Re: [cti] bundle proposed change to STIX 2.0 RC3

["Wunder, John A." <jwunder@mitre.org>]

Thanks, Allan!

 

All, let’s see if we can come to some agreement on this topic on the list…as with first/last seen, please respond to say whether you agree w/ this change, disagree, or agree but with some changes. On the working call I think we had near-unanimous agreement (if not actually unanimous) that we should make this change.

 

Personally, I’m in favor of this.

 

John

 

From: "cti@lists.oasis-open.org" <cti@lists.oasis-open.org> on behalf of Allan Thomson <athomson@lookingglasscyber.com>
Date: Thursday, December 1, 2016 at 9:53 AM
To: "cti@lists.oasis-open.org" <cti@lists.oasis-open.org>
Subject: [cti] bundle proposed change to STIX 2.0 RC3

 

All –

 

As agreed on the last working call I was asked to send the proposed text changes for the bundle proposal. See the attached deck for intro.

 

Proposal:               Change bundle to a single flat list of objects instead of a categorized list of object types.

Rationale:             To enable export and import via streaming mechanisms and easier implementation of STIX.

Notes:                    No loss of functionality in this proposal.

 

I made changes to Part 1 and Part 2 (not attached). If anyone wants to see Part 2 changes (primarily 1 example change) let me know and I can send the doc.

 

Allan