Re: [cti-stix] Report object approaches

On 18.02.2016 17:51:38, Sarah Kelley wrote:
> Personally, I agree with #2.
> 

+1 for #2, let's not overcomplicate things. ^_^

> 
> I understand the use case of trying to group data together and have
> it evolve, but I wouldn’t call that a report. I think we’re having
> yet another example of problems with overloaded language, just like
> the Incident/Investigation conversation.
> 

Spot on, Sarah, you've sure got a knack for hitting the nail on the
head!

-- 
Cheers,
Trey
--
Trey Darley
Senior Security Engineer
4DAA 0A88 34BC 27C9 FD2B  A97E D3C6 5C74 0FB7 E430
Soltra | An FS-ISAC & DTCC Company
www.soltra.com
--
"It Has To Work." --RFC 1925