Heads up! These docs are for STIX 1.0.1, which is not the latest version (1.2). View the latest!

CompositeIndicatorExpressionTypeIndicator Schema

Type for allowing content creators to create composite indicator expressions using basic boolean logic.

Fields

Field Name Type Description
@operatorrequired OperatorTypeEnum

Specifies the logical composition operator for this composite cyber threat Indicator.
Indicator0..n IndicatorType

The indicator field specifies one cyber threat indicator asserting a relationship between a cyber observable and a TTP.