Problem to Solve

We use it for selecting observable at SOC level: filter out observables which are too old.

Current Workaround

N/A

Proposed Solution

Calculate an expiration date based on:

• the last observed date
• the type of observable (e.g. IP, domain, URL, etc)
• the TLP

CERT-EU can propose a logic

Additional Information

N/A