New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Do we need any text to give guidance to valid times when an Indicator is revoked #306

Open

rpiazza opened this issue Feb 1, 2023 · 1 comment

Labels

Target: STIX-2.2

Contributor

rpiazza commented Feb 1, 2023

Indicators have valid_from/valid_until properties which are meaningless if the Indicator is revoked.

In CACAO they had the following text.

If the revoked property is true then this property MUST be ignored.

Do we need this in STIX?

ejratl added Target: STIX-2.2 Need to Discuss labels

ejratl removed the Need to Discuss label

Contributor Author

rpiazza commented Mar 16, 2023

Once an object is revoked, it is invalid, so it makes sense to ignore the valid_from/valid_until properties.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment