From 10f19d39d3c3faf377c089da623a9b7c71a92689 Mon Sep 17 00:00:00 2001 From: Frank Xu Date: Tue, 26 Jan 2021 11:15:39 -0500 Subject: [PATCH] add stix --- STIX_external_reference/readme.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/STIX_external_reference/readme.md b/STIX_external_reference/readme.md index e355f6b..8b82cf2 100644 --- a/STIX_external_reference/readme.md +++ b/STIX_external_reference/readme.md @@ -1,8 +1,8 @@ # Cyber-observable Objects for Digital Forensics -## The goal of the project is to create a list of customized STIX™ Cyber-observable Objects for facilitating digital forensic investigations. We follow the STIX specification for [customizing objects] (https://docs.oasis-open.org/cti/stix/v2.1/cs01/stix-v2.1-cs01.html#_p2sz1mp7z524). The most important rule to create a new object type is: +### The goal of the project is to create a list of customized STIX™ Cyber-observable Objects for facilitating digital forensic investigations. We follow the STIX specification for [customizing objects] (https://docs.oasis-open.org/cti/stix/v2.1/cs01/stix-v2.1-cs01.html#_p2sz1mp7z524). The most important rule to create a new object type is: -- The value of the type property in a Custom Object SHOULD start with “x-” followed by a source unique identifier (like a domain name with dots replaced by hyphens),
a hyphen and then the name. For example, x-example-com-customobject. +- The value of the type property in a Custom Object SHOULD start with “x-” followed by a source unique identifier (like a domain name with dots replaced by hyphens), a hyphen and then the name. For example, x-example-com-customobject. ---