johnwunder twigs issues

johnwunder / twigs

STIX 2.0 Strawman

http://twigs-cti.herokuapp.com/

MIT License

7 stars 3 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

Added referenceable property group and updated Asset

#42 terrymacdonald closed 8 years ago
0
Adding Referenceable and Asset Object

#41 terrymacdonald closed 8 years ago
2
Consider making title/description optional on vulnerability, weakness, and configuration

#40 johnwunder opened 8 years ago
0
Observations don't cover pre-exploit things like recon.

#39 terrymacdonald opened 8 years ago
0
How should TWIGS represent infrastructure?

#38 johnwunder opened 8 years ago
3
We should be able to better describe each STIX object in words

#37 chipi opened 8 years ago
0
Should relationship be "describable"

#36 johnwunder opened 8 years ago
0
removed source_ref and changed object from ref to directly included

#35 johnwunder closed 8 years ago
0
Clarify semantics of different types of TTPs

#34 johnwunder opened 8 years ago
1
Simplify structure for Controlled Vocabularies

#33 johnwunder opened 8 years ago
0
Relationships should be a top-level object

#32 johnwunder opened 8 years ago
1
Extend core constructs from single base type

#31 johnwunder opened 8 years ago
2
Some Object names are confusing

#30 terrymacdonald opened 8 years ago
1
Are CybOX <Object> IDs used in STIX?

#29 terrymacdonald opened 8 years ago
0
Which to use? Indicator Composition, Observable Composition, or referenced Object?

#28 terrymacdonald opened 8 years ago
8
TTPs are almost mandatory

#27 terrymacdonald opened 8 years ago
0
Relationships are constrained to limited Objects within STIX

#26 terrymacdonald opened 8 years ago
0
Cannot suggest hypotheses to a community through STIX

#25 terrymacdonald opened 8 years ago
0
Difficult to group 'possibly' related things during an investigation

#24 terrymacdonald opened 8 years ago
0
Interoperability is difficult if custom vocabularies are allowed

#23 terrymacdonald opened 8 years ago
0
No STIX-wide way to handle aliases

#22 terrymacdonald opened 8 years ago
0
Victim Targeting is embedded within a TTP

#21 terrymacdonald opened 8 years ago
0
Difficult to ask for a referred object

#20 terrymacdonald opened 8 years ago
0
Obfuscation of Producer Identity is Difficult

#19 terrymacdonald opened 8 years ago
0
Difficult for third parties to show agreement or disagreement

#18 terrymacdonald opened 8 years ago
1
Embedded and Referencing Objects

#17 terrymacdonald opened 8 years ago
0
Indicators/Observable, Composition/Object hierarchy is complicated

#16 terrymacdonald opened 8 years ago
0
Too many ways to do things

#15 terrymacdonald opened 8 years ago
0
Cannot generate a relationship between two third-party objects

#14 terrymacdonald opened 8 years ago
0
Sightings are difficult to send out independently

#13 terrymacdonald opened 8 years ago
4
Difficult to ask a request and get a response to that question

#12 terrymacdonald opened 8 years ago
0
Observable Patterns and Observable Instances differences aren’t easily discerned

#11 terrymacdonald opened 8 years ago
2
There are too many ways to update an Object (Versioning)

#10 terrymacdonald opened 8 years ago
4
Deduplication is difficult

#9 terrymacdonald opened 8 years ago
1
Generate Object ID from hashed Object contents

#8 terrymacdonald closed 8 years ago
1
Object ID’s are optional but should be required

#7 terrymacdonald opened 8 years ago
0
Aggregation Object?

#6 terrymacdonald opened 8 years ago
2
Return count of sightings with observations

#5 terrymacdonald opened 8 years ago
1
Return count of sightings (+x)

#4 terrymacdonald opened 8 years ago
1
Return individual +1 sighting

#3 terrymacdonald opened 8 years ago
1
Return individual sighting w/ observation

#2 terrymacdonald opened 8 years ago
1
Changing Sighting to Observation and added Opinion object

#1 terrymacdonald closed 8 years ago
2