[hybrid-analysis-sandbox] error when adding relationships with observables after analysis about connectors HOT 3 OPEN

"Communicates-with" is a relation used in the context of the "Infrastructure" SDO that we will not use for the moment here.

An URL should be associated to a domain-name (possibly the related-to relationship, as I do not see specific one). And a domaine-name can be associated with multiple SCO like IP adresses with "resolve-to" relationship.

from connectors.

Ok!
So a URL is related-to a domain name
What about Url -> IPv4? (Not Domain-Name -> IPv4)
Url -> IPv6 also?

In the STIX spec, no relation is specified between these two objects.

I noticed that there was the same issue between Url -> Attack-Pattern?

from connectors.

There is no direct relation between URL and IPv4 or v6.

Attack-pattern is a high level concept. Linking directly an URL and an Attack-pattern doesn't make sense because an URL cannot be observe in every instance of an Attack-pattern (malicious.com/something is not use in every Spear-Phishing).

from connectors.