I should be on the call, but if not, here are some additional relationships to think about:
Campaign targets a Victim (organization or vertical)
If ThreatActor and ThreatGroup are not identical, Campaigns may be attributed to the latter
Campaign uses a TTP
--
Kyle Maxwell []
iDefense Senior Analyst
From: [] on behalf of Jordan, Bret []
Sent: Tuesday, May 10, 2016 19:20
To:
Subject: [cti-stix] Campaign Mini-Group Working Session
For our discussion tomorrow on campaigns, here is a diagram I put together for Campaign Relationships in STIX 2.0. This should help us better identify and understand where things are missing.
[cti-stix] Campaign Mini-Group Working Session
Scheduled: May 11, 2016, 13:00 to 14:00
Location: Online Meeting
Invitees: Jordan, Bret,
All,
The campaign mini-group wants to have a discussion to finalize their proposal to the broader SC. No need to join unless you
want to influence this early stage development on the campaign TLO.
John
.........................................................................................................................................
Join online meeting <https://meet.mitre.org/jwunder/HRTBLWS0>
https://meet.mitre.org/jwunder/HRTBLWS0
Join by Phone
+1 (781) 271-2020
+1 (703) 983-2020
Find a local number <https://dialin.mitre.org>
Conference ID: 7622872
Forgot your dial-in PIN? <https://dialin.mitre.org> | First
online meeting? <http://r.office.microsoft.com/r/rlidOC10?clid=1033&p1=4&p2=1041&pc=oc&ver=4&subver=0&bld=7185&bldver=0>
.........................................................................................................................................
Thanks,
Bret
Bret Jordan CISSP
Director of Security Architecture and Standards | Office of the CTO
Blue Coat Systems
PGP Fingerprint: 63B4 FC53 680A 6B7D 1447 F2C0 74F8 ACAE 7415 0050
"Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."
