The EmailMessageObjectType type is intended to characterize an individual email message.
The object_reference field specifies a unique ID reference to an Object defined elsewhere. This construct allows for the re-use of the defined Properties of one Object within another, without the need to embed the full Object in the location from which it is being referenced. Thus, this ID reference is intended to resolve to the Properties of the Object that it points to.
The Custom_Properties construct is optional and enables the specification of a set of custom Object Properties that may not be defined in existing Properties schemas.
The Header field specifies a variety of common headers that may be included in the email message.
The Email_Server field is optional and specifies the relevant email server.
The Raw_Body field specifies the complete (raw) body of the email message.
The Raw_Header field specifies the complete (raw) headers of the email message.
The Attachments field specifies any files that were attached to the email message. It imports and uses the CybOX FileObjectType from the File_Object to do so.
The Links field specifies any URL links contained within the email message. It imports and uses the CybOX LinkObjectType from the Link_Object to do so.