Extension for Sharing Playbooks/Workflows with COA SDO

[Vasileios Mavroeidis <vasileim@ifi.uio.no>]

CTI TC,

I want to bring to your attention an extension (nested property extension) we defined for the Course of Action SDO type to support sharing playbooks/workflows.

Those familiar with the extension definition process can directly check the extension in our Github (summary of work and JSON files).

https://github.com/fovea-research/stix2.1-coa-playbook-extension

Those who want to delve into the thought process that influenced the extension's design can read our technical report.

https://docs.google.com/document/d/1KzEgviVLolA6Yt7YWfAv9f6TSMD33WgSo-US3YSHtyc/edit?usp=sharing

You can directly ask me to give you editing/commenting access to the doc for any feedback or suggestions you may have.

If the co-chairs find it appropriate, I'll be happy to present this work at one of our meetings.

Kind regards,

Vasileios Mavroeidis

Cybersecurity Scientist @ University of Oslo

OASIS TAC TC Co-chair