20 March Working Call Agenda

["Wunder, John A." <jwunder@mitre.org>]

Hey all,

 

Sorry for the delay in getting this out, but for this week’s working call we’re going to take a break from the process discussion and focus on a few technical topics across STIX and TAXII. The STIX topics will be:

 

• Vocabulary used for the Grouping object’s label property. If you recall, grouping will be used to represent some basic incident/event data. Right now the vocabulary only has a single item. There are also a few comments to go through. https://docs.google.com/document/d/15qD9KBQcVcY4FlG9n_VGhqacaeiLlNcQ7zVEjc8I3b4/edit#heading=h.o0nri5o0isxz
• Cleanup of the Assertion type. The assertion type lets you give categories or threat scores for indicators and observed data (and potentially other things). Assertion was in pretty good shape but still has some cleanup to go. https://docs.google.com/document/d/15qD9KBQcVcY4FlG9n_VGhqacaeiLlNcQ7zVEjc8I3b4/edit#heading=h.qxvz3vox3ksj

 

Bret will send out the topics for TAXII. Expect roughly a 50/50 split between STIX and TAXII.

 

John