Change to section 9.5.1

The editors have made a minor change to the text in section 9.5.1, in response to
issue #165.

 

a
MUST be an Observation _expression_ or a preceding Qualifier. All Observations matched
 by a MUST occur, 

or have been observed, within the specified time window.
x
MUST be a positive floating-point or integer value.

Please review this new text and respond if you have additional concerns.

 

                Rich

 

-- 

Rich Piazza

Lead Cyber Security Engineer

The MITRE Corporation

781-271-3760