Comments (3)
JasonKeirstead
commented on August 17, 2024
I will submit a proposal for this.
from cti-taxii2.
MarkDavidson
commented on August 17, 2024
Recommendation:
- If Jason has a 5-minute-ish proposal, review at F2F
- Otherwise, discuss scope and goals at F2F
from cti-taxii2.
JasonKeirstead
commented on August 17, 2024
The basic use cases for query by an analyst in my mind are this… in priority order…
a) Find indicators that will match this observation
b) Find observations that match this indicator pattern
c) Find nodes with this combination of properties (we kind of have this today)
d) Find relationships to/from these node(s)
e) (b) except with substring matches
f) Graph traversal queries ( ie tell me if A and B are connected, and if so, return the path(s) )
If we had this I think we would have > 95% coverage of anything needed to build a robust UI for an analyst
from cti-taxii2.
Related Issues (20)
- Rename the spec_versions url filter parameter to be singular HOT 1
- Make the TAXII Envelope contain a list of objects not a bundle HOT 2
- Add text to explain status counts when server has yet to start processing request HOT 1
- Consider renaming the status value of pending to processing HOT 1
- What is the purpose of Discovery API roots having different domains in the list of api_roots ? HOT 2
- API Root Resource does not define the URL of the resource? HOT 2
- Typo in url prop of section 5.4 HOT 2
- Change integer to be 54 bits in size per RFC 7493 HOT 1
- If collections permission has false for CanRead and CanWrite, does user have permissions to see existence of Collection?
- RFE: Add additional Supported Fields to TAXII Filtering HOT 1
- Potential confusion with errors when adding duplicate objects
- Potential Confusion on Get Object Manifests
- Potentially misleading table in TAXII spec
- Typos in the TAXII spec
- Manifest & Versions Resource missing `next` Property HOT 1
- Additional URL query parameters
- Match field formatting
- "Incorrect" Spelling
- TAXII filtering is ambiguous when handling spec_version and version match fields
- Advanced filtering capability
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from cti-taxii2.