Re: [cti] CybOX Datatype Refactoring/Deprecation

Now that we’ve voted to not support defanging, the question remains as to whether we should support obfuscation and capture of observed encoding on CybOX Object fields:

Obfuscation example:  or . Also used for URLs. 

Observed encoding: utf-8, etc. Mostly relevant for malware analysis and attribution, e.g., if an actor is known to use a particular encoding in their comment strings.

Regards,

Ivan