Re: [cti-users] Geotagging STIX Objects

[Allan Thomson <athomson@lookingglasscyber.com>]

Adding location to the STIX model is part of the goals for STIX 2.1 specification version. 

This would provide the capability that you suggest (and some).

allan

On 2/6/17, 6:30 AM, "cti-users@lists.oasis-open.org on behalf of Elihu.E.El@nga.mil" <cti-users@lists.oasis-open.org on behalf of Elihu.E.El@nga.mil> wrote:

    Classification: UNCLASSIFIED
    ======================================================
    
    Good Morning Team,
    
    I hope that the day has gotten off to a good start for each of you.  Geotags enable objects to be plotted on a map similar to this: http://images.teamsugar.com/files/users/2/22911/39_2007/maps_1.jpg
    
    The ideal geotag would include x, y, and z values as well as temporal data and object height.  We are working on a project to geotag and render STIX documents on a map.  We are the CyberShock group.  STIX objects such as Observable Instances, Exploit Targets, Threat Actors, etc. can all be geotagged.  The MVP and documentation is on the high-side.  We need your feedback and suggestions.  Would you kindly share your contact information with Joshua so that we may ensure a prompt followup:
    Joshua Jackson
    Senior Systems Engineer
    Mainstreaming Capabilities Division (TAIM)
    Enterprise Innovation Office (TAI)
    National Geospatial-Intelligence Agency (NGA)
    Joshua.M.Jackson@NGA.mil
    Joshua.M.Jackson@NGA.IC.gov
    Open: 571-557-9849
    Secure: 578-9849
    
    Warm Regards,
    Eli
    
    
    Elihu Eli El, Scrum, Safe Agile, ITIL
    Systems Engineer
    NGA XFI
    Unclassified: 571-558-4351
    Secure: 579-4351
    Elihu.E.El@nga.mil 
    GSM: https://www.geoint.community/
    ======================================================
    Classification: UNCLASSIFIED