Is a file-system-properties-type ever used anywhere other than as the value of file_system_properties? File-object is the only place it is used in the Host-based
Objects document. Is there a reason that it was ever made into a nested type in the first place?
I agree that the parent_directory_ref, file_name, file_name_enc, etc. properties should be flattened back into file-object.
From: cti-cybox@lists.oasis-open.org [mailto:cti-cybox@lists.oasis-open.org]
On Behalf Of Jordan, Bret
Sent: Tuesday, August 23, 2016 3:39 PM
To: Jason Keirstead <Jason.Keirstead@ca.ibm.com>
Cc: cti-cybox@lists.oasis-open.org
Subject: Re: [cti-cybox] File Object
Yes
Sent from my Commodore 64
Are you talking specifically about the file_system_properties construct?
-
Jason Keirstead
STSM, Product Architect, Security Intelligence, IBM Security Systems
www.ibm.com/security |
www.securityintelligence.com
Without data, all you are is just another person with an opinion - Unknown
<graycol.gif>"Jordan, Bret" ---08/23/2016 04:31:05 PM---Right now in the File Object some of the properties are artificially nested. These properties deal
From: "Jordan, Bret" <bret.jordan@bluecoat.com>
To: "cti-cybox@lists.oasis-open.org" <cti-cybox@lists.oasis-open.org>
Date: 08/23/2016 04:31 PM
Subject: [cti-cybox] File Object
Sent by: <cti-cybox@lists.oasis-open.org>
Right now in the File Object some of the properties are artificially nested. These properties deal with the file system aspects of a file. The argument is that not all files have these and thus it should be nested.
This IMHO, violates one of our core objectives of flatter is better than nested. I feel it would be better to have these fields be flattened and just made optional.
This is something we do throughout STIX and is part of our holistic design principles.
Bret
Sent from my Commodore 64
---------------------------------------------------------------------
To unsubscribe from this mail list, you must leave the OASIS TC that
generates this mail. Follow this link to all your TCs in OASIS at:
https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php
|