Skip to content

Do we need any text to give guidance to valid times when an Indicator is revoked #306

@rpiazza

Description

@rpiazza

Indicators have valid_from/valid_until properties which are meaningless if the Indicator is revoked.

In CACAO they had the following text.

If the revoked property is true then this property MUST be ignored.

Do we need this in STIX?

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions