Re: [cti-cybox] CybOX 3.0: File Object Refactoring

[Trey Darley <trey@soltra.com>]

On 17.12.2015 13:43:14, Thompson, Dean wrote:
> 
> Does this depend on whether you want to adopt the UNIX concept where
> everything is actually a file on the system. For example “UNIX” sees
> files as directories, files, pipes, sockets, links, devices and so
> forth. Do we need to have a category present (potentially a enum
> which helps identify the file object we are referring to) or is that
> just over-kill ?
> 

Hey, Dean -

The ability to capture this additional metadata is useful but as it
tends to be platform-specific, I think we'd handle this via extensions
to the file object.

-- 
Cheers,
Trey
--
Trey Darley
Senior Security Engineer
4DAA 0A88 34BC 27C9 FD2B  A97E D3C6 5C74 0FB7 E430
Soltra | An FS-ISAC & DTCC Company
www.soltra.com
--
"It is more complicated than you think." --RFC 1925

Attachment: signature.asc
Description: PGP signature