Maturity: Observable (instance)

Maturity Spectrum Rationale

Semantic Consensus: High

No known semantic issues; the general concept of Observable instances (i.e., representing something that was observed in the cyber domain) seems to be well understood.

Semantic Completeness: High

Generally thought of as complete; describes "what" was seen, "when" it was seen, "who" made the observation, and "where" the observation was made.

Existing Use: High

Used prominently in STIX and accordingly many existing implementations, particularly as a means of reporting sightings.