OASIS Cyber Threat Intelligence (CTI) TC

  • 1.  Re: [cti] Indicator Milestone

    Posted 02-18-2016 20:27





    I concur with the desire for a couple more working group calls to see how much we can get done before RSA.


    May I propose that we keep Tuesday’s working call and add two more calls next week: Wed 11:00am-1:00pm Eastern and Thursday 11:00am-1:00pm Eastern?


    We will need to work out the topics for each call dynamically like we do for the Tuesday calls.


    sean









    From: < cti@lists.oasis-open.org > on behalf of "Jordan, Bret" < bret.jordan@bluecoat.com >
    Date: Thursday, February 18, 2016 at 1:31 PM
    To: " cti@lists.oasis-open.org " < cti@lists.oasis-open.org >
    Subject: [cti] Indicator Milestone





    Just a time check for the Indicator Milestone, we are trying to get the majority of this done by end of next week.  Might I suggest we have a few more working group calls to flesh out the rest of this?  I would really like to have the Indicator Milestone done
    for RSA.











    Thanks,


    Bret











    Bret Jordan CISSP

    Director of Security Architecture and Standards Office of the CTO

    Blue Coat Systems

    PGP Fingerprint: 63B4 FC53 680A 6B7D 1447  F2C0 74F8 ACAE 7415 0050
    "Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg." 

















  • 2.  Re: [cti] Indicator Milestone

    Posted 02-18-2016 21:47



    I'd propose we do them at a time that is less uncomfortable for those of us on this side of the world. You can't always have it easy on the US folks


  • 3.  Re: [cti] Indicator Milestone

    Posted 02-19-2016 10:01
    On 18.02.2016 21:46:58, Terry MacDonald wrote: > I'd propose we do them at a time that is less uncomfortable for > those of us on this side of the world. You can't always have it easy > on the US folks


  • 4.  Re: [cti] Indicator Milestone

    Posted 02-19-2016 13:50
    From my experience in meeting with APAC colleagues, the time range that is most. absorbable for all (yet not totally comfortable for anyone :) is around 5am EST. Sent from IBM Verse Trey Darley --- Re: [cti] Indicator Milestone --- From: "Trey Darley" <trey@soltra.com> To: "Terry MacDonald" <terry@soltra.com> Cc: "Sean D. Barnum" <sbarnum@mitre.org>, "Bret Jordan" <bret.jordan@bluecoat.com>, cti@lists.oasis-open.org Date: Fri, Feb 19, 2016 6:00 AM Subject: Re: [cti] Indicator Milestone On 18.02.2016 21:46:58, Terry MacDonald wrote: > I'd propose we do them at a time that is less uncomfortable for > those of us on this side of the world. You can't always have it easy > on the US folks


  • 5.  Re: [cti] Indicator Milestone

    Posted 02-19-2016 16:14




    Well, unfortunately I don’t think that really works very well for a fairly large set of people in the EST.
    I can personally say that my brain does NOT operate above 30-50% of normal capacity that early.


    We need to find a time that does not hose Terry or the few other people in APAC or Europe but also works well for the majority of folks in the US.
    A hard task I know.


    sean








    From: < cti@lists.oasis-open.org > on behalf of Jason Keirstead < Jason.Keirstead@ca.ibm.com >
    Date: Friday, February 19, 2016 at 8:49 AM
    To: Trey Darley < trey@soltra.com >
    Cc: Terry MacDonald < terry@soltra.com >, "Barnum, Sean D." < sbarnum@mitre.org >, Bret Jordan < bret.jordan@bluecoat.com >,
    " cti@lists.oasis-open.org " < cti@lists.oasis-open.org >
    Subject: Re: [cti] Indicator Milestone




    From my experience in meeting with APAC colleagues, the time range that is most. absorbable for all (yet not totally comfortable for anyone :) is
    around 5am EST.

