CTI STIX Subcommittee

I would like to propose that we rename this field, from Indicator_Type to something that indicates that it is a label or a tag .  This can still be bound to a controlled vocabulary.  But not calling it a TYPE is a good thing, IMHO.  And I believe the world has gravitated to this idea that content can have labels or tags.  It also makes more sense to have a series of labels or a series of tags versus having a series of types .  Thanks, Bret Bret Jordan CISSP Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 63B4 FC53 680A 6B7D 1447  F2C0 74F8 ACAE 7415 0050 Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg.   Attachment: signature.asc Description: Message signed with OpenPGP using GPGMail

On 23.02.2016 19:23:46, Jordan, Bret wrote: > I would like to propose that we rename this field, from > Indicator_Type to something that indicates that it is a "label" or a > "tag". This can still be bound to a controlled vocabulary. But not > calling it a TYPE is a good thing... Excellent point, Bret, fully agree. -- Cheers, Trey -- Trey Darley Senior Security Engineer 4DAA 0A88 34BC 27C9 FD2B A97E D3C6 5C74 0FB7 E430 Soltra An FS-ISAC & DTCC Company www.soltra.com -- "For all resources, whatever it is, you need more." --RFC 1925 Attachment: signature.asc Description: PGP signature