Re: [Non-DoD Source] Re: [cti] RE: [EXT] Re: [cti] Possible Changes to Observed Data

[Trey Darley <trey@newcontext.com>]

On 21.08.2018 18:47:05, Katz, Gary CTR DC3/TSD wrote:
> To Sarah's point, I would like to provide an overview of how Cyber
> Observables could be updated to support the new use cases. These
> updates were based upon a discussion with Ivan and Jeff prior to
> being turned into a power point. The power point was developed with
> the idea that someone would be speaking to the slides, so I
> apologize if anything is obtuse. By making a couple of changes to
> the Cyber Observable object, we should be able to accommodate new
> use cases. Obviously, as we continue to refine Infrastructure
> Malware, and Incident we will need to confirm that these changes do
> support their use cases but it looks like this would be a solution
> to meet Option 1.
> 

Hi, Gary -

Would you and Jeff be willing to present this on next week's TC
working call?

-- 
Cheers,
Trey
++--------------------------------------------------------------------------++
Director of Standards Development, New Context
gpg fingerprint: 3918 9D7E 50F5 088F 823F  018A 831A 270A 6C4F C338
++--------------------------------------------------------------------------++
--
"He who defends with love will be secure." --Lao Tzu

Attachment: signature.asc
Description: PGP signature