From 3762a19047e0810208754c116bb1d249149cd064 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Alex=20S=C3=A1nchez?= Date: Tue, 8 Sep 2026 13:38:10 -0600 Subject: [PATCH] fix(threat-intel): drop empty alert field values from IOC correlation --- frontend/src/features/threat-intel/hooks/use-alert-iocs.ts | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/frontend/src/features/threat-intel/hooks/use-alert-iocs.ts b/frontend/src/features/threat-intel/hooks/use-alert-iocs.ts index 4d7c39519..c2fc9338d 100644 --- a/frontend/src/features/threat-intel/hooks/use-alert-iocs.ts +++ b/frontend/src/features/threat-intel/hooks/use-alert-iocs.ts @@ -36,7 +36,9 @@ export function useAlertIocs() { })), ) const flat = perField.flatMap(({ twAttr, values }) => - values.map((v) => ({ twAttr, value: v.value, count: v.count })), + values + .filter((v) => v.value) + .map((v) => ({ twAttr, value: v.value, count: v.count })), ) flat.sort((a, b) => b.count - a.count) const byAttr: Record = {}