Re: [cti-cybox] A way of describing credential dumps

[John-Mark Gurney <jmg@newcontext.com>]

Jason Keirstead wrote this message on Fri, Jun 24, 2016 at 09:18 -0300:
> Agree, we need unification across this potential object and it should
> probably use the "hashes" type used in other Cybox objects like "File".

We'd probably need to expand the list to support these then, as most
passwords should be salted, so even though there is the SHA-256 way
of hashing passwords (available on Linux and *BSDs), it uses a VERY
different scheme than a simple hash, and has many iterations, etc.

-- 
John-Mark