Re: [cti-stix] [cti-users] Indicator Type / Vocabulary Implementation Questions

RE:

  "sub_type" : {
    "vocab": "http://a.b.com/vocab-foo",
    "type": "X-RAT-Downloader"
  },

The problems with this are the same as with the current system...

- As a tool, I likely do not have any internet access to publish a vocabulary list
- Even if I did, I probably do not have access to a location on the corporate website to publish it.

Sent from IBM Verse