cti-stix-elevator icon indicating copy to clipboard operation
cti-stix-elevator copied to clipboard

Handle Related Objects of Observables

Open rpiazza opened this issue 8 years ago • 3 comments

In STIX 1.x, observable objects can be related to other object which appear in other Observables.

In general, relationships between cyber observables are not supported in STIX 2.0, but there are some cases (domain_name related to an ip_address via the "resolved_to" relationship) that we might want to not just ignore

rpiazza avatar Nov 23 '16 15:11 rpiazza

+1 for properly converting domain_name -> resolved_to ->ip_address .

clenk avatar Oct 17 '17 20:10 clenk

I have added the general mechanism to deal with related objects, but it only works for patterns and only for attachments and resolved-to relationships. See #97.

rpiazza avatar Apr 03 '18 14:04 rpiazza

Need to do this for all other relationships. Only a few can be represented in STIX 2.0

rpiazza avatar Apr 05 '18 13:04 rpiazza