[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]
Subject: Re: [cti-stix] Moving forward with first_seen and last_seen
So if we zero out all the 1 -> 2 with the 4 -> 2 people, that leaves us with "2" as the preferred option?
Bret
From: Allan Thomson <athomson@lookingglasscyber.com>
Sent: Wednesday, November 30, 2016 2:56:11 PM To: Bret Jordan (CS); Mr. Stefan Hagen; cti-stix@lists.oasis-open.org Subject: Re: [cti-stix] Moving forward with first_seen and last_seen 4 -> 2 -> 3 -> 1 regards allan From:
"cti-stix@lists.oasis-open.org" <cti-stix@lists.oasis-open.org> on behalf of "Bret Jordan (CS)" <Bret_Jordan@symantec.com> My preference would be 1, 2. IMHO 3 is bad and 4 is just confusing. Bret From: cti-stix@lists.oasis-open.org <cti-stix@lists.oasis-open.org> on behalf of Mr. Stefan Hagen
<stefan@hagen.link> My preference chain is (like Sarah's): 1, 4, 2, 3 of: |
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]