The property captures an identifier for the Incident External_ID External_ID 0..* ExternalIDType managed in an external non-STIX system. The property specifies a variety of time values associated with Time Time 0..1 TimeType the Incident (e.g., the time the Incident was officially opened). The property captures a textual description of the Description stixCommon: Incident. Any length is permitted. Optional formatting is supported 0..* Description via the property of the structuring_format StructuredTextType StructuredTextType The property captures a short textual Short_Description stixCommon: description of the Incident. This property is secondary and should Short_Description 0..* only be used if the property is already populated and Description StructuredTextType another, shorter description is available. The property specifies a set of categorization labels Categories Categories CategoriesType 0..1 for the Incident. stixCommon: The property characterizes the entity that reported the Reporter Reporter 0..1 Incident. InformationSourceType stixCommon: The property characterizes the entity playing the role of Responder Responder 0..* the responder for the Incident. InformationSourceType stixCommon: The property characterizes the entity playing the role Coordinator Coordinator 0..* of coordinator for the Incident. InformationSourceType The property chracterizes information about a victim of the Victim stixCommon: Incident. For situations calling for more than a simple name, the Victim 0..* underlying class may be extended using a more complete structure IdentityType such as the CIQIdentity3.0InstanceType subclass as defined in . The property characterizes the assets affected Affected_Assets Affected_Assets 0..1 AffectedAssetsType during the Incident. The property characterizes an assessment Impact_Assessment Impact_Assessment 0..1 ImpactAssessmentType of impact for the Incident.
External_ID ExternalIDType 0..* The External_ID property captures an identifier for the Incident managed in an external non-STIX system. Time TimeType 0..1 The Time property specifies a variety of time values associated with the Incident (e.g., the time the Incident was officially opened). Description stixCommon: StructuredTextType 0..* The Description property captures a textual description of the Incident. Any length is permitted. Optional formatting is supported via the structuring_format property of the StructuredTextType Short_Description stixCommon: StructuredTextType 0..* The Short_Description property captures a short textual description of the Incident. This property is secondary and should only be used if the Description property is already populated and another, shorter description is available. Categories CategoriesType 0..1 The Categories property specifies a set of categorization labels for the Incident. Reporter stixCommon: InformationSourceType 0..1 The Reporter property characterizes the entity that reported the Incident. Responder stixCommon: InformationSourceType 0..* The Responder property characterizes the entity playing the role of the responder for the Incident. Coordinator stixCommon: InformationSourceType 0..* The Coordinator property characterizes the entity playing the role of coordinator for the Incident. Victim stixCommon: IdentityType 0..* The Victim property chracterizes information about a victim of the Incident. For situations calling for more than a simple name, the underlying class may be extended using a more complete structure such as the CIQIdentity3.0InstanceType subclass as defined in . Affected_Assets AffectedAssetsType 0..1 The Affected_Assets property characterizes the assets affected during the Incident. Impact_Assessment ImpactAssessmentType 0..1 The Impact_Assessment property characterizes an assessment of impact for the Incident.