InfrastructureTypeTTP Schema


Fields

Field Name Type Description
@idoptional QName

Specifies a unique ID for this class or instance of Infrastructure.

@idrefoptional QName

Specifies a reference to the ID for this class or instance of Infrastructure specified elsewhere.

Title0..1 string

The Title field provides a simple title for a class or instance of Infrastructure utilized for cyber attack.

Type0..n ControlledVocabularyStringType

The Type field represents the type of infrastructure being described.

This field is implemented through the xsi:type controlled vocabulary extension mechanism. The default vocabulary type is AttackerInfrastructureTypeVocab-1.0 in the http://stix.mitre.org/default_vocabularies-1 namespace. This type is defined in the stix_default_vocabularies.xsd file or at the URL http://stix.mitre.org/XMLSchema/default_vocabularies/1.2.0/stix_default_vocabularies.xsd.

Users may also define their own vocabulary using the type extension mechanism, specify a vocabulary name and reference using the attributes, or simply use this as a string field.

Description0..n StructuredTextType

The Description field is optional and provides an unstructured, text description of specific classes or instances of infrastructure utilized for cyber attack.

Short_Description0..n StructuredTextType

The Short_Description field is optional and provides a short, unstructured, text description of specific classes or instances of infrastructure utilized for cyber attack.

Observable_Characterization0..1 ObservablesType

The Observable_Characterization field provides structured characterization of the cyber observables detailing specific classes or instances of infrastructure utilized for cyber attack.