- Campaign targets a Victim (organization or vertical)
- If ThreatActor and ThreatGroup are not identical, Campaigns may be attributed to the latter
- Campaign uses a TTP
Kyle Maxwell [kmaxwell@verisign.com]
Sent: Tuesday, May 10, 2016 19:20
To: cti-stix@lists.oasis-open.org
Subject: [cti-stix] Campaign Mini-Group Working Session
For our discussion tomorrow on campaigns, here is a diagram I put together for Campaign Relationships in STIX 2.0. This should help us better identify and understand where things are missing.
[cti-stix] Campaign Mini-Group Working Session
Scheduled: May 11, 2016, 13:00 to 14:00
Location: Online Meeting
Invitees: Jordan, Bret, cti-stix@lists.oasis-open.org
All,
The campaign mini-group wants to have a discussion to finalize their proposal to the broader SC. No need to join unless you want to influence this early stage development on the campaign TLO.
John
.........................................................................................................................................
Join online meeting <https://meet.mitre.org/jwunder/HRTBLWS0>
https://meet.mitre.org/jwunder/HRTBLWS0
Join by Phone
+1 (781) 271-2020
+1 (703) 983-2020
Find a local number <https://dialin.mitre.org>
Conference ID: 7622872
Forgot your dial-in PIN? <https://dialin.mitre.org> | First online meeting? <http://r.office.microsoft.com/r/rlidOC10?clid=1033&p1=4&p2=1041&pc=oc&ver=4&subver=0&bld=7185&bldver=0>
.........................................................................................................................................