Heads up! These docs are for STIX 1.1.1, which is not the latest version (1.2). View the latest!

ActionPoolTypeCybOX Core Schema

The ActionPoolType enables the description of CybOX Actions in a space-efficient pooled manner with the actual Observable structures defined in the CybOX schema containing references to the pooled Action elements. This reduces redundancy caused when identical Actions occur multiple times within a set of defined Observables.

Fields

Field Name Type Description
Action1..n ActionType

The Action construct enables description/specification of a single cyber observable action.