Re: [cti-cybox] CybOX Objects/Relationships

[Terry MacDonald <terry.macdonald@cosive.com>]

+1. I'm still wondering if we need CybOX only relationships (not STIX relationships!) to show when the thing we are attempting to describe and document are contained within other, or sent together with each other. I'm thinking email with PDF doc that contains an embedded executable. Or a compressed zip that has two malicious dropper files in it. Both of these things would result in one STIX observable. But are made up of multiple related things sent at that one time...

Cheers
Terry MacDonald

On 9/04/2016 09:48, "John-Mark Gurney" <jmg@newcontext.com> wrote:

Jordan, Bret wrote this message on Fri, Apr 08, 2016 at 19:41 +0000:
> Great write up Ivan..  Based on this information and the previous discussions around this topic.  My vote would be for:
>
> "CybOX is just a common set of data models that are used by higher level languages.."

+1

--
John-Mark

---------------------------------------------------------------------
To unsubscribe from this mail list, you must leave the OASIS TC that
generates this mail.  Follow this link to all your TCs in OASIS at:
https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php