| 1 |
Proposal - Top Level Relationship Object |
94 |
Jul 2015 |
| 2 |
Fwd: STIX timestamps and ISO 8601:2000 |
87 |
Nov 2015 |
| 3 |
MTI Binding |
83 |
Sep 2015 |
| 4 |
Proposal to establish Sightings (#306) and Relationships (#291) as our official issue topics under active consideration for STIX v2.0 |
58 |
Oct 2015 |
| 5 |
STIX: Messaging Standard vs. Document Standard |
51 |
Nov 2015 |
| 6 |
Top-level Sighting Object from last meeting |
50 |
Oct 2015 |
| 7 |
RE: [cti-users] Indicator Type / Vocabulary Implementation Questions |
36 |
Oct 2015 |
| 8 |
STIX 2.0 - Sightings object |
34 |
Aug 2015 |
| 9 |
Asset: the missing piece in your puzzle |
34 |
Nov 2015 |
| 10 |
STIX Sightings |
32 |
Oct 2015 |
| 11 |
Deterministic IDs - pas de deux |
29 |
May 2016 |
| 12 |
STIX COA Roadmap |
26 |
Sep 2017 |
| 13 |
RE: New property names for previous label properties |
26 |
May 2018 |
| 14 |
Some thoughts on Sightings and conversations to date (Part #4): should sightings have IDs? |
25 |
Nov 2015 |
| 15 |
Re: [cti-cybox] Revoke Cybox Observable |
25 |
Nov 2015 |
| 16 |
Updated report proposal |
24 |
Sep 2017 |
| 17 |
Timestamps - Proposal |
23 |
Dec 2015 |
| 18 |
Conceptul model for sighting |
22 |
Oct 2015 |
| 19 |
Object ID format |
20 |
Jan 2016 |
| 20 |
Custom properties |
20 |
May 2016 |
| 21 |
Some thoughts on Sightings and conversations to date (Part #3): what should sightings be asserted against? |
19 |
Nov 2015 |
| 22 |
Current thoughts on Event Object |
19 |
Sep 2017 |
| 23 |
Report object approaches |
18 |
Feb 2016 |
| 24 |
Malware, Malicious Tool, and Tool |
18 |
Jun 2016 |
| 25 |
FW: Suspicious Activity Object |
18 |
Jul 2018 |
| 26 |
Applying data markings |
17 |
Dec 2015 |
| 27 |
Initial stab at grouping-context-ov values based on real-world use cases |
17 |
Oct 2017 |
| 28 |
Report object consensus |
16 |
Feb 2016 |
| 29 |
Indicator TLO |
16 |
May 2016 |
| 30 |
Proposal - Change Report Object |
15 |
Jul 2015 |
| 31 |
Things that are difficult in STIX |
15 |
Nov 2015 |
| 32 |
Results of the Campaign Mini-Group |
15 |
May 2016 |
| 33 |
Object Level Markings |
15 |
Jun 2016 |
| 34 |
Relationship Timestamp Properties: proposed description for the 2 timestamp parameters |
15 |
Sep 2017 |
| 35 |
Grouping SDO Open Questions |
15 |
Oct 2017 |
| 36 |
Need for Investigation/Tag object? |
14 |
Oct 2015 |
| 37 |
STIX 2.0 Architecture - Relationships, Sightings, and Targeting |
13 |
Oct 2015 |
| 38 |
Some thoughts on Sightings and conversations to date (Part #2): the semantics of observation, indicator, incident, sightings, etc |
13 |
Nov 2015 |
| 39 |
Including Incident and Assets in STIX MVP |
13 |
Jun 2016 |
| 40 |
Feedback on Malware Object |
