Re: [cti] Re: [EXT] Re: [cti] type changing from "object" to "array" for cyber observable objects

[Trey Darley <trey@newcontext.com>]

On 03.10.2017 19:51:18, Sarah Kelley wrote:
> The only thing I would comment on is the ability to revoke an
> observable.
>

Hey, Sarah -

Cf. STIX 2.0, Part 2, §2.8.1 - you *can* revoke an Observed Data SDO.
Observed Data has all of the standard STIX 2 versioning capabilities
that the other STIX SDOs do.

-- 
Cheers,
Trey
++--------------------------------------------------------------------------++
Director of Standards Development, New Context
gpg fingerprint: 3918 9D7E 50F5 088F 823F  018A 831A 270A 6C4F C338
++--------------------------------------------------------------------------++
--
"It is more complicated than you think." --RFC 1925

Attachment: signature.asc
Description: Digital signature