Heads up! These docs are for STIX 1.0, which is not the latest version (1.2). View the latest!

InfrastructureTypeTTP Schema


Fields

Field Name Type Description
Type0..n ControlledVocabularyStringType

The Type field represents the type of infrastructure being described.

This field is implemented through the xsi:type controlled vocabulary extension mechanism. The default vocabulary type is AttackerInfrastructureTypeVocab-1.0 in the http://stix.mitre.org/default_vocabularies-1 namespace. This type is defined in the stix_default_vocabularies.xsd file or at the URL http://stix.mitre.org/XMLSchema/default_vocabularies/1.0.0/stix_default_vocabularies.xsd .

Users may also define their own vocabulary using the type extension mechanism, specify a vocabulary name and reference using the attributes, or simply use this as a string field.

Description0..1 StructuredTextType

The Description field generally describes specific classes or instances of infrastructure utilized for cyber attack.

Observable_Characterization0..1 ObservablesType

The Observable_Characterization field provides structured characterization of the cyber observables detailing specific classes or instances of infrastructure utilized for cyber attack.