Re: [cti-users] STIX GEOTAG Properties

Elihu:

The Cyber Threat Intelligence Technical Committee (CTI TC) is currently finalizing the full Committee Specification for STIX 2.0. It will update that data model that you attached just a little bit. We anticipate that process to be complete July 7th, a week from today.

With respect to your question, we found that properties related to Location are so important that we have elevated that concept to a top level object. We are currently developing a new Location object. It will probably be included in the STIX 2.1 release. We recognize the importance of lat/long and date-time as you point out. We would welcome your participation in the dialogue on the definition of this Location object.

If your organization is a member of OASIS, please join the CTI TC and participate in our working meetings. If now, please join so you can help us design this data object in a manner that supports your needs.

Jane Ginn, MSIA, MRP
Cyber Threat Intelligence Network (CTIN)
+1 (928) 399-0509

On Wed, Jun 21, 2017 at 7:32 AM, <Elihu.E.El@nga.mil> wrote:

Classification: UNCLASSIFIED
======================================================

Hello,

I hope that the day is going well for each of you. Check this out this architecture: http://making-security-measurable.1364806.n2.nabble.com/attachment/7586671/0/STIX_Diagram_Terry_v2.0_Proposal.png

Quick question: What is the process to request additional properties of a GEOTAG {lat/long, date-time} be added to the ThreatActor object?

If you have any questions, do not hesitate to call me.

Warm Regards,
Eli

Elihu Eli El, Scrum, Safe Agile, ITIL
Systems Engineer
NGA DO-G
Unclassified: 571-558-4351
Secure: 579-4351
Elihu.E.El@nga.mil
GSM: https://www.geoint.community/

======================================================
Classification: UNCLASSIFIED

This publicly archived list provides a forum for asking questions,

offering answers, and discussing topics of interest on STIX,

TAXII, and CybOX. Users and developers of solutions that leverage

STIX, TAXII and CybOX are invited to participate.

In order to verify user consent to OASIS mailing list guidelines

and to minimize spam in the list archive, subscription is required

before posting.

Subscribe: cti-users-subscribe@lists.oasis-open.org

Unsubscribe: cti-users-unsubscribe@lists.oasis-open.org

Post: cti-users@lists.oasis-open.org

List help: cti-users-help@lists.oasis-open.org

List archive: http://lists.oasis-open.org/archives/cti-users/

List Guidelines: http://www.oasis-open.org/maillists/guidelines.php

CTI Technical Committee: https://www.oasis-open.org/committees/cti/

Join OASIS: http://www.oasis-open.org/join/

cti-users message