Heads up! These docs are for STIX 1.1, which is not the latest version (1.2). View the latest!

IndicatorsTypeSTIX Core Schema


Field Name Type Description
Indicator1..n IndicatorBaseType

Characterizes a single cyber threat Indicator.

This field is implemented through the xsi:type extension mechanism. The default and strongly recommended type is IndicatorType in the http://stix.mitre.org/Indicator-2 namespace. This type is defined in the indicator.xsd file or at the URL http://stix.mitre.org/XMLSchema/indicator/2.1/indicator.xsd.