You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
STIX objects with same ID and version but different data in 18.1 #69
The object with ID 'intrusion-set--68ba94ab-78b8-43e7-83e2-aed3466882c6' appears in both the ics-attack data as well as the enterprise-attack with the same version, however the 'x_mitre_domains' values differ.
According to STIX 2.1 specification, any change requires a new version of the object. In other words, either these objects should be exactly the same or they need to be different versions.
It appears that a simple fix would be to include both enterprise-attack and ics-attack in x_mitre_domains because it can have multiple values.
Same issue with intrusion-set--efed95ba-d7e8-47ff-8c53-99c42426ee7c, however in this case it is mobile-attack and enterprise-attack.
Activity