SCOs are allowed in Observable Containers as per Section 2.13 of the spec - so the validator must allow it

oasis-open / cti-stix-validator

OASIS TC Open Repository: Validator for STIX 2.0 JSON normative requirements and best practices

https://stix2-validator.readthedocs.io/

BSD 3-Clause "New" or "Revised" License

50 stars 41 forks source link

SCOs are allowed in Observable Containers as per Section 2.13 of the spec - so the validator must allow it #187

Open rpiazza opened 3 years ago

rpiazza commented 3 years ago

See https://github.com/oasis-open/cti-stix-generator/issues/25

chisholm commented 3 years ago

I don't see the validator complaining about this. I just see (using the example from the referenced cti-stix-generator issue, and assuming the hive fix is in place):

'windows-registry-key--8e7c5803-ab54-40f6-a028-db07391d9fc4' is not a good key value.
    Observable Objects should use non-negative integers for their keys.

And another warning about the "objects" property being deprecated (which is understandable). Did you see something else?