Consider refactoring CybOX objects to support File/Filesystem distinction

CybOXProject / schemas

CybOX Schemas and Schema Development

42 stars 17 forks source link

Consider refactoring CybOX objects to support File/Filesystem distinction #325

Closed johnwunder closed 9 years ago

johnwunder commented 9 years ago

The FileObject (and its children) conflate some details of the file with the filesystem that the file exists on. Some aspects of a file are the same across all filesystems, others are not.

The community should consider whether it's worth refactoring files to better represent these distinctions. This should include roping in digital forensics community and others who may have specific needs.

gtback commented 9 years ago

Is this distinct from #315?

johnwunder commented 9 years ago

Nope, I searched for "filesystem" rather than "file system". Sorry!