Heads up! These docs are for STIX 1.0, which is not the latest version (1.2). View the latest!

CategoriesTypeIncident Schema

Represents a list of incident categories that an incident is tagged with.


Field Name Type Description
Category1..n ControlledVocabularyStringType

Represents a single category that this incident is tagged with.

This field is implemented through the xsi:type controlled vocabulary extension mechanism. The default vocabulary type is IncidentCategoryVocab-1.0 in the http://stix.mitre.org/default_vocabularies-1 namespace. This type is defined in the stix_default_vocabularies.xsd file or at the URL http://stix.mitre.org/XMLSchema/default_vocabularies/1.0.0/stix_default_vocabularies.xsd .

Users may also define their own vocabulary using the type extension mechanism, specify a vocabulary name and reference using the attributes, or simply use this as a string field.