    Sent from IBM Verse


    Trey Darley --- Re: [cti] Indicator Milestone ---





    From:
    "Trey Darley" < trey@soltra.com >


    To:
    "Terry MacDonald" < terry@soltra.com >


    Cc:
    "Sean D. Barnum" < sbarnum@mitre.org >, "Bret Jordan" < bret.jordan@bluecoat.com >,
    cti@lists.oasis-open.org


    Date:
    Fri, Feb 19, 2016 6:00 AM


    Subject:
    Re: [cti] Indicator Milestone







    On 18.02.2016 21:46:58, Terry MacDonald wrote: > I'd propose we do them at a time that is less uncomfortable for > those of us on this side of the world. You can't always have it easy > on the US folks


  • 6.  Re: [cti] Indicator Milestone

    Posted 02-19-2016 17:07
    The only other good time is like 6PM - 8PM or so EST range. - Jason Keirstead STSM, Product Architect, Security Intelligence, IBM Security Systems www.ibm.com/security www.securityintelligence.com Without data, all you are is just another person with an opinion - Unknown "Barnum, Sean D." ---02/19/2016 12:13:57 PM---Well, unfortunately I don’t think that really works very well for a fairly large set of people in th From: "Barnum, Sean D." <sbarnum@mitre.org> To: Jason Keirstead/CanEast/IBM@IBMCA, Trey Darley <trey@soltra.com> Cc: Terry MacDonald <terry@soltra.com>, Bret Jordan <bret.jordan@bluecoat.com>, "cti@lists.oasis-open.org" <cti@lists.oasis-open.org> Date: 02/19/2016 12:13 PM Subject: Re: [cti] Indicator Milestone Well, unfortunately I don’t think that really works very well for a fairly large set of people in the EST. I can personally say that my brain does NOT operate above 30-50% of normal capacity that early. We need to find a time that does not hose Terry or the few other people in APAC or Europe but also works well for the majority of folks in the US. A hard task I know. sean From: < cti@lists.oasis-open.org > on behalf of Jason Keirstead < Jason.Keirstead@ca.ibm.com > Date: Friday, February 19, 2016 at 8:49 AM To: Trey Darley < trey@soltra.com > Cc: Terry MacDonald < terry@soltra.com >, "Barnum, Sean D." < sbarnum@mitre.org >, Bret Jordan < bret.jordan@bluecoat.com >, " cti@lists.oasis-open.org " < cti@lists.oasis-open.org > Subject: Re: [cti] Indicator Milestone From my experience in meeting with APAC colleagues, the time range that is most. absorbable for all (yet not totally comfortable for anyone :) is around 5am EST. Sent from IBM Verse Trey Darley --- Re: [cti] Indicator Milestone ---
    From: "Trey Darley" < trey@soltra.com >
    To: "Terry MacDonald" < terry@soltra.com >
    Cc: "Sean D. Barnum" < sbarnum@mitre.org >, "Bret Jordan" < bret.jordan@bluecoat.com >, cti@lists.oasis-open.org
    Date: Fri, Feb 19, 2016 6:00 AM
    Subject: Re: [cti] Indicator Milestone On 18.02.2016 21:46:58, Terry MacDonald wrote: > I'd propose we do them at a time that is less uncomfortable for > those of us on this side of the world. You can't always have it easy > on the US folks


  • 7.  Re: [cti] Indicator Milestone

    Posted 02-19-2016 15:37





    Uh, yeah. Sorry about that Terry. By default I picked the times we had settled on for TC meetings forgetting that those times stink for you.


    I think we are going to struggle to find times that work.
    Normally, I would be happy to simply suggest late afternoon Eastern which we have done in the past but unfortunately I cannot make that time window Wed-Fri of next week.


    Any suggestions?


    sean









    From: Terry MacDonald < terry@soltra.com >
    Date: Thursday, February 18, 2016 at 4:46 PM
    To: "Barnum, Sean D." < sbarnum@mitre.org >
    Cc: Bret Jordan < bret.jordan@bluecoat.com >, " cti@lists.oasis-open.org " < cti@lists.oasis-open.org >
    Subject: Re: [cti] Indicator Milestone






    I'd propose we do them at a time that is less uncomfortable for those of us on this side of the world. You can't always have it easy on the US folks