Heads up! These docs are for STIX 1.0.1, which is not the latest version (1.2). View the latest!

AttackPatternTypeTTP Schema

Captures prose information about an individual attack pattern as well as a CAPEC reference.

In addition to capturing basic information, this type is intended to be extended to enable the structured description of an attack pattern instance using the XML Schema extension feature. The STIX default extension uses the Common Attack Pattern Enumeration and Classification (CAPEC) schema to do so. The extension that defines this is captured in the CAPEC2.5InstanceType in the http://stix.mitre.org/extensions/AP#CAPEC2.5-1 namespace. This type is defined in the extensions/attack_pattern/capec_2.5.xsd file or at the URL http://stix.mitre.org/XMLSchema/extensions/attack_pattern/capec_2.5/1.0/capec_2.5.xsd.


Fields

Field Name Type Description
@capec_idoptional @capec_idInlineType

This field specifies a reference to a particular entry within the Common Attack Pattern Enumeration and Classification (CAPEC)

Description0..1 StructuredTextType

The Description field provides an unstructured description of an individual Attack Pattern.