Heads up! These docs are for STIX 1.1.1, which is not the latest version (1.2). View the latest!

WindowsEventObjectTypeWin Event Object Schema

The WindowsEventObjectType type is intended to characterize Windows event (synchronization) objects.


Fields

Field Name Type Description
@object_referenceoptional QName

The object_reference field specifies a unique ID reference to an Object defined elsewhere. This construct allows for the re-use of the defined Properties of one Object within another, without the need to embed the full Object in the location from which it is being referenced. Thus, this ID reference is intended to resolve to the Properties of the Object that it points to.

Custom_Properties0..1 CustomPropertiesType

The Custom_Properties construct is optional and enables the specification of a set of custom Object Properties that may not be defined in existing Properties schemas.

Handle0..1 WindowsHandleObjectType

The Handle field specifies the handle to the Windows event object. It imports and uses the WindowsHandleObjectType type from the CybOX Windows Handle object.

Name0..1 StringObjectPropertyType

The Name field specifies the name of the Windows event object.

Type0..1 WinEventType

The Type field specifies the type of the Windows event.