[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]
Subject: STIX 1.1.1 revocation
Iâm still working with STIX 1.1.1 for the time being and had a question on how to do revocation. Assuming that you don't have the ID for the original Indicator in a STIX document. How do you properly construct a Revoke action in STIX 1.1.1 for an Indicator
that was previously reported? Does anyone have an example?
Thanks much,
KL
Kathy Lee Simunich
Modeling & Analytics Group
Strategic Security Sciences Division
Argonne National Laboratory
|
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]