From 02a334914764f653806e9fe3ce370d48af803b3f Mon Sep 17 00:00:00 2001
From: Andreas Misje <amisje@gmail.com>
Date: Thu, 1 Feb 2024 22:31:44 +0100
Subject: [PATCH] Adapt grapqhl for new objectLabel and killChainPhases syntax
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

objectLabel, killChainPhases and objectMarking are no longer of the form
edges { node { … } }. See
https://github.com/OpenCTI-Platform/client-python/commit/16c8fe1429fe7b5baeb586146aabb774368bb174
for details.
---
 custom-opencti.py | 12 ++----------
 1 file changed, 2 insertions(+), 10 deletions(-)

diff --git a/custom-opencti.py b/custom-opencti.py
index 7b603b4..fb1f629 100755
--- a/custom-opencti.py
+++ b/custom-opencti.py
@@ -366,11 +366,7 @@ def query_opencti(alert, url, token):
             '''
             fragment Labels on StixCoreObject {
               objectLabel {
-                edges {
-                  node {
-                    value
-                  }
-                }
+                value
               }
             }
 
@@ -419,11 +415,7 @@ def query_opencti(alert, url, token):
               pattern
               ...Labels
               killChainPhases {
-                edges {
-                  node {
-                    kill_chain_name
-                  }
-                }
+                kill_chain_name
               }
             }