IOC Grouping
Related IOCs, including different hashes of the same file, are now visually grouped on the website and linked through a new entity_ref field in the API.
IOC grouping is now reflected in the API version 2.10.0 through a new entity_ref field. IOCs with the same entity_ref belong together. For example, different hashes identifying the same file.
On the website, a vertical bar now joins related IOCs, making these groups easier to recognise.
This change prepares the API for an upcoming OpenCTI connector, allowing related IOCs to be grouped together in STIX.
The existing MISP and STIX exports are unaffected. They are generated from the raw data, which already includes grouping information.
You can safely ignore the new entity_ref field if you do not need it.