What I make of it
Major gap — the threat-intelligence data model.
STIX / TAXII
Information Model
Security
openly published
The OASIS Cyber Threat Intelligence (CTI) TC supports automated information sharing for cybersecurity situational awareness, real-time network defense, and sophisticated threat analysis....
Other security data models
CACAO Security Playbooks (Collaborative Automated Course of Action Operations)
Information Model
CSAF (Common Security Advisory Framework)
Exchange Schema
CycloneDX
Information Model
IODEF (RFC 7970)
Exchange Schema
KMIP (Key Management Interoperability Protocol)
Information Model
MISP core format (Malware Information Sharing Platform)
Exchange Schema
OCSF (Open Cybersecurity Schema Framework)
Information Model
OpenC2
Exchange Schema
OSV Schema (Open Source Vulnerability)
Exchange Schema
SCAP (Security Content Automation Protocol)
Information Model
Sigma detection rules
Exchange Schema
SPDX
Information Model