Jeff,
I second Vasileios’s comment.
Thanks for driving this much needed Incident extension to closure. This helps to close a major gap for many key use cases.
Patrick Maroney
Principal - Cybersecurity
Chief Security Office
Office: 732.615.5287 | Cell: 609.678.5613 |
Email: rx118r@att.com
From:
cti@lists.oasis-open.org <cti@lists.oasis-open.org> on behalf of Vasileios Mavroeidis <vasileim@ifi.uio.no>
Date: Wednesday, May 25, 2022 at 1:32 AM
To: MATES, JEFFREY F GS-14 USAF AFOSI AFOSI/DC3/TSD <jeffrey.mates@us.af.mil>
Cc: cti@lists.oasis-open.org <cti@lists.oasis-open.org>
Subject: Re: [cti] STIX Incident Core Extension now Live
Thank you for leading this effort Jeff. Awesome work.
On May 24, 2022 22:23, "MATES, JEFFREY F GS-14 USAF AFOSI AFOSI/DC3/TSD" <jeffrey.mates@us.af.mil> wrote:
I apologize for all of the delays in sharing out the work that had been done
by the Incident Mini-Group, but the Incident Core Extension is now part of the
CTI STIX Common Objects repository including the required Word document
detailing the extension and a number of examples.
https://github.com/oasis-open/cti-stix-common-objects/tree/main/extension-definition-specifications/incident-core
I hope we can continue to pursue this as a specification candidate extension
so any feedback on it is welcome as further refinement will help us when
incorporating it into the next STIX 2.x release.
//SIGNED//
Jeffrey Mates, Civ DC3/TSD
Computer Scientist
Technical Solutions Development
jeffrey.mates@us.af.mil
410-694-4335