The STIXHeaderType provides a structure for characterizing a package of STIX content.
As of STIX 1.2, the contextual fields in STIX_Header
have been deprecated. If you want to give context to set of STIX content you should use a Report. The Information_Source
field is still available and should be used to indicate the source of content that’s included in the report (in other words, it’s equivalent to setting the Information_Source
in each individual construct).
Field Name | Type | Description |
---|---|---|
Title0..1 | string |
The Title field provides a simple title for this STIX Package. DEPRECATED: This field is deprecated and will be removed in the next major version of STIX. Its use is strongly discouraged except for legacy applications. |
Package_Intent0..n | ControlledVocabularyStringType |
The Package_Intent field characterizes the intended purpose(s) or use(s) for this package of STIX content. This field is implemented through the xsi:type controlled vocabulary extension mechanism. The default vocabulary type is PackageIntentVocab-1.0 in the http://stix.mitre.org/default_vocabularies-1 namespace. This type is defined in the stix_default_vocabularies.xsd file or at the URL http://stix.mitre.org/XMLSchema/default_vocabularies/1.2.0/stix_default_vocabularies.xsd. Users may also define their own vocabulary using the type extension mechanism, specify a vocabulary name and reference using the attributes, or simply use this as a string field. DEPRECATED: This field is deprecated and will be removed in the next major version of STIX. Its use is strongly discouraged except for legacy applications. |
Description0..n | StructuredTextType |
The Description field provides a description of this package of STIX content. DEPRECATED: This field is deprecated and will be removed in the next major version of STIX. Its use is strongly discouraged except for legacy applications. |
Short_Description0..n | StructuredTextType |
The Short_Description field provides a short description of this package of STIX content. DEPRECATED: This field is deprecated and will be removed in the next major version of STIX. Its use is strongly discouraged except for legacy applications. |
Profiles0..1 | ProfilesType |
The Profiles field provides a list of profiles that the STIX_Package conforms to. |
Handling0..1 | MarkingType |
Specifies the relevant handling guidance for this STIX_Package. The valid marking scope is the nearest STIXPackageType ancestor of this Handling element and all its descendants. |
Information_Source0..1 | InformationSourceType |
The Information_Source field details the source of this entry, including time information as well as information about the producer, contributors, tools, and references. This Information_Source field applies both to the package metadata in the STIX_Header as well as individually to the contents of the STIX_Package (unless overriden by their own Information_Source field). |