13 |
Sep 2017 |
| 41 |
Kill Chains in STIX |
12 |
May 2016 |
| 42 |
Vocab case sensitivity in STIX |
12 |
Jun 2016 |
| 43 |
Proposal - Single Binding |
11 |
Jul 2015 |
| 44 |
[+1]'s |
11 |
Nov 2015 |
| 45 |
STIX versioning as an interim solution to deduplication |
10 |
Oct 2015 |
| 46 |
Question on Sightings Proposal and Cybox Observations |
10 |
Apr 2016 |
| 47 |
Identifier: [cti-stix] Formalizing Consensus - Identifier, Timestamp, Timestamp Precision, and Custom Properties |
10 |
Apr 2016 |
| 48 |
CybOX Versions in STIX? |
10 |
May 2016 |
| 49 |
Update links |
10 |
Jan 2018 |
| 50 |
Proposal: Addition of defined relationship from COA to Indicator |
10 |
Jul 2018 |
| 51 |
Targeting in STIX 2.0 |
9 |
Sep 2015 |
| 52 |
Re: [cti-users] Model / Binding Motions |
9 |
Oct 2015 |
| 53 |
STIX 2.0 Roadmap |
9 |
Nov 2015 |
| 54 |
icons |
9 |
May 2016 |
| 55 |
Sample Malware STIX Documents |
9 |
Jul 2018 |
| 56 |
Modified: CTI STIX SC Monthly Meeting |
8 |
Sep 2015 |
| 57 |
How should this look |
8 |
Jan 2016 |
| 58 |
Campaign Mini-Group Working Session |
8 |
May 2016 |
| 59 |
external-references keywords |
8 |
May 2016 |
| 60 |
Malware SDO Remaining Open Questions |
8 |
Oct 2017 |
| 61 |
Moving STIX 1.X Forward |
7 |
Oct 2015 |
| 62 |
Deconstruction of Cybox observables from STIX reports |
7 |
Oct 2015 |
| 63 |
RE: Stements & relations (was [cti-stix] [cti-cybox] Revoke Cybox Observable) |
7 |
Nov 2015 |
| 64 |
Campaigns |
7 |
May 2016 |
| 65 |
STIX/TAXII Vendor Self-Certification Program MOTION |
7 |
Oct 2017 |
| 66 |
Probable bug in STIX 2.0/2.1 in Patterning WRT Qualifiers and suggested fix |
7 |
Jul 2018 |
| 67 |
Editors |
6 |
Oct 2015 |
| 68 |
Focusing our active discussions a little |
6 |
Nov 2015 |
| 69 |
STIX MVP |
6 |
Mar 2016 |
| 70 |
Re: [cti-stix] _ref field suffix |
6 |
May 2016 |
| 71 |
Draft Threat model for IMDDOS COAs |
6 |
Sep 2017 |
| 72 |
Fwd: Proposal - Allow a client to request an object based on its ID |
5 |
Jul 2015 |
| 73 |
Tool alphatest |
5 |
Oct 2015 |
| 74 |
Motion to move timestamp, timestamp precision, and custom properties to draft status |
5 |
May 2016 |
| 75 |
TTP proposal |
5 |
May 2016 |
| 76 |
Motion to accept Bundle, Object Markings, Versioning, and Indicator Labels as Consensus |
5 |
Jun 2016 |
| 77 |
Way forward with the Event SDO |
5 |
Aug 2017 |
| 78 |
Proposal - Top Level Sighting Object |
4 |
Jul 2015 |
| 79 |
Outline of proposed 2.0 language specification development process |
4 |
Aug 2015 |
| 80 |
MTI Evaluation Criteria |
4 |
Oct 2015 |
| 81 |
next versions, frontiers, and roadmaps |
4 |
Nov 2015 |
| 82 |
RE: [cti-users] Vote NO on JSON - Vote YES on JSON-LD and here is why... |
4 |
Nov 2015 |
| 83 |
