Suggest that Cyber Observables just use the same mechanism defined for STIX custom properties and remove the way CybOx did it.
allan
From:
"" <> on behalf of "Bret Jordan (CS)" <>
Date: Thursday, November 10, 2016 at 5:24 PM
To: "" <>
Subject: [cti] STIX RC3 - issues.
I have noticed that Parts 3a/3b allow the Cyber Observables part to be extended in two ways. Originally in STIX, if you wanted to add your own properties you could, via the Custom Properties
feature. CybOX did this a different way, and choose to do it via a Custom Extension. Now that CybOX has been merged in to STIX, CybOX has inherited the ability to also do Custom Properties. So now the Cyber Observable layer has two different and distinct
ways that it can be extended..
Bret
