Re: [cti-stix] STIX timestamps and ISO 8601:2000

[Trey Darley <trey@soltra.com>]

On 23.11.2015 09:24:18, Jason Keirstead wrote:
> 
> * I would like to see this declared though - what is the actual (not
> theoretical) use case for nanosecond accuracy of an observation or a
> production?
> 

Hey, Jason -

One might envisage the need to characterize a malware dropper behavior
with nanosecond precision. (If not today, then it's completely
feasible in future.) Given how cheap the extra bits are, I'm in favor
of standardizing on this level of precision as a sort of
future-proofing. 

-- 
Cheers,
Trey
--
Trey Darley
Senior Security Engineer
4DAA 0A88 34BC 27C9 FD2B  A97E D3C6 5C74 0FB7 E430
Soltra | An FS-ISAC & DTCC Company
www.soltra.com
--
"For all resources, whatever it is, you need more." --RFC 1925

Attachment: signature.asc
Description: PGP signature