Re: [cti-cybox] CybOX Object Selection

[Paul Patrick <ppatrick@isightpartners.com>]

I would agree with Ivan on this

From: <cti-cybox@lists.oasis-open.org> on behalf of Ivan Kirillov <ikirillov@mitre.org>
Date: Tuesday, February 23, 2016 at 2:04 PM
To: "Piazza, Rich" <rpiazza@mitre.org>
Cc: "cti-cybox@lists.oasis-open.org" <cti-cybox@lists.oasis-open.org>
Subject: Re: [cti-cybox] CybOX Object Selection

That’s a good question. I would say yes, primarily because the Custom Object is the “path of least resistance” when it comes to creating custom objects, since users do not have to define any specification or corresponding JSON schema and can just share key/value pairs in a standard Object.

-Ivan

From: Rich Piazza <rpiazza@mitre.org>
Date: Tuesday, February 23, 2016 at 11:54 AM
To: Ivan Kirillov <ikirillov@mitre.org>
Cc: "cti-cybox@lists.oasis-open.org" <cti-cybox@lists.oasis-open.org>
Subject: RE: [cti-cybox] CybOX Object Selection

·         Custom

o    Comments: this is a very basic object (just key/value pairs) and we’ll likely still need the ability to define custom Objects in this fashion, so I would err on including it.

Now that the inclusion of object not in the standard will be sanctioned in general – is this still needed?