cti-stix2-json-schemas icon indicating copy to clipboard operation
cti-stix2-json-schemas copied to clipboard

Published 20 hours ago • verified publisher icon oasis-open

IP addresses can not be expressed in a defanged format

Open CyberDaedalus00 opened this issue 2 years ago • 0 comments

I was attempting to express some IPv4 addresses in a typical defanged format but received errors that it didn't match the regex for a IPv4 in CIDR format. When I looked at the regex expression, it appeared that it didn't support a common approach of encasing at least one '.' within '[' ']'. When I looked through the specification I also could not find any guidance as to how STIX 2.1 wants defanged IP addresses to be expressed.

What is the official syntax to expressing defanged IP addresses?

CyberDaedalus00 avatar Jul 07 '21 23:07 CyberDaedalus00