Example of CACAO with OpenC2

The CACAO TC recently published a Committee Specification on Playbooks (https://docs.oasis-open.org/cacao/security-playbooks/v1.0/cs01/security-playbooks-v1.0-cs01.html). Of interest to OpenC2 is the OpenC2-json is one of the 5 allowed command types (along with manual, http-api, ssh, bash â see section 6.2).

I think the document is of interest to the IC-SC. The document contains several examples, but unfortunately none of them are OpenC2 examples. We may want to consider adding their examples to the OpenC2 use cases â after translating the appropriate commands into OpenC2. We also may want to consider submitting an additional example or two (that do make use of OpenC2) for addition to a future version of their playbook spec.

Volunteers to help with this would be welcome.

Duncan Sparrell

sFractal Consulting LLC

iPhone, iTypo, iApologize

I welcome VSRE emails. Learn more at http://vsre.info/

openc2-imple message