Heads up! These docs are for STIX 1.1, which is not the latest version (1.2). View the latest!

StatementTypeSTIX Common Schema

StatementType allows the expression of a statement with an associated value, description, source, confidence, and timestamp.


Fields

Field Name Type Description
@timestampoptional dateTime

Specifies the time this statement was asserted.

In order to avoid ambiguity, it is strongly suggest that all timestamps include a specification of the timezone if it is known.

@timestamp_precisionoptional DateTimePrecisionEnum

Represents the precision of the associated timestamp value. If omitted, the default is "second", meaning the timestamp is precise to the full field value. Digits in the timestamp that are required by the xs:dateTime datatype but are beyond the specified precision should be zeroed out.

Value0..1 ControlledVocabularyStringType

Specifies a value characterizing the statement within some vocabulary.

This field is implemented through the xsi:type controlled vocabulary extension mechanism. The default vocabulary may be provided by the field using this construct. If that's the case, the schema annotations on that element will describe which vocabulary to use. If not, the default vocabulary is HighMediumLowVocab-1.0 in the http://stix.mitre.org/default_vocabularies-1 namespace. This type is defined in the stix_default_vocabularies.xsd file or at the URL http://stix.mitre.org/XMLSchema/default_vocabularies/1.1.0/stix_default_vocabularies.xsd.

Users may also define their own vocabulary using the type extension mechanism, specify a vocabulary name and reference using the attributes, or simply use this as a string field.

Description0..1 StructuredTextType

Specifies a prose description of the statement.

Source0..1 ControlledVocabularyStringType

The Source field captures the source of this statement. An optional vocabulary name and reference allows the expression of the source name in some given vocabulary context.

This field is implemented through the xsi:type controlled vocabulary extension mechanism. No default vocabulary type has been defined for STIX 1.0. Users may either define their own vocabulary using the type extension mechanism, specify a vocabulary name and reference using the attributes, or simply use this as a free string field.

Confidence0..1 ConfidenceType

The Confidence field characterizes the level of confidence held in the statement.