The Course of Action SDO contains a textual description of the action; a reserved action field also serves as placeholder for future inclusion of machine automatable courses of action. Relationships from the Course of Action can be used to link it to the Vulnerabilities or behaviors (Tool, Malware, Attack Pattern) that it mitigates. Properties Common Properties type, id, created_by_ref, created, modified, version, revoked, labels, external_references, object_marking_refs, granular_markings Course of Action Specific Properties name, description, action Property Name Type Description type (required) string The value of this field MUST be course-of-action string name (required) A name used to identify the Course of Action description (optional) string A description that provides more details and context about the Course of Action, potentially including its purpose and its key characteristics. action (reserved) RESERVED RESERVED - To capture structured/automated courses of action. Relationships are the relationships explicitly defined between the Course of Action object and other objects. The first section lists the embedded relationships by property name along with their corresponding target. The rest of the table identifies the relationships that can be made from the Course of Action object by way of the Relationship Object. The reverse relationships (relationships "to" the Course of Action object) are included as a convenience. For their definitions, please see the objects for which they represent a "from" relationship. Relationships are not restricted to those listed below. Relationships can be created between any objects using the related-to relationship type or, as with open vocabularies, user-defined names. Embedded Relationships created_by_ref identity object_marking_refs marking-definition Common Relationships duplicate-of, derived-from, related-to
The Course of Action SDO contains a textual description of the action; a reserved action field also serves as placeholder for future inclusion of machine automatable courses of action. Relationships from the Course of Action can be used to link it to the Vulnerabilities or behaviors (Tool, Malware, Attack Pattern) that it mitigates. Properties Common Properties type, id, created_by_ref, created, modified, version, revoked, labels, external_references, object_marking_refs, granular_markings Course of Action Specific Properties name, description, action Property Name Type Description type (required) string The value of this field MUST be course-of-action name (required) string A name used to identify the Course of Action description (optional) string A description that provides more details and context about the Course of Action, potentially including its purpose and its key characteristics. action (reserved) RESERVED RESERVED - To capture structured/automated courses of action. Relationships are the relationships explicitly defined between the Course of Action object and other objects. The first section lists the embedded relationships by property name along with their corresponding target. The rest of the table identifies the relationships that can be made from the Course of Action object by way of the Relationship Object. The reverse relationships (relationships "to" the Course of Action object) are included as a convenience. For their definitions, please see the objects for which they represent a "from" relationship. Relationships are not restricted to those listed below. Relationships can be created between any objects using the related-to relationship type or, as with open vocabularies, user-defined names. Embedded Relationships created_by_ref identity object_marking_refs marking-definition Common Relationships duplicate-of, derived-from, related-to