Maturity: Account Object

Maturity Spectrum Rationale

Semantic Consensus: Medium

There are some unresolved questions around the scope of the Account Object, specifically relating to the types of accounts it is intended to characterize. While it says "generic" accounts, this has the possibility of extending to a WIDE range accounts, including those not typically considered as being part of the cyber realm, such as bank accounts. Also, the "Domain" field is really a Windows-specific property, so it is odd that is part of a generic Account Object.

Accordingly, the question needs to be asked: do we really need a generic account Object? Anecdotally, all usage of Account-related Objects in CybOX has been through the User Account Object, so the purpose of the generic Account Object seems to be more to provide a base class that can be extended than anything else.

Semantic Completeness: Medium

Depending on the agreed upon scope of the Account Object, there is the possibility of it having additional fields.

Existing Use: Low

No documented direct use (only its subclasses, like the User Account Object, are known to be used).