Definition[]
Cyber observables are
| “ | events or stateful properties that occur, or may occur, in the operational cyber domain, such as the value of a registry key, deletion of a file, or the receipt of an http GET.[1] | ” |
| “ | statements of fact; they capture what was observed or could be observed in the cyber operational domain.[2] | ” |