[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]
Subject: Re: [cti-stix] TA Social Media Account
There are indeed two different scenario’s;
- the linkedin account, when observed actively, is an indication of some intelligence (ttps, actors, campaigns, bla)
- the linkedin account is part of the analysis narrative of an actor, a description of his (potential) identity.
The first case would be an indicator, the second case would be part of some sort of identity construct. They can exist in parallel.
J-
From: <cti-stix@lists.oasis-open.org> on behalf of Jerome Athias <athiasjerome@gmail.com>
Date: Thursday, July 28, 2016 at 7:53 AM To: Jason Keirstead <Jason.Keirstead@ca.ibm.com> Cc: "cti-stix@lists.oasis-open.org" <cti-stix@lists.oasis-open.org> Subject: Re: [cti-stix] TA Social Media Account Hi,
thanks for the answer.
Probably something for 2.1:
Could we want/need a -Profile Object- that would be some sort of (Digital) Identity? (bad or good)
(that could effectively be linked to a User_Account of a -Service- (other object needed?))
Best regards
On Tue, Jul 26, 2016 at 3:44 PM, Jason Keirstead
<Jason.Keirstead@ca.ibm.com> wrote:
|
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]