ToolsTypeTTP Schema


Field Name Type Description
Tool1..n ToolInformationType

The Tool field specifies a single Tool leveraged by this TTP item.

The Type field under this field is implemented through the xsi:type controlled vocabulary extension mechanism. The default vocabulary type is AttackerToolTypeVocab-1.0 in the namespace. This type is defined in the stix_default_vocabularies.xsd file or at the URL

Users may also define their own vocabulary using the type extension mechanism, specify a vocabulary name and reference using the attributes, or simply use this as a string field.