create_relation
Link two entities in a detection knowledge graph with a typed relation, including reasoning and confidence, to model connections between threats, techniques, and detections.
Instructions
Create a relation between two entities in the knowledge graph
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| reasoning | No | Why this relation exists | |
| source_id | Yes | Source entity ID | |
| target_id | Yes | Target entity ID | |
| confidence | No | Confidence score 0-1 (default: 1.0) | |
| description | No | Description of the relation | |
| relation_type | Yes | Relation type: uses, detects, mitigates, targets, exploits, etc. |