The IncidentStatusVocab is the default STIX vocabulary for expressing the status of an incident.
| Item | Description |
|---|---|
| New | |
| Open | |
| Stalled | |
| Containment Achieved | |
| Restoration Achieved | |
| Incident Reported | |
| Closed | |
| Rejected | |
| Deleted |
| Field Name | Type | Description |
|---|---|---|
| @vocab_nameoptional | string |
The vocab_name field specifies the name of the controlled vocabulary. |
| @vocab_referenceoptional | anyURI |
The vocab_reference field specifies the URI to the location of where the controlled vocabulary is defined, e.g., in an externally located XML schema file. |