Re: [cti-stix] RE: Can we just make a little bit of progress? |
4 |
Dec 2015 |
| 84 |
Sighting, Observation, and Indicator updated |
4 |
Apr 2016 |
| 85 |
STIX, Topics to Review, 10 May |
4 |
May 2016 |
| 86 |
Finalizing the indicator labels vocab |
4 |
May 2016 |
| 87 |
Finalizing Bundle |
4 |
May 2016 |
| 88 |
Unicode, strings, and STIX |
4 |
May 2016 |
| 89 |
Versioning terminology |
4 |
May 2016 |
| 90 |
Asset TLO discussion |
4 |
Jun 2016 |
| 91 |
Small changes from 2.0 - 2.1 - dates on relationships - current consensus |
4 |
Sep 2017 |
| 92 |
Agenda for October 3 Working Call |
4 |
Oct 2017 |
| 93 |
Spec Version |
4 |
Jun 2018 |
| 94 |
The CTI STIX SC Meeting |
3 |
Jul 2015 |
| 95 |
Re: [cti-taxii] Learning the lessons of the Past (CORBA. Yes, CORBA) |
3 |
Jul 2015 |
| 96 |
Re: [cti-stix] Use Case Template |
3 |
Oct 2015 |
| 97 |
STIX 2.0 Editors - Nomination |
3 |
Oct 2015 |
| 98 |
Some thoughts on Sightings and conversations to date (Part #1): use cases for sightings |
3 |
Nov 2015 |
| 99 |
Re: [cti-users] "Data Marking" syntaxes |
3 |
Nov 2015 |
| 100 |
indicator type |
3 |
Feb 2016 |
| 101 |
Reviewing External-Reference |
3 |
Jun 2016 |
| 102 |
RE: [cti-interoperability] Weekly Interop Call |
3 |
Apr 2017 |
| 103 |
Re: [cti-stix] Small changes from 2.0 - 2.1 - add relationship from indicator to vulnerability |
3 |
Sep 2017 |
| 104 |
Relationships in MISP objects and compatibility with STIX 2.0 (and future version) |
3 |
Sep 2017 |
| 105 |
Question |
3 |
Oct 2017 |
| 106 |
External References |
3 |
Jul 2018 |
| 107 |
Proposal - Simplify Data Model |
2 |
Jul 2015 |
| 108 |
A TAXII v2.0 Proposal with STIX implications |
2 |
Aug 2015 |
| 109 |
STIX v1.2.1 specification now ready for STIX SC review -- Review period ends October 2, 2015 |
2 |
Sep 2015 |
| 110 |
Re: [cti-users] Publication of another threat intelligence standard: Open Threat Partner eXchange (OpenTPX) |
2 |
Oct 2015 |
| 111 |
REMINDER: TODAY'S STIX SC MEETING IS AT 4:00PM EDT |
2 |
Oct 2015 |
| 112 |
RFI: MITRE Analysis and Assessment Vocabulary |
2 |
Oct 2015 |
| 113 |
Use cases |
2 |
Oct 2015 |
| 114 |
A couple steps to help us in prioritizing Issues but still get stuff done |
2 |
Oct 2015 |
| 115 |
Sightings Object |
2 |
Nov 2015 |
| 116 |
cti-stats update |
2 |
Nov 2015 |
| 117 |
Um.. which issues list are we using? |
2 |
Dec 2015 |
| 118 |
Timestamps text |
2 |
May 2016 |
| 119 |
Motion for ballot to approve custom properties |
2 |
May 2016 |
| 120 |
Report object |
2 |
May 2016 |
| 121 |
Working Call Agenda Sept 12 |
2 |
Sep 2017 |
| 122 |
STIX COA mini group F2F |
2 |
Sep 2017 |
| 123 |
CaRT Format for sending malware in STIX2 |
2 |
Oct 2017 |
| 124 |
