Open bworrell opened 9 years ago
Is there a use case in mind for this object? Are there known attacks or indicators which would need to use this object? It seems like a lot of detail, so I just want to make sure there's value in adding it.
@gtback good questions. I think this came out of the context of capturing observables/indicators in CybOX related to malicious DNP3 traffic: https://isc.sans.edu/diary/Looking+for+malicious+traffic+in+electrical+SCADA+networks+-+part+1/17967
This is really a sub-component of #143, so it has similar context/LOE.