Field Name | Type | Description |
---|---|---|
Indicator1..n | IndicatorBaseType |
Characterizes a single cyber threat Indicator. This field is implemented through the xsi:type extension mechanism. The default and strongly recommended type is IndicatorType in the http://stix.mitre.org/Indicator-2 namespace. This type is defined in the indicator.xsd file or at the URL http://stix.mitre.org/XMLSchema/indicator/2.2/indicator.xsd. |