Re: [cti] Slides for tomorrow's call

CTI-TC Working Group Meeting

Meeting Date: October 15, 2019

Time: 19:00 UTC

Purpose: Working group meeting on STIX/TAXII

Attendees:
  - not captured in these notes

Action Items
- [John Mark] provide concrete example/counterexample for patterning text
- [Bret] clarify text on pagination
- [John Mark] provide text for security considerations on taxii pagination (next param)
- [Bret and Rich] work on pattern property descriptions; move to a vocab section

Meeting Notes

Review agenda
  - review taxii changes
  - review stix changes
  - sponsorship

TAXII Changes
  - removing stix media type (drop bundle, use envelope)
    - see TAXII 2.1 WD09 if you want to review (link?)
  - reviewed pagination additions
    - handling multiple records with same date added timestamp
      - section 3.4, 3.5, 3.7 to review
    - can we remove x-headers?
      - can pagination with 'next' be optional
      - removing x-headers; deprecate range pagination
        - 2 yes
      - leave x-headers in spec
        - 5 yes
          - 10 abstained
    - who would support making these changes to taxii 2.1 to support multi-date records
      - 9 yes
      - 1 no
      - 7 abstained
  - discuss/clarify next parameter and returning servers data

STIX Changes
  - Patterning observation expressiones, concrete example to be added before decision is made
  - indicator property changes
    - pattern_versions wording will be discussed further

Town Hall Meetings
- office hours / town hall for cti users group

TAXII Sponsorhip
  - pagination
    - next, limit, envelope