COATakenTypeIncident Schema

Fields

Field Name Type Description
Time0..1 COATimeType

The Time field specifies the relative time criteria for this taken CourseOfAction.
Contributors0..1 ContributorsType

The Contributors field specifies contributing actors for the CourseOfAction taken.
Course_Of_Action0..1 CourseOfActionBaseType

The Course_Of_Action field specifies the actual CourseOfAction taken.

This field is implemented through the xsi:type extension mechanism. The default and strongly recommended type is CourseOfActionType in the http://stix.mitre.org/CourseOfAction-1 namespace. This type is defined in the course_of_action.xsd file or at the URL http://stix.mitre.org/XMLSchema/course_of_action/1.1/course_of_action.xsd.