Description:
Kick off meeting for the STIX COA working group
Webex information:
Join WebEx meeting
Meeting number: 205 989 081
Meeting password: VmrvPB7p (86787277 from phones)
Join from a video conferencing system or application
Dial 205989081@cisco.webex.com
From the Cisco internal network, dial *267* and the 9-digit meeting number. If you are the host, enter your PIN when prompted.
Join by phone
+1-866-432-9903 Call-in toll-free number (US/Canada)
+1-408-525-6800 Call-in toll number (US/Canada)
Access code: 205 989 081
Global call-in numbers | Toll-free calling restrictions
Can't join the meeting? Contact support.
IMPORTANT NOTICE: Please note that this WebEx service allows audio and other information sent during the session to be recorded, which may be discoverable in a legal matter. By joining this session, you automatically consent to such recordings. If you do not consent to being recorded, discuss your concerns with the host or do not join the session..
==========
Agenda:
1) How do we document manual / process based COAs
2) Should the STIX COA support multiple actions in the same object? (IMO, yes)
3) Should the STIX COA support time based sequencing?
4) Call out and define where the line is between COA and a future Playbook object
5) How should STIX COA work with and make use of automated actions like OpenC2?
==========
Minutes:
==========
Attendance: