RE: [cti-stix] FW: Suspicious Activity Object

Thanks Rich

From: Struse, Richard J. <rjs@mitre.org>
Sent: Monday, July 23, 2018 11:11 AM
To: Jason Keirstead <[email protected]>; Katz, Gary CTR DC3/TSD <[email protected]>
Cc: [email protected]
Subject: [Non-DoD Source] Re: [cti-stix] FW: Suspicious Activity Object

The link was messed up: https://docs.google.com/document/d/1I5Cgqfk1Krt9EnYJZcyTLS3c5BtZ5uqvTDXI_i7OJrU/edit

From: <[email protected]> on behalf of Jason Keirstead <[email protected]>
Date: Monday, July 23, 2018 at 10:46 AM
To: "Katz, Gary" <[email protected]>
Cc: "[email protected]" <[email protected]>
Subject: Re: [cti-stix] FW: Suspicious Activity Object

I can't access the document; are the permissions open to the public?

-
Jason Keirstead
Lead Architect - IBM Security Cloud
www.ibm.com/security

"Things may come to those who wait, but only the things left by those who hustle." - Unknown

From: "Katz, Gary CTR DC3/TSD" <[email protected]>
To: "[email protected]" <[email protected]>
Date: 07/23/2018 11:10 AM
Subject: [cti-stix] FW: Suspicious Activity Object
Sent by: <[email protected]>

It seems I was sending these emails to the wrong distro, hopefully this
works this time. Interested in everyone's thoughts

Below is a link to the Suspicious Activity Object proposal. As requested I
updated the object to use the embedded reference, similar to the Malware
proposal rather than using a relationship. Comments welcome.

https://docs.google.com/document/d/1I5Cgqfk1Krt9EnYJZcyTLS3c5BtZ5uqvTDXI_i7O
JrU/edit?usp=sharing

cti-stix message