs from './draftWorkspace.graphql'; +import draftWorkspaceResolvers from './draftWorkspace-resolvers'; + +registerGraphqlSchema({ + schema: draftWorkspaceTypeDefs, + resolver: draftWorkspaceResolvers, +}); diff --git a/opencti-platform/opencti-graphql/src/modules/draftWorkspace/draftWorkspace-resolvers.ts b/opencti-platform/opencti-graphql/src/modules/draftWorkspace/draftWorkspace-resolvers.ts new file mode 100644 index 0000000000000..cd9b2a2e50f30 --- /dev/null +++ b/opencti-platform/opencti-graphql/src/modules/draftWorkspace/draftWorkspace-resolvers.ts @@ -0,0 +1,20 @@ +import type { Resolvers } from '../../generated/graphql'; +import { findById, findAll, addDraftWorkspace, deleteDraftWorkspace, findAllEntities } from './draftWorkspace-domain'; + +const draftWorkspaceResolvers: Resolvers = { + Query: { + draftWorkspace: (_, { id }, context) => findById(context, context.user, id), + draftWorkspaces: (_, args, context) => findAll(context, context.user, args), + draftWorkspaceEntities: (_, args, context) => findAllEntities(context, context.user, args), + }, + Mutation: { + draftWorkspaceAdd: (_, { input }, context) => { + return addDraftWorkspace(context, context.user, input); + }, + draftWorkspaceDelete: (_, { id }, context) => { + return deleteDraftWorkspace(context, context.user, id); + }, + } +}; + +export default draftWorkspaceResolvers; diff --git a/opencti-platform/opencti-graphql/src/modules/draftWorkspace/draftWorkspace-types.ts b/opencti-platform/opencti-graphql/src/modules/draftWorkspace/draftWorkspace-types.ts new file mode 100644 index 0000000000000..91490388beb31 --- /dev/null +++ b/opencti-platform/opencti-graphql/src/modules/draftWorkspace/draftWorkspace-types.ts @@ -0,0 +1,15 @@ +import type { StixObject } from '../../types/stix-common'; +import type { BasicStoreEntity, StoreEntity } from '../../types/store'; + +export const ENTITY_TYPE_DRAFT_WORKSPACE = 'DraftWorkspace'; + +export interface BasicStoreEntityDraftWorkspace extends BasicStoreEntity { + name: string +} + +export interface StoreEntityDraftWorkspace extends BasicStoreEntityDraftWorkspace, StoreEntity { +} + +export interface StixDraftWorkspace extends StixObject { + name: string +} diff --git a/opencti-platform/opencti-graphql/src/modules/draftWorkspace/draftWorkspace.graphql b/opencti-platform/opencti-graphql/src/modules/draftWorkspace/draftWorkspace.graphql new file mode 100644 index 0000000000000..1c4f4e2aadaae --- /dev/null +++ b/opencti-platform/opencti-graphql/src/modules/draftWorkspace/draftWorkspace.graphql @@ -0,0 +1,56 @@ +# Type +type DraftWorkspace implements InternalObject & BasicObject { + id: ID! + entity_type: String! + standard_id: String! + parent_types: [String!]! + # DraftWorkspace + name: String! +} + +# Ordering +enum DraftWorkspacesOrdering { + name +} + +# Relay connections +type DraftWorkspaceConnection { + pageInfo: PageInfo! + edges: [DraftWorkspaceEdge!]! +} + +type DraftWorkspaceEdge { + cursor: String! + node: DraftWorkspace! +} + +# Queries +type Query { + draftWorkspace(id: String!): DraftWorkspace @auth(for: [KNOWLEDGE]) + draftWorkspaces( + first: Int + after: ID + orderBy: DraftWorkspacesOrdering + orderMode: OrderingMode + filters: FilterGroup + search: String + ): DraftWorkspaceConnection @auth(for: [KNOWLEDGE]) + draftWorkspaceEntities( + types: [String] + first: Int + after: ID + orderBy: StixDomainObjectsOrdering + orderMode: OrderingMode + filters: FilterGroup + search: String + ): StixCoreObjectConnection @auth(for: [KNOWLEDGE]) +} + +input DraftWorkspaceAddInput { + name: String! +} + +type Mutation { + draftWorkspaceAdd(input: DraftWorkspaceAddInput!): DraftWorkspace @auth(for: [KNOWLEDGE]) + draftWorkspaceDelete(id: ID!): ID @auth(for: [KNOWLEDGE]) +} \ No newline at end of file diff --git a/opencti-platform/opencti-graphql/src/modules/draftWorkspace/draftWorkspace.ts b/opencti-platform/opencti-graphql/src/modules/draftWorkspace/draftWorkspace.ts new file mode 100644 index 0000000000000..406de91ffe350 --- /dev/null +++ b/opencti-platform/opencti-graphql/src/modules/draftWorkspace/draftWorkspace.ts @@ -0,0 +1,32 @@ +import { v4 as uuidv4 } from 'uuid'; +import { ABSTRACT_INTERNAL_OBJECT } from '../../schema/general'; +import { type ModuleDefinition, registerDefinition } from '../../schema/module'; +import { createdAt } from '../../schema/attribute-definition'; +import { ENTITY_TYPE_DRAFT_WORKSPACE, type StixDraftWorkspace, type StoreEntityDraftWorkspace } from './draftWorkspace-types'; +import convertDraftWorkspaceToStix from './draftWorkspace-converter'; + +const DRAFT_WORKSPACE_DEFINITION: ModuleDefinition = { + type: { + id: 'draftWorkspace', + name: ENTITY_TYPE_DRAFT_WORKSPACE, + category: ABSTRACT_INTERNAL_OBJECT, + aliased: false + }, + identifier: { + definition: { + [ENTITY_TYPE_DRAFT_WORKSPACE]: () => uuidv4() + }, + }, + attributes: [ + { ...createdAt }, + { name: 'name', label: 'Name', type: 'string', format: 'short', mandatoryType: 'internal', editDefault: false, multiple: false, upsert: false, isFilterable: true } + ], + relations: [], + relationsRefs: [], + representative: (stix: StixDraftWorkspace) => { + return stix.name; + }, + converter: convertDraftWorkspaceToStix +}; + +registerDefinition(DRAFT_WORKSPACE_DEFINITION); diff --git a/opencti-platform/opencti-graphql/src/modules/index.ts b/opencti-platform/opencti-graphql/src/modules/index.ts index 1292838b45ad4..ef203fee40e7e 100644 --- a/opencti-platform/opencti-graphql/src/modules/index.ts +++ b/opencti-platform/opencti-graphql/src/modules/index.ts @@ -61,6 +61,7 @@ import './internal/document/document'; import './publicDashboard/publicDashboard'; import './deleteOperation/deleteOperation'; import './support/support'; +import './draftWorkspace/draftWorkspace'; // incomplete modules import './report/report'; @@ -117,5 +118,6 @@ import './ai/ai-graphql'; import './xtm/xtm-graphql'; import './deleteOperation/deleteOperation-graphql'; import './support/support-graphql'; +import './draftWorkspace/draftWorkspace-graphql'; // import './internal/document/document-graphql'; # Not needed as document is not fully registered // endregion diff --git a/opencti-platform/opencti-graphql/src/schema/attribute-definition.ts b/opencti-platform/opencti-graphql/src/schema/attribute-definition.ts index 7b93b4cebba3b..e81476516c1ca 100644 --- a/opencti-platform/opencti-graphql/src/schema/attribute-definition.ts +++ b/opencti-platform/opencti-graphql/src/schema/attribute-definition.ts @@ -95,6 +95,19 @@ export const id: AttributeDefinition = { entityTypes: [ABSTRACT_BASIC_OBJECT, ABSTRACT_BASIC_RELATIONSHIP] }; +export const draftIds: AttributeDefinition = { + name: 'draft_ids', + label: 'Draft ids', + type: 'string', + format: 'id', + update: false, + mandatoryType: 'no', + multiple: true, + editDefault: false, + upsert: false, + isFilterable: false, + entityTypes: [ABSTRACT_BASIC_OBJECT, ABSTRACT_BASIC_RELATIONSHIP] +}; export const iAttributes: