Heads up! These docs are for STIX 1.0, which is not the latest version (1.2). View the latest!

IncidentsTypeSTIX Core Schema


Fields

Field Name Type Description
Incident1..n IncidentBaseType

Identifies or characterizes a single cyber threat Incident.

This field is implemented through the xsi:type extension mechanism. The default and strongly recommended type is IncidentType in the http://stix.mitre.org/Incident-1 namespace. This type is defined in the incident.xsd file or at the URL http://stix.mitre.org/XMLSchema/incident/1.0/incident.xsd.