On 03.10.2017 19:51:18, Sarah Kelley wrote:
> The only thing I would comment on is the ability to revoke an
> observable.
>
Hey, Sarah -
Cf. STIX 2.0, Part 2, §2.8.1 - you *can* revoke an Observed Data SDO.
Observed Data has all of the standard STIX 2 versioning capabilities
that the other STIX SDOs do.
--
Cheers,
Trey
++--------------------------------------------------------------------------++
Director of Standards Development, New Context
gpg fingerprint: 3918 9D7E 50F5 088F 823F 018A 831A 270A 6C4F C338
++--------------------------------------------------------------------------++
--
"It is more complicated than you think." --RFC 1925
