Notes and actions from March 28 @11am Working Call

["Wunder, John A." <jwunder@mitre.org>]

Topics: STIX 2.0 Errata, Intel Note finalization, Confidence scales

 

• STIX 2.0 Errata
  • Strong consensus: comments 1, 2, 3, and 4 should be accepted
  • Strong consensus: comments 11 and 12 should be rejected, with an additional clarification added to the type to clear up that it's not a STIX extension
  • The other comments were all about examples and were not discussed
• Intel note finalization
  • Strong consensus: identity should be an identifier
    • Some support from Gary, some mixed from JMG, no other objections
  • Other text will be reviewed after the call
  • Strong consensus: intel note is ready to be done
• Confidence scales
  • No decision
    • Not a lot of discussion
    • Gary will review with his analysts

 

Action Items:

-          John will send the public review comments to the list to verify our agreement and get agreement on examples

-          Gary will send the editors a threat actor example

-          Gary will review the confidence scale image (attached here) with his analysts

-          The Intel Note domain object will be brought up on the next TC call to approve as a consensus item

 

John