The `lang` property represents the language of the translatable text content inside a STIX Object (or Data Marking). That property could either be required for most objects (vote YES) or recommended for most objects (vote NO). Regardless of the ballot, `lang` will not be required on observed-data, sighting, and bundle because there is no translatable text content on those objects.
The objects currently in STIX where the lang property would be required (or recommended) are: Attack Pattern, Campaign, Course of Action, Identity, Indicator, Intrusion Set, Malware, Report, Threat Actor, Tool, Vulnerability, Relationship, and Data Marking. Pending finalization, Intel Note, Opinion, Location, Infrastructure, and Event would also have a required (or recommended) `lang` property (assuming in their final state they include translatable text fields).
Responses:
“Yes (lang is required in most cases)”
“No (lang is recommended in most cases)” |
