Heads up! These docs are for STIX 1.1.1, which is not the latest version (1.2). View the latest!

ToolsTypeTTP Schema


Fields

Field Name Type Description
Tool1..n ToolInformationType

The Tool field specifies a single Tool leveraged by this TTP item.

The Type field under this field is implemented through the xsi:type controlled vocabulary extension mechanism. The default vocabulary type is AttackerToolTypeVocab-1.0 in the http://stix.mitre.org/default_vocabularies-1 namespace. This type is defined in the stix_default_vocabularies.xsd file or at the URL http://stix.mitre.org/XMLSchema/default_vocabularies/1.1.1/stix_default_vocabularies.xsd.

Users may also define their own vocabulary using the type extension mechanism, specify a vocabulary name and reference using the attributes, or simply use this as a string field.