OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.

 


Help: OASIS Mailing Lists Help | MarkMail Help

cti-stix message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]


Subject: Sighting + Observation in STIX


Alright folks, here’s the diagram and examples I promised. We should talk through these on the call Tuesday. If you get a chance, it might be good to read through the Sighting/Observation portion of Jane’s notes from the DC3 meeting so you have that extra context. You can find them here: https://www.oasis-open.org/apps/org/workgroup/cti/download.php/58009/OASIS-CTI-TC_BaltimoreF2F_April2016.pdf

Option 1: Consensus approach at DC3, with count/start/end only on Observation
Option 2: Alternative approach, with count/start/end both on Observation and Sighting
Option 3: Merge Observation and Sighting
Option 4: Count/start/end on Sighting, not on Observation

John


Attachment: Sightings and Observations.pptx
Description: Sightings and Observations.pptx



[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]