The editors have made a minor change to the text in section 9.5.1, in response to
issue #165.
a
MUST be an Observation _expression_ or a preceding Qualifier. All Observations matched
by a MUST occur,
or have been observed, within the specified time window.
x
MUST be a positive floating-point or integer value.
Please review this new text and respond if you have additional concerns.
Rich
--
Rich Piazza
Lead Cyber Security Engineer
The MITRE Corporation
781-271-3760
