Heads up! These docs are for STIX 1.1.1, which is not the latest version (1.2). View the latest!

EmailMessageObjectTypeEmail Message Object Schema

The EmailMessageObjectType type is intended to characterize an individual email message.


Field Name Type Description
@object_referenceoptional QName

The object_reference field specifies a unique ID reference to an Object defined elsewhere. This construct allows for the re-use of the defined Properties of one Object within another, without the need to embed the full Object in the location from which it is being referenced. Thus, this ID reference is intended to resolve to the Properties of the Object that it points to.

Custom_Properties0..1 CustomPropertiesType

The Custom_Properties construct is optional and enables the specification of a set of custom Object Properties that may not be defined in existing Properties schemas.

Header0..1 EmailHeaderType

The Header field specifies a variety of common headers that may be included in the email message.

Email_Server0..1 StringObjectPropertyType

The Email_Server field is optional and specifies the relevant email server.

Raw_Body0..1 StringObjectPropertyType

The Raw_Body field specifies the complete (raw) body of the email message.

Raw_Header0..1 StringObjectPropertyType

The Raw_Header field specifies the complete (raw) headers of the email message.

Attachments0..1 AttachmentsType

The Attachments field specifies any files that were attached to the email message. It imports and uses the CybOX FileObjectType from the File_Object to do so.

Links0..1 LinksType

The Links field specifies any URL links contained within the email message. It imports and uses the CybOX LinkObjectType from the Link_Object to do so.