Re: [cti] RE: [cti-interoperability] Re: [EXT] [cti-interoperability] STIX Preferred Documents For Review/Comments |
2 |
Aug 2018 |
| 125 |
CTI STIX SC Kickoff Meeting today |
1 |
Jul 2015 |
| 126 |
Groups - CTI STIX SC Kickoff Meeting (July 2015) Slide deck uploaded |
1 |
Jul 2015 |
| 127 |
Test |
1 |
Aug 2015 |
| 128 |
BlackHat/DefCon availIbilty |
1 |
Aug 2015 |
| 129 |
Month CTI STIX SC meeting - 8/19/2015 @ 2pm EDT |
1 |
Aug 2015 |
| 130 |
Starter Document for STIX Version 1.2.1 XML Binding Specification Version 1.0 |
1 |
Aug 2015 |
| 131 |
STIX interop in RSA 2016 ? |
1 |
Sep 2015 |
| 132 |
Re: [cti-stix] Embedded Content vs Referenced Content |
1 |
Sep 2015 |
| 133 |
STIX SC Monthly Meeting for September - Reschedule |
1 |
Sep 2015 |
| 134 |
Groups - stix-v1.2.1-specification-draft-for-SC-review uploaded |
1 |
Sep 2015 |
| 135 |
Use Case Template |
1 |
Oct 2015 |
| 136 |
STIX v1.2.1 Status Update |
1 |
Oct 2015 |
| 137 |
**PLEASE NOTE THE TIME CHANGE FOR THE OCTOBER STIX SC MEETING THIS WEEK** It is now 4:00pm EDT (UTC-4) on Wed 10/21/15 |
1 |
Oct 2015 |
| 138 |
Re: [cti-stix] REMINDER: TODAY'S STIX SC MEETING IS AT 4:00PM EDT (new meeting ID and link enclosed) |
1 |
Oct 2015 |
| 139 |
Slides for today's STIX SC meeting |
1 |
Oct 2015 |
| 140 |
STIX SC October 2015 Meeting Minutes |
1 |
Oct 2015 |
| 141 |
Top-level relationships |
1 |
Oct 2015 |
| 142 |
COA Vulnerability Handling Guidance Link |
1 |
Oct 2015 |
| 143 |
URGENT: Please case your votes for [cti] Ballots for STIX v.1.2.1 and TAXII v1.1.1 as CSDs |
1 |
Nov 2015 |
| 144 |
Conceptual threat/risk models and CTI/STIX |
1 |
Nov 2015 |
| 145 |
REMINDER: Today's STIX SC mtg is at 4:00 pm Eastern (NOT at 2:00pm Eastern) |
1 |
Nov 2015 |
| 146 |
Google Calendar Tip for OASIS CTI Meetings |
1 |
Nov 2015 |
| 147 |
Why low-level and high-level info is important |
1 |
Nov 2015 |
| 148 |
timestamp discussion |
1 |
Nov 2015 |
| 149 |
Use cases.... |
1 |
Dec 2015 |
| 150 |
UML CTI STIX and Conceptual threat/risk models |
1 |
Dec 2015 |
| 151 |
CTI STIX SC Monthly Meeting |
1 |
Dec 2015 |
| 152 |
STIX 2.0 Proposal1 : Extend core constructs from a single base class (#148) |
1 |
Dec 2015 |
| 153 |
STIX 2.0 Proposal3: Add Alternative_IDs to all top level objects (#358, #187) |
1 |
Dec 2015 |
| 154 |
STIX 2.0 Proposal5 : Abstract Source to top level construct rather than embedded only within other constructs (#233) |
1 |
Dec 2015 |
| 155 |
Recap of STIX SC December monthly meeting call: STIX 2.0 Round 1 Strawman proposals |
1 |
Dec 2015 |
| 156 |
Relationships Proposal (Two Birds with One Stone) |
1 |
Jan 2016 |
| 157 |
Update on STIX/CyboX issues |
1 |
Jan 2016 |
| 158 |
STIX 2.0 Visualizer |
1 |
