Re: [cti-users] Correct use of "resolves-to" SROs

["Trey Darley" <trey@kingfisherops.com>]

Thatâs an interesting question you pose, Matthew. Could you please elaborate on whatâs the real-world scenario youâre trying to represent within the STIX data model?

Cheers,

Trey

On Fri, Apr 14, 2023, at 19:54, Matthew Conway wrote:

Are there any soft constraints in STIX on what a "resolves-to" relationship should be used for? Representing an "A" record makes total sense, where a Domain Name resolves-to an IPv4 Address.

I'm wondering whether it's more correct to represent a relationship between a Domain Name and its nameservers, or even mail servers, with a related-to or resolves-to relationship.

Matthew