[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]
Subject: Re: [cti-stix] Moving forward with first_seen and last_seen
Yeah I think that makes sense. Thanks everyone for weighing in. What I would like to do now is suggest that we go ahead and make the change per #2. I know we didn’t have total agreement but I agree w/ Bret and Allan that it seems like the consensus
path forward. Can everyone live ith this, even if you don’t love it? If for any reason you feel we need to get more input or you strongly oppose it please speak up and we can (if you have an option not mentioned) discuss it or (if you think we should get
broader TC input) open a ballot. Otherwise the editors will go ahead and make this change in the specifications. John From:
"cti-stix@lists.oasis-open.org" <cti-stix@lists.oasis-open.org> on behalf of Allan Thomson <athomson@lookingglasscyber.com> I think so. Also I would suggest to make it clear that for folks that voted on 1 that the field will be optional so if you don’t care to support it in your products/implementations then you don’t have
to. allan From:
"Bret Jordan (CS)" <Bret_Jordan@symantec.com> So if we zero out all the 1 -> 2 with the 4 -> 2 people, that leaves us with "2" as the preferred option? Bret From: Allan Thomson <athomson@lookingglasscyber.com> 4 -> 2 -> 3 -> 1 regards allan From:
"cti-stix@lists.oasis-open.org" <cti-stix@lists.oasis-open.org> on behalf of "Bret Jordan (CS)" <Bret_Jordan@symantec.com> My preference would be 1, 2. IMHO 3 is bad and 4 is just confusing. Bret From: cti-stix@lists.oasis-open.org <cti-stix@lists.oasis-open.org> on behalf of Mr. Stefan Hagen
<stefan@hagen.link> My preference chain is (like Sarah's): 1, 4, 2, 3 of: |
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]