-
Notifications
You must be signed in to change notification settings - Fork 16
Open
Description
How do we handle this use case?
I have an existing MAEC document which contains the analysis of malware X, and I want to refer to it from a STIX document - but I don't want to copy the whole document into the <ttp:Malware_Instance xsi:type="stix-maec:MAEC4.1InstanceType"> entry.
Ivan suggested perhaps we need a PackageReferenceType in MAEC that could be used for this purpose.