Hi Ivan - does Network Socket intersect with Network Connection? It seems like the current Network Connection object as defined can do most anything you would want to do with a socket, since you can define connection state as LISTEN
I suppose to use it for that we would need to make the "source" fields optional so they could be left empty (?)
I guess my question is - what are the use cases for Network Socket and who is pushing for it.
I will try to take a stab at User Account...
-
Jason Keirstead
STSM, Product Architect, Security Intelligence, IBM Security Systems
www.ibm.com/security | www.securityintelligence.com
Without data, all you are is just another person with an opinion - Unknown 
"Kirillov, Ivan A." ---06/02/2016 06:39:23 PM---All, As we discussed on today’s call, there are a number of Objects (see below) that are in danger o
From: "Kirillov, Ivan A." <ikirillov@mitre.org>
To: "cti-cybox@lists.oasis-open.org" <cti-cybox@lists.oasis-open.org>
Date: 06/02/2016 06:39 PM
Subject: [cti-cybox] CybOX "Adopt an Object"
Sent by: <cti-cybox@lists.oasis-open.org>
All,
As we discussed on today’s call, there are a number of Objects (see below) that are in danger of not making the July MVP release because we’ve yet to develop their data models and are unlikely to do so in time for this release. Anyhow, if anyone has a strong need for one (or more) of these Objects, we encourage you to “adopt” these Objects and lead the work on creating its data model - Trey and I would be happy to get you started!
The Objects are the following:
- · Device
· Operating System
· Product
· User Account
· Network Share
· Network Socket
Note that if these Objects do not make the cut for July, they’ll almost certainly be included in the follow up release during the winter timeframe.
Regards,
Ivan