Namespace Management

Hi all,

I have been studying STIX management and am a little confused on one aspect when it comes to sharing of STIX. What are the requirements/best practices when it comes to managing Observables and their Namespaces? As you can collect multiple copies of an Observable with different namespaces/id's, is it acceptable practice just to consolidate them all under one instance and namespace and share that? Or must the namespace of each object be maintained and shared even if it means many copies?

Thanks!

cti-comment message