Machine Readable Behavior Objects for Cyber Defense
To improve information sharing, the cyber defense community needs to move beyond indicator sharing focused on detections of individual attacks, towards the sharing of machine-readable descriptions of attacker behaviors that span multiple attacks, as described in this video.