[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]
Subject: Re: [cti] Text around bundle
Good point: A Bundle is a collection of arbitrary STIX Objects grouped together in a single container. Objects contained with a Bundle
SHOULD NOT be assumed to be related solely by virtue of being in the same Bundle. Producers who wish to indicate that objects are related are encouraged to use SROs or the Report object within the Bundle to do so. From:
"Bret Jordan (CS)" <Bret_Jordan@symantec.com> A bundle can contain a report and all of the objects that make up a report. So lets be careful with that last sentence. Bret From: cti@lists.oasis-open.org <cti@lists.oasis-open.org> on behalf of Piazza, Rich <rpiazza@mitre.org> Here is some proposed text which use ideas from all suggestions: From:
<cti@lists.oasis-open.org> on behalf of John Wunder <jwunder@mitre.org> Hm, we could add a sentence like: “Producers who wish to indicate that objects are related should use SROs and the Report object to do so.” From:
<cti@lists.oasis-open.org> on behalf of Patrick Maroney <oasis.individual@gmail.com> I think Allan's points are good. Can we add language in the Bundle descriptions that shows how one would make the assertion that objects in a bundle ARE related?
|
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]