property requires it, the class will be removed in STIX Version 2.0 of the Campaign data model. RelatedIndicatorsType Unless legacy code or content require the use of the property, Relationships between Indicators and Related_Indicators Campaigns in STIX v1.2.1 SHOULD be represented using the property of the Related_Campaigns class. indicator:IndicatorType (shaded to indicate deprecation) shows the properties of the specialization and is associated with the UML 36 RelatedIncidentType diagram of Figure 34. . Properties of the class (deprecated) RelatedIndicatorsType Name Type Multiplicity Description The property specifies an Indicator Related_Indicator asserted as relevant to this Campaign and characterizes the relationship between the Indicator and the Campaign by Related_Indicator stixCommon:RelatedIncidentType 1..* capturing information such as the level of confidence that the Indicator and the Campaign are related, the source of the relationship information, and the type of relationship. AttributionType Class The specifies a set of one or more Threat Actors asserted as related to a Campaign from an attribution perspective. It AttributionType extends the superclass defined in the STIX Common data model, which specifies the scope (whether the GenericRelationshipListType elements of the set are related individually or as a group). The UML diagram corresponding to the class is shown in Figure 35. AttributionType Figure . UML diagram of the class AttributionType 37 shows the properties of the specialization and is associated with the UML diagram in Figure 35. AttributionType Table . Properties of the class Attribution Name Type Multiplicity Description The property Attributed_Threat_Actor Attributed_Threat_Actor 1..* stixCommon:RelatedThreatActorType specifies a Threat Actor asserted as related to the
property requires it, the RelatedIndicatorsType class will be removed in STIX Version 2.0 of the Campaign data model. Unless legacy code or content require the use of the Related_Indicators property, Relationships between Indicators and Campaigns in STIX v1.2.1 SHOULD be represented using the Related_Campaigns property of the indicator:IndicatorType class. 36 (shaded to indicate deprecation) shows the properties of the RelatedIncidentType specialization and is associated with the UML diagram of Figure 34. . Properties of the RelatedIndicatorsType class (deprecated) Name Type Multiplicity Description Related_Indicator stixCommon:RelatedIncidentType 1..* The Related_Indicator property specifies an Indicator asserted as relevant to this Campaign and characterizes the relationship between the Indicator and the Campaign by capturing information such as the level of confidence that the Indicator and the Campaign are related, the source of the relationship information, and the type of relationship. AttributionType Class The AttributionType specifies a set of one or more Threat Actors asserted as related to a Campaign from an attribution perspective. It extends the GenericRelationshipListType superclass defined in the STIX Common data model, which specifies the scope (whether the elements of the set are related individually or as a group). The UML diagram corresponding to the AttributionType class is shown in Figure 35. Figure . UML diagram of the AttributionType class 37 shows the properties of the AttributionType specialization and is associated with the UML diagram in Figure 35. Table . Properties of the Attribution class Name Type Multiplicity Description Attributed_Threat_Actor stixCommon:RelatedThreatActorType 1..* The Attributed_Threat_Actor property specifies a Threat Actor asserted as related to the