[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]
Subject: Re: [NEWSLETTER] RE: [cti] Re: [EXT] Re: [cti] Working Call Recap
On 16.05.2019 11:39:55, Kelley, Sarah E. wrote: > Arenât bundles designed to be thrown away? So if the information is > only kept at the bundle level for how the identifier is generated, > you would lose that information as soon as the bundle drops on the > floor. You could never retransmit with that information (in the use > case that you were passing along data you didnât create), and the > consumer wouldnât be able to go back and reference it in the future. > > Am I missing something? > You're exactly right, Sarah. STIX 2.0, Part 1, Â5 states, "A Bundle is a collection of arbitrary STIX Objects and Marking Definitions grouped together in a single container. A Bundle does not have any semantic meaning and Objects are not considered related by virtue of being in the same Bundle. Bundle is not STIX Object, so it does not have any of the Common Properties other than the type and id properties. Bundle is transient and implementations should not assume that other implementations will treat it as a persistent object." -- Cheers, Trey Darley Co-chair, CTI TC CTI Strategist, CERT.be -- CERT.be Centre for Cyber Security Belgium Mail: trey.darley@cert.be GPG: CA5B 29E4 937E 151E 2550 6607 AE9A 7FF2 8000 0E4E -- Under the authority of the Prime Minister Wetstraat 16 - 1000 Brussels - Belgium Visiting address : Rue Ducale 4 â 1000 Brussels â Belgium Contact: https://www.cert.be
Attachment:
signature.asc
Description: PGP signature
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]