Updated list:
Day 1
1) Design Principles (30 minutes)
2) What is MVP and what is not (1 hour)3) Versioning (1 hour)
4) Indicators (1 hour)
5) Observations (1 hour)6) Sightings (1 hour)7) Patterning (3 hours)
Day 28) Basic CybOX objects, like the top 5-10 most commonly used ones (4 hours)9) TTPs (3 hours)
10) Vendor Defined Fields and Objects (1 hour)
11) Incidents ???
Thanks,
Bret
Bret Jordan CISSP
Director of Security Architecture and Standards | Office of the CTO
Blue Coat Systems
PGP Fingerprint: 63B4 FC53 680A 6B7D 1447 F2C0 74F8 ACAE 7415 0050
"Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."
On Apr 12, 2016, at 19:35, Terry MacDonald <> wrote:
I would like to add some design principles to the beginning of that list. If we have an agreed way to 'judge' the proposals put forward then we should be able to speed up the debates.
Cheers
Terry MacDonald
On 13/04/2016 04:36, "Jordan, Bret" <> wrote:
For the F2F next week, here is my wish list for deliverables (meaning I would like them finished) from the event.
1) What is MVP and what is not
2) Versioning 3) Indicators 4) Observations5) Sightings6) Patterning 7) Basic CybOX objects, like the top 5-10 most commonly used ones
8) TTPs
Thanks,
Bret
Bret Jordan CISSP
Director of Security Architecture and Standards | Office of the CTO
Blue Coat Systems
PGP Fingerprint: 63B4 FC53 680A 6B7D 1447 F2C0 74F8 ACAE 7415 0050
"Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."
Attachment:
signature.asc
Description: Message signed with OpenPGP using GPGMail
