Re: [EXT] Re: [cti] Working Call Recap and action items

["Piazza, Rich" <rpiazza@mitre.org>]

Jason wrote:

Another aspect I don't see fully thought-through here is that SCOs do not exist in isolation, they still "live" inside one or more observed-data SDOs. Those SDOs *themselves* have full versioning capabilities.

 

Is this the general understanding?  This is not the way the editors (Bret and I) have been changing the examples in the specâ

 

Here is an example:

 

{

 "type": "observed-data",

 "spec_version": "2.1",

 "id": "observed-data--b67d30ff-02ac-498a-92f9-32f845f448cf",

 "created_by_ref": "identity--f431f809-377b-45e0-aa1c-6a4751cae5ff",

 "created": "2016-04-06T19:58:16.000Z",

 "modified": "2016-04-06T19:58:16.000Z",

 "first_observed": "2015-12-21T19:00:00Z",

 "last_observed": "2015-12-21T19:00:00Z",

 "number_observed": 50,

 "object_refs": [

   "ipv4-address--efcd5e80-570d-4131-b213-62cb18eaa6a8",

   "domain-name--ecb120bf-2694-4902-a737-62b74539a41b"

 ]

}

 

{

 "id": "domain-name--ecb120bf-2694-4902-a737-62b74539a41b",

 "type": "domain-name",

 "value": "example.com"

}

 

{

 "id": "ipv4-addr--efcd5e80-570d-4131-b213-62cb18eaa6a8",

 "type": "ipv4-addr",

 "value": "198.51.100.3"

}

 

{

 "type": "relationship",

 "id:" "relationship--58b912ad-cbb0-41e4-9c6b-d0824fed0d3e",

 "spec_version": "2.1",

 "created": "2015-12-21T19:00:00Z",

 "modified": "2015-12-21T19:00:00Z",

 "relationship_type": "resolves-to",

 "created_by_ref": "identity--f431f809-377b-45e0-aa1c-6a4751cae5ff",

 "source_ref": "domain-name--ecb120bf-2694-4902-a737-62b74539a41b"

 "target_ref": "ipv4-address--efcd5e80-570d-4131-b213-62cb18eaa6a8"

}