OASIS Collaborative Automated Course of Action Operations (CACAO) for Cyber Secu

 View Only
  • 1.  Today's call

    Posted 10-08-2024 12:10
    All,

    On today's call we accepted the following proposed changes:

    1. Modifications to the timeout property and the addition of an on_timeout property 
    2. Changes to the openc2-http command to make it conformant with the new OpenC2 spec
    3. Added a normative statement to ensure variables at the local scope do not use the same name as those at the playbook scope

    In addition we agreed to move the on_completion, on_success, and on_failure out of the common workflow step common properties and only put them where they make sense. I will do this before our next call. 

    For our next call please:
    a. Review the OpenC2 MQTT command and MQTT Agent/Target
    b. Review the text in section 7 to ensure that the difference between Agents and Targets is clear, if not, please add examples. Also, please review the examples in all of the Agnets/Targets and try to improve the informative text for the examples
    c. Please review and think about the on_success and on_failure aspects in the action step per the comments in the documents.

    Our next five calls will be on the following days, these will be two weeks back to back, then a week off, then two back to back, then a week off.  Just trying to get to a point where we can do a CSD ballot before the Christmas season begins. 

    Oct 22
    Oct 29
    Nov 12
    Nov 19
    Dec 3

    Thanks
    Bret