The object with ID 'intrusion-set--68ba94ab-78b8-43e7-83e2-aed3466882c6' appears in both the ics-attack data as well as the enterprise-attack with the same version, however the 'x_mitre_domains' values differ.
According to STIX 2.1 specification, any change requires a new version of the object. In other words, either these objects should be exactly the same or they need to be different versions.
It appears that a simple fix would be to include both enterprise-attack and ics-attack in x_mitre_domains because it can have multiple values.
Same issue with intrusion-set--efed95ba-d7e8-47ff-8c53-99c42426ee7c, however in this case it is mobile-attack and enterprise-attack.
The object with ID 'intrusion-set--68ba94ab-78b8-43e7-83e2-aed3466882c6' appears in both the ics-attack data as well as the enterprise-attack with the same version, however the 'x_mitre_domains' values differ.
According to STIX 2.1 specification, any change requires a new version of the object. In other words, either these objects should be exactly the same or they need to be different versions.
It appears that a simple fix would be to include both enterprise-attack and ics-attack in x_mitre_domains because it can have multiple values.
Same issue with intrusion-set--efed95ba-d7e8-47ff-8c53-99c42426ee7c, however in this case it is mobile-attack and enterprise-attack.