< Return to Ballot details

Vote Details

Ballot: Identifier Proposal
Company:
DHS Office of Cybersecurity and Communicat...
Vote:
Abstain
Comment:
From my understanding, I might be incorrect, the passing of this non-binding ballot places the TC in a situation where it is possible to have multiple STIX top-level objects with the exact same data having different identifiers.
Examples:
{
"type":"indicator",
"id":"indicator--e2e1a340-4415-4ba8-9671-f7343fbf0863",
"pattern":"file-object:name MATCHES /^.+\.exe$/"
}

{
"type":"indicator",
"id":"indicator--e2e1a340-4415-4ba8-9671-f7343fbf0386",
"pattern":"file-object:name MATCHES /^.+\.exe$/"
}

{
"type":"indicator",
"id":"indicator--e2e1a340-4415-4ba8-9671-f7343fbf0638",
"pattern":"file-object:name MATCHES /^.+\.exe$/"
}

Is this something that the TC wants?