RelatedTTPTypeSTIX Common Schema

Identifies or characterizes a relationship to an TTP.


Fields

Field Name Type Description
Confidence0..1 ConfidenceType

The confidence field specifies the level of confidence in the assertion of the relationship between the two components.

Information_Source0..1 InformationSourceType

The Information_Source field specifies the source of the information about the relationship between the two components.

Relationship0..1 ControlledVocabularyStringType

The relationship field characterizes the type of the relationship between the two components.

This field is implemented through the xsi:type controlled vocabulary extension mechanism. No default vocabulary type has been defined for STIX 1.2. Users may either define their own vocabulary using the type extension mechanism, specify a vocabulary name and reference using the attributes, or simply use this as a free string field.

TTP1..1 TTPBaseType

A reference to or representation of the related TTP.

This field is implemented through the xsi:type extension mechanism. The default and strongly recommended type is TTPType in the http://stix.mitre.org/TTP-1 namespace. This type is defined in the ttp.xsd file or at the URL http://stix.mitre.org/XMLSchema/ttp/1.2/ttp.xsd.