[cti-users] New to list

[Andras Iklody <andras.iklody@circl.lu>]

Hello Paul and Bret,

I wouldn't call STIX 1.x throw away code just yet.

Instead of doing what Bret suggested, I'd first have a look at the
eco-system of tools that you interact with. STIX 2.0's adoption is still
very low compared to STIX 1.x so blindly advising someone to just go for
STIX 2.0 can be pretty counter-productive and it could leave you with an
implementation that nobody / nothing in your community can actually
exchange information with.

Currently STIX 2.0 isn't even published officially yet, with most
organisations building tools (based on my experience from
organisations/developers with whom I interact with at least) still
investigating whether to even take the plunge / trying to work on
removing blockers within the STIX 2.x standard before they can even get
started.

So depending on the time-frame of when you want to have something up and
running, my advice is ask your partners what standards / versions they
support, check your tools that you want to hook-up what they support (or
if you feel up for it, ask the organisations behind them on whether /
when they want to support STIX 2.x) before deciding.

All just my personal opinion of course, I hope it helps!

Best regards,
Andras


> Welcome Paul.  Yes, this is the place to ask questions.  Please note that STIX and TAXII 2.0 are out now. So if you are looking to build something, you will want to look at the new stuff so as not to create throw away code.
> 
> Bret 
> 
> Sent from my Commodore 64 
> 
> PGP Fingerprint: 63B4 FC53 680A 6B7D 1447  F2C0 74F8 ACAE 7415 0050