Re: [cti] concerns about 'artifact' object's payload_bin property size limit(<=10MB) of STIX 2.0

["Cheolho Lee" <chlee@nsr.re.kr>]

Hi, Trey.

I agree JSON parser's performance issue you mentioned. 

In the problem of a large size file over 10MB, my next question is on the use of multiple artifact objects with their multiple separated archived files for a large file.

archived files are also represented as archive extensions of file objects which are separately archived from a large file and they are linked to artifact objects which has payload_bin < 10MB.

I think this use case is fit for STIX 2.0.

How about this?

Cheers,

Cheolho Lee.