Heads up! These docs are for STIX 1.1.1, which is not the latest version (1.2). View the latest!

StreamObjectTypeWin File Object Schema

The StreamObjectType type is intended to characterize NTFS alternate data streams.

Fields

Field Name Type Description
Hash1..n HashType

The Hash field specifies a single calculated hash value.
Name0..1 StringObjectPropertyType

The Name field specifies the name of the alternate data stream.
Size_In_Bytes0..1 UnsignedLongObjectPropertyType

The Size_In_Bytes field specifies the size of the alternate data stream, in bytes.