RelatedIncidentTypeSTIX Common Schema

Identifies or characterizes a relationship to an incident.


Fields

Field Name Type Description
Confidence0..1 ConfidenceType

The confidence field specifies the level of confidence in the assertion of the relationship between the two components.

Information_Source0..1 InformationSourceType

The Information_Source field specifies the source of the information about the relationship between the two components.

Relationship0..1 ControlledVocabularyStringType

The relationship field characterizes the type of the relationship between the two components.

This field is implemented through the xsi:type controlled vocabulary extension mechanism. No default vocabulary type has been defined for STIX 1.2. Users may either define their own vocabulary using the type extension mechanism, specify a vocabulary name and reference using the attributes, or simply use this as a free string field.

Incident1..1 IncidentBaseType

A reference to or representation of the related incident.

This field is implemented through the xsi:type extension mechanism. The default and strongly recommended type is IncidentType in the http://stix.mitre.org/Incident-1 namespace. This type is defined in the incident.xsd file or at the URL http://stix.mitre.org/XMLSchema/incident/1.2/incident.xsd.