trying to understand the "Sighting" object

["Hare, Forrest B." <Forrest.B.Hare@saic.com>]

I apologize if this is an uninformed question, but why is “sighting” an SRO and not just a new instance of an “indicator” SDO?

 

If it is truly an SRO, what two SDOs does it link (which I understand an SRO to do)?  The example provided in the Walk-through at https://oasis-open.github.io/cti-documentation/stix/walkthrough

is a bit confusing to me because it represents “sighting” as a node and “sighting of” as an edge.  This suggests there are two different objects, but the Object List at: https://oasis-open.github.io/cti-documentation/stix/intro

 

only lists “sighting” under the SRO section.  “Relationship” is also listed there, but the graphic on the Walk Through page does not depict a “relationship” object, just the “indicates” edge.  Hopefully, you can see where I am getting confused by trying to reconcile the diagram and terminology.

 

Thank you,

Forrest

 

 

Forrest B. Hare, PhD

Solutions Architect

Cyberspace Operations
571-419-0084 | forrest.b.hare@SAIC.com

saic.com |@SAICinc

Redefining Ingenuity ^™

 

For Cyber Support Requests, please go to:

https://saicito.service-now.com/kpc?id=kpc_cat_item&sys_id=3b4a1343139f7600f6f4b53a6144b01b

 

---

This communication (including any attachments) may contain information that is proprietary, confidential or exempt from disclosure. If you are not the intended recipient, please note that further dissemination, distribution, use or copying of this communication is strictly prohibited. Anyone who received this message in error should notify the sender immediately by telephone or by return email and delete it from his or her computer.