{"action":"closed","issue":{"url":"https://api.github.com/repos/MAECProject/schemas/issues/94","labels_url":"https://api.github.com/repos/MAECProject/schemas/issues/94/labels{/name}","comments_url":"https://api.github.com/repos/MAECProject/schemas/issues/94/comments","events_url":"https://api.github.com/repos/MAECProject/schemas/issues/94/events","html_url":"https://github.com/MAECProject/schemas/issues/94","id":58128049,"number":94,"title":"Clarify Observed vs. Known Findings Bundles","user":{"login":"ikiril01","id":1538202,"avatar_url":"https://avatars.githubusercontent.com/u/1538202?v=3","gravatar_id":"","url":"https://api.github.com/users/ikiril01","html_url":"https://github.com/ikiril01","followers_url":"https://api.github.com/users/ikiril01/followers","following_url":"https://api.github.com/users/ikiril01/following{/other_user}","gists_url":"https://api.github.com/users/ikiril01/gists{/gist_id}","starred_url":"https://api.github.com/users/ikiril01/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ikiril01/subscriptions","organizations_url":"https://api.github.com/users/ikiril01/orgs","repos_url":"https://api.github.com/users/ikiril01/repos","events_url":"https://api.github.com/users/ikiril01/events{/privacy}","received_events_url":"https://api.github.com/users/ikiril01/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/MAECProject/schemas/labels/Com-Bundle","name":"Com-Bundle","color":"4d3333"},{"url":"https://api.github.com/repos/MAECProject/schemas/labels/Modify%20Type","name":"Modify Type","color":"f7c6c7"},{"url":"https://api.github.com/repos/MAECProject/schemas/labels/Pri-Low","name":"Pri-Low","color":"02e10c"}],"state":"closed","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/MAECProject/schemas/milestones/4","html_url":"https://github.com/MAECProject/schemas/milestones/MAEC%205.0","labels_url":"https://api.github.com/repos/MAECProject/schemas/milestones/4/labels","id":709472,"number":4,"title":"MAEC 5.0","description":"The next major release of MAEC, with backwards-compatibility breaking changes. Actual changes list TBD.","creator":{"login":"ikiril01","id":1538202,"avatar_url":"https://avatars.githubusercontent.com/u/1538202?v=3","gravatar_id":"","url":"https://api.github.com/users/ikiril01","html_url":"https://github.com/ikiril01","followers_url":"https://api.github.com/users/ikiril01/followers","following_url":"https://api.github.com/users/ikiril01/following{/other_user}","gists_url":"https://api.github.com/users/ikiril01/gists{/gist_id}","starred_url":"https://api.github.com/users/ikiril01/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ikiril01/subscriptions","organizations_url":"https://api.github.com/users/ikiril01/orgs","repos_url":"https://api.github.com/users/ikiril01/repos","events_url":"https://api.github.com/users/ikiril01/events{/privacy}","received_events_url":"https://api.github.com/users/ikiril01/received_events","type":"User","site_admin":false},"open_issues":46,"closed_issues":5,"state":"open","created_at":"2014-07-03T14:57:48Z","updated_at":"2015-04-10T19:18:57Z","due_on":"2015-08-14T04:00:00Z","closed_at":null},"comments":2,"created_at":"2015-02-18T21:07:01Z","updated_at":"2015-04-10T19:18:57Z","closed_at":"2015-04-10T19:18:57Z","body":"We should consider adding the ability to specify whether a Findings Bundle, represents some set of data about a malware instance that was \"observed\" as part of an analysis run, or represents data that was derived or is otherwise \"known\". This mostly relevant to dynamic entities such as Actions and Behaviors, where currently this distinction is a little ambiguous (although implicit if a Findings Bundle is referenced in a corresponding Analysis)."}}