Re: [cti-stix] Report object approaches

From
Terry MacDonald <>
Date
2016-02-18T21:59:51+00:00
ID
Thread
Re: [cti-stix] Report object approaches
The kind_of_relationship value won't need to be set in option #2 as the array of idref values directly asset that the objects are in the report. So we can do away with the 'contains' relationship in the report if we want.

I do agree that we will likely need another grouping object. I had proposed a Tag/label object in the past to be used in this way., but maybe this is a discussion for later in the year.

Cheers
Terry MacDonald