OASIS Cyber Threat Intelligence (CTI) TC

  • 1.  COA's (was: On TTPs and specifications)

    Posted 05-05-2016 13:09
    Hi!, I just thought that it would be a good idea to see what is out there and then build up a list of COA's that could be used and hopefully with enough support get vendors to be able to understand and process. It would be pretty good to build up a STIX document that provided some COA's for more detailed monitoring or alerting or automatically build a firewall rule. Regards, Dean


  • 2.  Re: [cti] COA's (was: On TTPs and specifications)

    Posted 05-05-2016 17:54
    I have talked with a lot of vendors, part of my day-job, and when the topic of STIX comes up, everyone is interested (wish a level of caution) about automated course of actions.   Thanks, Bret Bret Jordan CISSP Director of Security Architecture and Standards Office of the CTO Blue Coat Systems PGP Fingerprint: 63B4 FC53 680A 6B7D 1447  F2C0 74F8 ACAE 7415 0050 Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg.   On May 5, 2016, at 07:08, Thompson, Dean < Dean.Thompson@anz.com > wrote: Hi!, I just thought that it would be a good idea to see what is out there and then build up a list of COA's that could be used and hopefully with enough support get vendors to be able to understand and process.  It would be pretty good to build up a STIX document that provided some COA's for more detailed monitoring or alerting or automatically build a firewall rule. Regards, Dean
    Original Message


Related Content