AttributeDefinition = { name: 'i_attributes', label: 'Attributes', diff --git a/opencti-platform/opencti-graphql/src/schema/internalObject.ts b/opencti-platform/opencti-graphql/src/schema/internalObject.ts index d1cf7ba745456..0563a00c836a5 100644 --- a/opencti-platform/opencti-graphql/src/schema/internalObject.ts +++ b/opencti-platform/opencti-graphql/src/schema/internalObject.ts @@ -3,6 +3,7 @@ import { schemaTypesDefinition } from './schema-types'; import { ENTITY_TYPE_WORKSPACE } from '../modules/workspace/workspace-types'; import { ENTITY_TYPE_PUBLIC_DASHBOARD } from '../modules/publicDashboard/publicDashboard-types'; import { ENTITY_TYPE_DELETE_OPERATION } from '../modules/deleteOperation/deleteOperation-types'; +import { ENTITY_TYPE_DRAFT_WORKSPACE } from '../modules/draftWorkspace/draftWorkspace-types'; export const ENTITY_TYPE_SETTINGS = 'Settings'; export const ENTITY_TYPE_MIGRATION_STATUS = 'MigrationStatus'; @@ -37,6 +38,7 @@ const DATED_INTERNAL_OBJECTS = [ ENTITY_TYPE_SYNC, ENTITY_TYPE_PUBLIC_DASHBOARD, ENTITY_TYPE_DELETE_OPERATION, + ENTITY_TYPE_DRAFT_WORKSPACE, ]; const INTERNAL_OBJECTS = [ ENTITY_TYPE_SETTINGS, @@ -62,7 +64,8 @@ const INTERNAL_OBJECTS = [ ENTITY_TYPE_HISTORY, ENTITY_TYPE_ACTIVITY, ENTITY_TYPE_INTERNAL_FILE, - ENTITY_TYPE_WORK + ENTITY_TYPE_WORK, + ENTITY_TYPE_DRAFT_WORKSPACE, ]; const HISTORY_OBJECTS = [ENTITY_TYPE_WORK]; diff --git a/opencti-platform/opencti-graphql/src/types/user.d.ts b/opencti-platform/opencti-graphql/src/types/user.d.ts index cbbddf13e0746..51c071d7f43b8 100644 --- a/opencti-platform/opencti-graphql/src/types/user.d.ts +++ b/opencti-platform/opencti-graphql/src/types/user.d.ts @@ -49,6 +49,7 @@ interface AuthUser extends BasicStoreIdentifier { no_creators: boolean | null user_confidence_level: ConfidenceLevel | null personal_notifiers?: Array + workspace_context?: string | undefined } interface AuthContext { diff --git a/opencti-platform/opencti-graphql/src/utils/draftContext.ts b/opencti-platform/opencti-graphql/src/utils/draftContext.ts new file mode 100644 index 0000000000000..6ebc1f323fbee --- /dev/null +++ b/opencti-platform/opencti-graphql/src/utils/draftContext.ts @@ -0,0 +1,5 @@ +import type { AuthUser } from '../types/user'; + +export const inDraftContext = (user: AuthUser) => { + return user.workspace_context; +}; diff --git a/opencti-platform/opencti-graphql/tests/01-unit/utils/schema-attributes-test.ts b/opencti-platform/opencti-graphql/tests/01-unit/utils/schema-attributes-test.ts index 845ce9d0a325e..e1901fdc10212 100644 --- a/opencti-platform/opencti-graphql/tests/01-unit/utils/schema-attributes-test.ts +++ b/opencti-platform/opencti-graphql/tests/01-unit/utils/schema-attributes-test.ts @@ -4,17 +4,18 @@ import { schemaAttributesDefinition } from '../../../src/schema/schema-attribute describe('Schema utilities', () => { let mapping; it('getAttributeMappingFromPath gives access to internal attribute definitions', () => { - mapping = schemaAttributesDefinition.getAttributeMappingFromPath('name'); + mapping = schemaAttributesDefinition.getAttributeMappingFromPath('standard_id'); expect(mapping).toEqual({ - editDefault: false, + name: 'standard_id', + label: 'Standard id', + type: 'string', format: 'short', - isFilterable: true, - label: 'Name', - mandatoryType: 'external', + update: false, + mandatoryType: 'internal', + editDefault: false, multiple: false, - name: 'name', - type: 'string', upsert: false, + isFilterable: false, }); mapping = schemaAttributesDefinition.getAttributeMappingFromPath('group_confidence_level.overrides.entity_type'); expect(mapping).toEqual({ diff --git a/opencti-platform/opencti-graphql/tests/02-integration/02-resolvers/attribute-test.js b/opencti-platform/opencti-graphql/tests/02-integration/02-resolvers/attribute-test.js index 13c833cf5a62c..b7f2f0eb524f2 100644 --- a/opencti-platform/opencti-graphql/tests/02-integration/02-resolvers/attribute-test.js +++ b/opencti-platform/opencti-graphql/tests/02-integration/02-resolvers/attribute-test.js @@ -58,7 +58,7 @@ describe('Attribute resolver standard behavior', () => { variables: { elementType: ENTITY_TYPE_MIGRATION_STATUS } }); let attributes = queryResult.data.schemaAttributeNames.edges.map((edgeNode) => edgeNode.node); - expect(attributes.length).toEqual(12); + expect(attributes.length).toEqual(13); expect(attributes.map((node) => node.value).includes('entity_type')).toBeTruthy(); // Inherit attribute expect(attributes.map((node) => node.value).includes('platformVersion')).toBeTruthy(); // Direct attribute @@ -68,7 +68,7 @@ describe('Attribute resolver standard behavior', () => { variables: { elementType: ENTITY_TYPE_VULNERABILITY } }); attributes = queryResult.data.schemaAttributeNames.edges.map((edgeNode) => edgeNode.node); - expect(attributes.length).toEqual(32); + expect(attributes.length).toEqual(33); expect(attributes.map((node) => node.value).includes('x_opencti_stix_ids')).toBeTruthy(); // Inherit attribute expect(attributes.map((node) => node.value).includes('revoked')).toBeTruthy(); // Inherit attribute expect(attributes.map((node) => node.value).includes('description')).toBeTruthy(); // Direct attribute @@ -76,7 +76,7 @@ describe('Attribute resolver standard behavior', () => { // Stix Cyber Observable Object queryResult = await queryAsAdmin({ query: SCHEMA_ATTRIBUTES_QUERY, variables: { elementType: ENTITY_EMAIL_ADDR } }); attributes = queryResult.data.schemaAttributeNames.edges.map((edgeNode) => edgeNode.node); - expect(attributes.length).toEqual(16); + expect(attributes.length).toEqual(17); expect(attributes.map((node) => node.value).includes('x_opencti_description')).toBeTruthy(); // Inherit attribute expect(attributes.map((node) => node.value).includes('display_name')).toBeTruthy(); // Direct attribute @@ -87,7 +87,7 @@ describe('Attribute resolver standard behavior', () => { }); attributes = queryResult.data.schemaAttributeNames.edges.map((edgeNode) => edgeNode.node); - expect(attributes.length).toEqual(17); + expect(attributes.length).toEqual(18); expect(attributes.map((node) => node.value).includes('entity_type')).toBeTruthy(); // Inherit attribute expect(attributes.map((node) => node.value).includes('created')).toBeTruthy(); // Inherit attribute expect(attributes.map((node) => node.value).includes('phase_name')).toBeTruthy(); // Direct attribute @@ -98,7 +98,7 @@ describe('Attribute resolver standard behavior', () => { variables: { elementType: ENTITY_TYPE_IDENTITY_INDIVIDUAL } }); attributes = queryResult.data.schemaAttributeNames.edges.map((edgeNode) => edgeNode.node); - expect(attributes.length).toEqual(29); + expect(attributes.length).toEqual(30); expect(attributes.map((node) => node.value).includes('lang')).toBeTruthy(); // Inherit attribute expect(attributes.map((node) => node.value).includes('contact_information')).toBeTruthy(); // Inherit attribute expect(attributes.map((node) => node.value).includes('x_opencti_firstname')).toBeTruthy(); // Direct