[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]
Subject: Re: [cti-stix] RE: Possible items for STIX 2.1
(1) [+1] on an Event construct. (2) [+1] on an Incident Construct that can support a linked set [List] of Relationships to Event Objects (in the STIX Document or Externally Referenced by Event ID). From: <cti-stix@lists.oasis-open.org> on behalf of Alexandre Dulaunoy <Alexandre.Dulaunoy@circl.lu> On 08/11/16 18:01, Katz, Gary CTR DC3\DCCI wrote:
Indeed. Just an idea. Why not simplifying the format around Event? To have a core format with the minimal STIX objects specified. FYI, we recently made two I-Ds for documenting the format used in MISP: We tried to keep the format as simple as possible and extension will be documented later. Just some thoughts. Cheers. -- Alexandre Dulaunoy CIRCL - Computer Incident Response Center Luxembourg 41, avenue de la gare L-1611 Luxembourg info@circl.lu - www.circl.lu --------------------------------------------------------------------- To unsubscribe from this mail list, you must leave the OASIS TC that generates this mail. Follow this link to all your TCs in OASIS at: |
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]