CTI TAXII Subcommittee

  • 1.  Remove paragraph that talks about sorting with Object Search Endpoint

    Posted 02-22-2018 21:33
    All, Does anyone object to removing the paragraph that is described in issue 51?  https://github.com/oasis-tcs/cti-taxii2/issues/51 Basically, it is a left over paragraph from when we had an "Object Search" endpoint. That endpoint was removed before the TAXII 2.0 work was finished, however, we missed removing this paragraph. The paragraph says, and is located in section 3.3: "For the Object Search Endpoint, objects MUST be sorted in ascending order by the date the object first appeared in object search (i.e., the added date). If an object would appear multiple times, all appearances after the first appearance MUST be omitted from the result. That is, if an object would have appeared first in the list and again halfway down, only the first entry should be present in the result." Bret


  • 2.  Re: [cti-taxii] Remove paragraph that talks about sorting with Object Search Endpoint

    Posted 02-23-2018 20:27
    I support this change, lets do it. - Jason Keirstead STSM, Product Architect, Security Intelligence, IBM Security Systems www.ibm.com/security "Things may come to those who wait, but only the things left by those who hustle." - Unknown From:         Bret Jordan <Bret_Jordan@symantec.com> To:         "cti-taxii@lists.oasis-open.org" <cti-taxii@lists.oasis-open.org> Date:         02/22/2018 05:33 PM Subject:         [cti-taxii] Remove paragraph that talks about sorting with Object Search Endpoint Sent by:         <cti-taxii@lists.oasis-open.org> All, Does anyone object to removing the paragraph that is described in issue 51? https://github.com/oasis-tcs/cti-taxii2/issues/51 Basically, it is a left over paragraph from when we had an "Object Search" endpoint. That endpoint was removed before the TAXII 2.0 work was finished, however, we missed removing this paragraph. The paragraph says, and is located in section 3.3: "For the Object Search Endpoint, objects MUST be sorted in ascending order by the date the object first appeared in object search (i.e., the added date). If an object would appear multiple times, all appearances after the first appearance MUST be omitted from the result. That is, if an object would have appeared first in the list and again halfway down, only the first entry should be present in the result." Bret


  • 3.  Re: [cti-taxii] Remove paragraph that talks about sorting with Object Search Endpoint

    Posted 02-23-2018 20:33




    Same.
     

    From: <cti-taxii@lists.oasis-open.org> on behalf of Jason Keirstead <Jason.Keirstead@ca.ibm.com>
    Date: Friday, February 23, 2018 at 3:27 PM
    To: "Bret Jordan (CS)" <Bret_Jordan@symantec.com>
    Cc: "cti-taxii@lists.oasis-open.org" <cti-taxii@lists.oasis-open.org>
    Subject: Re: [cti-taxii] Remove paragraph that talks about sorting with Object Search Endpoint


     

    I support this change, lets do it.
    -
    Jason Keirstead
    STSM, Product Architect, Security Intelligence, IBM Security Systems
    www.ibm.com/security

    "Things may come to those who wait, but only the things left by those who hustle." - Unknown





    From:         Bret
    Jordan <Bret_Jordan@symantec.com>
    To:         "cti-taxii@lists.oasis-open.org"
    <cti-taxii@lists.oasis-open.org>
    Date:         02/22/2018
    05:33 PM
    Subject:         [cti-taxii]
    Remove paragraph that talks about sorting with Object Search Endpoint
    Sent by:         <cti-taxii@lists.oasis-open.org>






    All,

    Does anyone object to removing the paragraph that is described in issue 51?

    https://github.com/oasis-tcs/cti-taxii2/issues/51

    Basically, it is a left over paragraph from when we had an "Object Search" endpoint. That endpoint was removed before the TAXII 2.0 work was finished, however, we missed removing
    this paragraph. The paragraph says, and is located in section 3.3:

    "For the Object Search Endpoint, objects MUST be sorted in ascending order by the date the object first appeared in object search (i.e., the added date). If an object would appear
    multiple times, all appearances after the first appearance MUST be omitted from the result. That is, if an object would have appeared first in the list and again halfway down, only the first entry should be present in the result."

    Bret


     






  • 4.  Re: [cti-taxii] Remove paragraph that talks about sorting with Object Search Endpoint

    Posted 02-23-2018 20:45




    Agreed.
     
    Allan
     

    From: <cti-taxii@lists.oasis-open.org> on behalf of "Wunder, John" <jwunder@mitre.org>
    Date: Friday, February 23, 2018 at 12:32 PM
    To: Jason Keirstead <Jason.Keirstead@ca.ibm.com>, Bret Jordan <Bret_Jordan@symantec.com>
    Cc: "cti-taxii@lists.oasis-open.org" <cti-taxii@lists.oasis-open.org>
    Subject: Re: [cti-taxii] Remove paragraph that talks about sorting with Object Search Endpoint


     

    Same.
     

    From: <cti-taxii@lists.oasis-open.org> on behalf of Jason Keirstead <Jason.Keirstead@ca.ibm.com>
    Date: Friday, February 23, 2018 at 3:27 PM
    To: "Bret Jordan (CS)" <Bret_Jordan@symantec.com>
    Cc: "cti-taxii@lists.oasis-open.org" <cti-taxii@lists.oasis-open.org>
    Subject: Re: [cti-taxii] Remove paragraph that talks about sorting with Object Search Endpoint


     

    I support this change, lets do it.
    -
    Jason Keirstead
    STSM, Product Architect, Security Intelligence, IBM Security Systems
    www.ibm.com/security

    "Things may come to those who wait, but only the things left by those who hustle." - Unknown





    From:         Bret
    Jordan <Bret_Jordan@symantec.com>
    To:         "cti-taxii@lists.oasis-open.org"
    <cti-taxii@lists.oasis-open.org>
    Date:         02/22/2018
    05:33 PM
    Subject:         [cti-taxii]
    Remove paragraph that talks about sorting with Object Search Endpoint
    Sent by:         <cti-taxii@lists.oasis-open.org>




    All,

    Does anyone object to removing the paragraph that is described in issue 51?

    https://github.com/oasis-tcs/cti-taxii2/issues/51

    Basically, it is a left over paragraph from when we had an "Object Search" endpoint. That endpoint was removed before the TAXII 2.0 work was finished, however, we missed removing
    this paragraph. The paragraph says, and is located in section 3.3:

    "For the Object Search Endpoint, objects MUST be sorted in ascending order by the date the object first appeared in object search (i.e., the added date). If an object would appear
    multiple times, all appearances after the first appearance MUST be omitted from the result. That is, if an object would have appeared first in the list and again halfway down, only the first entry should be present in the result."

    Bret

     






Related Content