attribute @@ -109,7 +109,7 @@ describe('Attribute resolver standard behavior', () => { variables: { elementType: ENTITY_TYPE_LOCATION_POSITION } }); attributes = queryResult.data.schemaAttributeNames.edges.map((edgeNode) => edgeNode.node); - expect(attributes.length).toEqual(29); + expect(attributes.length).toEqual(30); expect(attributes.map((node) => node.value).includes('lang')).toBeTruthy(); // Inherit attribute expect(attributes.map((node) => node.value).includes('precision')).toBeTruthy(); // Inherit attribute expect(attributes.map((node) => node.value).includes('postal_code')).toBeTruthy(); // Direct attribute @@ -121,7 +121,7 @@ describe('Attribute resolver standard behavior', () => { variables: { elementType: RELATION_PARTICIPATE_TO } }); let attributes = queryResult.data.schemaAttributeNames.edges.map((edgeNode) => edgeNode.node); - expect(attributes.length).toEqual(16); + expect(attributes.length).toEqual(17); expect(attributes.map((node) => node.value).includes('standard_id')).toBeTruthy(); // Inherit attribute expect(attributes.map((node) => node.value).includes('i_inference_weight')).toBeTruthy(); // Direct attribute // Stix Ref Relationship @@ -130,7 +130,7 @@ describe('Attribute resolver standard behavior', () => { variables: { elementType: RELATION_OBJECT_LABEL } }); attributes = queryResult.data.schemaAttributeNames.edges.map((edgeNode) => edgeNode.node); - expect(attributes.length).toEqual(21); + expect(attributes.length).toEqual(22); expect(attributes.map((node) => node.value).includes('created')).toBeTruthy(); // Inherit attribute expect(attributes.map((node) => node.value).includes('confidence')).toBeTruthy(); // Direct attribute @@ -140,7 +140,7 @@ describe('Attribute resolver standard behavior', () => { variables: { elementType: RELATION_HOSTS } }); attributes = queryResult.data.schemaAttributeNames.edges.map((edgeNode) => edgeNode.node); - expect(attributes.length).toEqual(23); + expect(attributes.length).toEqual(24); expect(attributes.map((node) => node.value).includes('x_opencti_workflow_id')).toBeTruthy(); // Direct attribute // Stix Ref Relationship @@ -149,7 +149,7 @@ describe('Attribute resolver standard behavior', () => { variables: { elementType: RELATION_OPERATING_SYSTEM } }); attributes = queryResult.data.schemaAttributeNames.edges.map((edgeNode) => edgeNode.node); - expect(attributes.length).toEqual(21); + expect(attributes.length).toEqual(22); expect(attributes.map((node) => node.value).includes('standard_id')).toBeTruthy(); // Inherit attribute expect(attributes.map((node) => node.value).includes('revoked')).toBeTruthy(); // Direct attribute @@ -159,7 +159,7 @@ describe('Attribute resolver standard behavior', () => { variables: { elementType: STIX_SIGHTING_RELATIONSHIP } }); attributes = queryResult.data.schemaAttributeNames.edges.map((edgeNode) => edgeNode.node); - expect(attributes.length).toEqual(25); + expect(attributes.length).toEqual(26); expect(attributes.map((node) => node.value).includes('creator_id')).toBeTruthy(); // Inherit attribute expect(attributes.map((node) => node.value).includes('x_opencti_negative')).toBeTruthy(); // Direct attribute }); diff --git a/opencti-platform/opencti-graphql/tests/02-integration/02-resolvers/draftWorkspace-test.ts b/opencti-platform/opencti-graphql/tests/02-integration/02-resolvers/draftWorkspace-test.ts new file mode 100644 index 0000000000000..5daed3bae161f --- /dev/null +++ b/opencti-platform/opencti-graphql/tests/02-integration/02-resolvers/draftWorkspace-test.ts @@ -0,0 +1,132 @@ +import { expect, it, describe } from 'vitest'; +import gql from 'graphql-tag'; +import { queryAsAdmin } from '../../utils/testQuery'; + +const CREATE_DRAFT_WORKSPACE_QUERY = gql` + mutation DraftWorkspaceAdd($input: DraftWorkspaceAddInput!) { + draftWorkspaceAdd(input: $input) { + id + standard_id + name + } + } +`; + +const DELETE_DRAFT_WORKSPACE_QUERY = gql` + mutation DraftWorkspaceDelete($id: ID!) { + draftWorkspaceDelete(id: $id) + } +`; + +const READ_DRAFT_WORKSPACE_QUERY = gql` + query DraftWorkspace($id: String!) { + draftWorkspace(id: $id) { + id + name + } + } +`; +const LIST_DRAFT_WORKSPACES_QUERY = gql` + query DraftWorkspaces( + $first: Int + $after: ID + $orderBy: DraftWorkspacesOrdering + $orderMode: OrderingMode + $filters: FilterGroup + $search: String + ) { + draftWorkspaces( + first: $first + after: $after + orderBy: $orderBy + orderMode: $orderMode + filters: $filters + search: $search + ) { + edges { + node { + id + name + } + } + } + } +`; + +// const MODIFY_USER_DRAFT_WORKSPACE_QUERY = gql` +// mutation MeUserWorkspaceModify($input: [EditInput]!) { +// meEdit(input: $input) { +// id +// workspace_context +// } +// } +// `; +// +// const modifyUserWorkspace = async (draftId: string) => { +// const meUserModifyResult = await queryAsAdmin({ +// query: MODIFY_USER_DRAFT_WORKSPACE_QUERY, +// variables: { input: { key: 'workspace_context', value: draftId } }, +// }); +// expect(meUserModifyResult.data?.meEdit.workspace_context).toEqual(draftId); +// }; + +describe('Drafts workspace resolver testing', () => { + let addedDraftId = ''; + let addedDraftName = ''; + + it('should create a draft', async () => { + const draftName = 'testDraft'; + const createdDraft = await queryAsAdmin({ + query: CREATE_DRAFT_WORKSPACE_QUERY, + variables: { input: { name: draftName } }, + }); + + expect(createdDraft.data?.draftWorkspaceAdd).toBeDefined(); + expect(createdDraft.data?.draftWorkspaceAdd.name).toEqual(draftName); + addedDraftId = createdDraft.data?.draftWorkspaceAdd.id; + addedDraftName = createdDraft.data?.draftWorkspaceAdd.name; + }); + + it('should retrieve a draft by internal id', async () => { + const draftWorkspaceResult = await queryAsAdmin({ + query: READ_DRAFT_WORKSPACE_QUERY, + variables: { id: addedDraftId } + }); + + expect(draftWorkspaceResult.data?.draftWorkspace).toBeDefined(); + expect(draftWorkspaceResult.data?.draftWorkspace.name).toEqual(addedDraftName); + }); + + it('should list all drafts', async () => { + const result = await queryAsAdmin({ + query: LIST_DRAFT_WORKSPACES_QUERY, + variables: { first: 5 }, + }); + const drafts = result.data?.draftWorkspaces.edges; + expect(drafts).toBeDefined(); + const draft = drafts ? drafts[0].node : undefined; + + expect(drafts.length).toEqual(1); + expect(draft).toBeDefined(); + expect(draft.name).toEqual(addedDraftName); + }); + + it('create entity in draft context', async () => { + }); + + it('should delete a draft by its ID', async () => { + const deleteResult = await queryAsAdmin({ + query: DELETE_DRAFT_WORKSPACE_QUERY, + variables: { id: addedDraftId }, + }); + + const { data } = await queryAsAdmin({ + query: LIST_DRAFT_WORKSPACES_QUERY, + }); + const drafts = data?.draftWorkspaces.edges; + + expect(deleteResult.data?.draftWorkspaceDelete).toBeDefined(); + expect(deleteResult.data?.draftWorkspaceDelete).toEqual(addedDraftId); + expect(drafts.length).toEqual(0); + }); +});