The ActionPoolType enables the description of CybOX Actions in a space-efficient pooled manner with the actual Observable structures defined in the CybOX schema containing references to the pooled Action elements. This reduces redundancy caused when identical Actions occur multiple times within a set of defined Observables.
Field Name | Type | Description |
---|---|---|
Action1..n | ActionType |
The Action construct enables description/specification of a single cyber observable action. |