cti-comment message

Subject: How to map an security alert or security incident with STIX 2.1 Object

From: rohan thakur <thakur577@gmail.com>
To: cti-comment@lists.oasis-open.org
Date: Thu, 30 Dec 2021 12:27:37 +0530

Hello CTI TC Members,

I am working on a SOAR(Security Orchestration Automation and Response) project and I want to map my SOAR alerts/incidents to STIX 2.1 Objects.

Please suggest to which STIX 2.1 Objects I can map my alerts/incident/case entities directly. I did not find any direct objects to which I can map these entities.

Thanks & Regards,

Rohan Thakur

M: 9646296621