Heads up! These docs are for STIX 1.0, which is not the latest version (1.2). View the latest!

IncidentsTypeSTIX Core Schema


Field Name Type Description
Incident1..n IncidentBaseType

Identifies or characterizes a single cyber threat Incident.

This field is implemented through the xsi:type extension mechanism. The default and strongly recommended type is IncidentType in the http://stix.mitre.org/Incident-1 namespace. This type is defined in the incident.xsd file or at the URL http://stix.mitre.org/XMLSchema/incident/1.0/incident.xsd.