Re: [cti] CybOX Object Extensions

[Trey Darley <trey@soltra.com>]

On 11.02.2016 12:47:50, Mark Davidson wrote:
> 
> I think having overlapping properties is probably OK. For instance,
> would I rather parse a single EXT2/3 extension than an EXT2
> extension and an EXTGeneric extension, even if that meant EXT2/EXT3
> had duplicate structures. If the necessary properties for a given
> thing are spread across multiple extensions that makes it harder to
> parse IMO.
> 

+1

-- 
Cheers,
Trey
--
Trey Darley
Senior Security Engineer
4DAA 0A88 34BC 27C9 FD2B  A97E D3C6 5C74 0FB7 E430
Soltra | An FS-ISAC & DTCC Company
www.soltra.com
--
"No matter how hard you try, you can't make a baby in much less than 9
months. Trying to speed this up *might* make it slower, but it won't
make it happen any quicker." --RFC 1925

Attachment: signature.asc
Description: PGP signature