STIXHeaderTypeSTIX Core Schema

The STIXHeaderType provides a structure for characterizing a package of STIX content.


Suggested Practices

As of STIX 1.2, the contextual fields in STIX_Header have been deprecated. If you want to give context to set of STIX content you should use a Report. The Information_Source field is still available and should be used to indicate the source of content that’s included in the report (in other words, it’s equivalent to setting the Information_Source in each individual construct).


Fields

Field Name Type Description
Title0..1 string

The Title field provides a simple title for this STIX Package.

DEPRECATED: This field is deprecated and will be removed in the next major version of STIX. Its use is strongly discouraged except for legacy applications.

Package_Intent0..n ControlledVocabularyStringType

The Package_Intent field characterizes the intended purpose(s) or use(s) for this package of STIX content.

This field is implemented through the xsi:type controlled vocabulary extension mechanism. The default vocabulary type is PackageIntentVocab-1.0 in the http://stix.mitre.org/default_vocabularies-1 namespace. This type is defined in the stix_default_vocabularies.xsd file or at the URL http://stix.mitre.org/XMLSchema/default_vocabularies/1.2.0/stix_default_vocabularies.xsd.

Users may also define their own vocabulary using the type extension mechanism, specify a vocabulary name and reference using the attributes, or simply use this as a string field.

DEPRECATED: This field is deprecated and will be removed in the next major version of STIX. Its use is strongly discouraged except for legacy applications.

Description0..n StructuredTextType

The Description field provides a description of this package of STIX content.

DEPRECATED: This field is deprecated and will be removed in the next major version of STIX. Its use is strongly discouraged except for legacy applications.

Short_Description0..n StructuredTextType

The Short_Description field provides a short description of this package of STIX content.

DEPRECATED: This field is deprecated and will be removed in the next major version of STIX. Its use is strongly discouraged except for legacy applications.

Profiles0..1 ProfilesType

The Profiles field provides a list of profiles that the STIX_Package conforms to.

Handling0..1 MarkingType

Specifies the relevant handling guidance for this STIX_Package. The valid marking scope is the nearest STIXPackageType ancestor of this Handling element and all its descendants.

Information_Source0..1 InformationSourceType

The Information_Source field details the source of this entry, including time information as well as information about the producer, contributors, tools, and references.

This Information_Source field applies both to the package metadata in the STIX_Header as well as individually to the contents of the STIX_Package (unless overriden by their own Information_Source field).