Opened this issue a month ago · 2 comments
https://docs.oasis-open.org/cti/stix/v2.1/csprd01/stix-v2.1-csprd01.html#_Toc16070680
I'm thinking d3f:EmailAddress, d3f:MACAddress, d3f:RasterImageFile, and maybe subclasses of d3f:IPAddress (d3f:IPV4Address and d3f:IPV6Address) might make sense to me. Any others?
https://schema.ocsf.io/1.3.0/objects/observable