Feb 2016 |
| 159 |
Cancelled: CTI STIX SC Monthly Meeting |
1 |
Feb 2016 |
| 160 |
Undefined Fields |
1 |
Feb 2016 |
| 161 |
Vendor Defined Fields |
1 |
Feb 2016 |
| 162 |
Call for Nominations for STIX Co-Chair |
1 |
Apr 2016 |
| 163 |
Groups - STIX 2.0 Pre-draft Documents v0.1 uploaded |
1 |
Apr 2016 |
| 164 |
Authors needed! |
1 |
Apr 2016 |
| 165 |
STIX Specs, 27 April 2016 |
1 |
Apr 2016 |
| 166 |
Formalizing Consensus - Identifier, Timestamp, Timestamp Precision, and Custom Properties |
1 |
Apr 2016 |
| 167 |
STIX Minigroups/Activity |
1 |
May 2016 |
| 168 |
TTP Live Discussion - Doodle Poll |
1 |
May 2016 |
| 169 |
Moved to Working Draft: Timestamp and Timestamp Precision |
1 |
May 2016 |
| 170 |
Identifier Proposal Ballot |
1 |
May 2016 |
| 171 |
Please vote |
1 |
May 2016 |
| 172 |
A number of STIX 2.0 items up for formal review |
1 |
May 2016 |
| 173 |
Agenda |
1 |
May 2016 |
| 174 |
Document Maintenance |
1 |
May 2016 |
| 175 |
CTI F2F -- September in Brussels |
1 |
May 2016 |
| 176 |
More document cleanup |
1 |
May 2016 |
| 177 |
5/31 Working Call Agenda |
1 |
May 2016 |
| 178 |
External ID/References in STIX |
1 |
May 2016 |
| 179 |
Action items & topics, 5/31 Working Call |
1 |
May 2016 |
| 180 |
STIX Topic Status |
1 |
Jun 2016 |
| 181 |
Title in Particular, Strings in General |
1 |
Jun 2016 |
| 182 |
Re: [cti-stix] STIX motion of unanimous consent |
1 |
Jun 2016 |
| 183 |
6/10 Status Update |
1 |
Jun 2016 |
| 184 |
Opinion Object Proposal |
1 |
Jun 2016 |
| 185 |
version_comment field |
1 |
Aug 2016 |
| 186 |
Re: [cti-stix] RE: STIX 2.0 Specification Questions |
1 |
Aug 2016 |
| 187 |
Re: [cti-stix] Moving forward with first_seen and last_seen |
1 |
Dec 2016 |
| 188 |
Interoperability Specification Part 1 Draft 2 Ready for Review |
1 |
Apr 2017 |
| 189 |
Fwd: STIX 2.1: Adding IEP Framework to STIX 2.1 |
1 |
Apr 2017 |
| 190 |
Re: [cti-stix] Re: [EXT] Re: [cti-stix] Small changes from 2.0 - 2.1 - dates on relationships |
1 |
Sep 2017 |
| 191 |
Small changes from 2.0 - 2.1 - Add a normative requirement for timestamps - current consensus |
1 |
Sep 2017 |
| 192 |
Small changes from 2.0 - 2.1 - add relationship from indicator to vulnerability - current consensus |
1 |
Sep 2017 |
| 193 |
Interop Call Agenda 9/6 |
1 |
Sep 2017 |
| 194 |
[cti-interoperability] Interop Weekly Meeting (starting 6th Sept 2017) |
1 |
Sep 2017 |
| 195 |
Re: [cti-stix] Infrastructure |
1 |
Sep 2017 |
| 196 |
Classification Proposal |
1 |
Sep 2017 |
| 197 |
Event proposals |
1 |
Sep 2017 |
| 198 |
COA mini group call |
1 |
Sep 2017 |
| 199 |
STIX/TAXII Interop Call Agenda 9/27th |
1 |
Sep 2017 |
| 200 |
Agenda for upcoming working calls |
1 |
Oct 2017 |
