Re: [cti] Additional relationships on process, file, and windows-registry-key SCOs

From
Bret Jordan <>
Date
2020-02-14T22:55:03+00:00
ID
CAF5ktP0Pnxn=kgUwvqDMjB=S-8R8P1zcY6JGYMf=
Thread
Re: [cti] Additional relationships on process, file, and windows-registry-key SCOs
I think this is very reasonable. We knew we were going to need to add them, but we decidedÂto add them as they were requested. I think this is something we could easily just do on Tuesday. If you have any concerns or objections, please respond to this email or let me know off line.Â

Thanks,

Bret

PGP Fingerprint:Â63B4 FC53 680A 6B7D 1447 ÂF2C0 74F8 ACAE 7415 0050

"Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."

On Fri, Feb 14, 2020 at 3:31 PM Emily Ratliff <> wrote:

As our product teams
have started playing with STIX 2.1, they have requested additional relationships
between SCOs. I filed GitHub issues to cover these requests.
windows-registry-key
https://github.com/oasis-tcs/cti-stix2/issues/225
file
https://github.com/oasis-tcs/cti-stix2/issues/224
process
https://github.com/oasis-tcs/cti-stix2/issues/222

They are straight-forward
and there is precedence for this in the Domain SCO. Since we have to have
another CSD anyway, would it be possible to add these in now?

Thanks,

Emily Ratliff
STSM, Security Architect
IBM Security