When I apply the object type filters to the graph, the graph reflects the change. But when I download the bundle, all the objects (i.e. no filter applied) exist inside it.
I think there is a bug here.
You’re correct, I’ll raise a ticket for this.
In the meantime you can do this via the API using the bundle endpoint with types filter applied
curl -X 'GET' \
'https://api.ctibutler.com/v1/attack-enterprise/objects/S0066/bundle/?types=attack-pattern,malware,tool' \
-H 'accept: application/json' \
-H 'API-KEY: HIDDEN'
response_1763545312954.json (14.8 KB)