The IncidentStatusVocab is the default STIX vocabulary for expressing the status of an incident.
Item | Description |
---|---|
New | |
Open | |
Stalled | |
Containment Achieved | |
Restoration Achieved | |
Incident Reported | |
Closed | |
Rejected | |
Deleted |
Field Name | Type | Description |
---|---|---|
@vocab_nameoptional | string |
The vocab_name field specifies the name of the controlled vocabulary. |
@vocab_referenceoptional | anyURI |
The vocab_reference field specifies the URI to the location of where the controlled vocabulary is defined, e.g., in an externally located XML schema file. |