Re: [cti-stix] Observation Rename

["Kirillov, Ivan A." <ikirillov@mitre.org>]

+1 for CybOX Facts – I think it’s very clear and to the point. Also, it permits for the expression of cyber data that may be factual but not observed, such as future DGA-generated domains.

Regards,
Ivan

On 7/6/16, 8:05 AM, "Trey Darley" <cti-stix@lists.oasis-open.org on behalf of trey@kingfisherops.com> wrote:

>On 05.07.2016 17:41:12, Jordan, Bret wrote:
>> 
>> One option we talked about was just renaming one or both of the
>> objects.... What if we renamed "Observation" to "Observation Data"
>> or something similar? Would it then be more clear that this object
>> just contains data or facts?
>> 
>> Other options, since this object can only support CybOX is we call
>> it "CybOX Data". The term "Cyber Data" was shot down on the call.
>> 
>
>Occam's Razor: let's change Observation to CybOX Facts. Simple,
>obvious, straight to the point.
>
>-- 
>Cheers,
>Trey
>++--------------------------------------------------------------------------++
>Kingfisher Operations, sprl
>gpg fingerprint: 85F3 5F54 4A2A B4CD 33C4  5B9B B30D DD6E 62C8 6C1D
>++--------------------------------------------------------------------------++
>--
>"It is always possible to add another level of indirection." --RFC 1925