semantic meaning if used in the absence of either the or id properties. idref The property specifies the version identifier of the version version STIXPackageVersionEnum 0..1 STIX Core data for STIX v1.2.1 used to capture the information associated with the STIX Package. The property characterizes the metadata for STIX_Header STIX_Header 0..1 STIXHeaderType this package of STIX content. The property specifies a set of one or more Observables Observables 0..1 cybox:ObservablesType cyber observables. The property specifies a set of one or more Indicators Indicators IndicatorsType 0..1 cyber threat Indicators. The property specifies a set of one or more cyber threat TTPs TTPs 0..1 TTPsType adversary Tactics, Techniques or Procedures (TTPs), or Kill Chains. The property specifies a set of zero or Exploit_Targets Exploit_Targets 0..1 stixCommon:ExploitTargetsType more potential targets for exploitation. The property specifies a set of one or more cyber Incidents Incidents 0..1 IncidentsType threat Incidents. The property specifies a set of one or CoursesOfActions Courses_Of_Action CoursesOfActionType 0..1 more Courses of Action that could be taken in regard to one of more cyber threats. The property specifies a set of one or more Campaigns Campaigns 0..1 CampaignsType Campaigns. The property specifies a set of one or more ThreatActors Threat_Actors 0..1 ThreatActorsType Threat Actors. The property specifies a set of one or more Reports. Reports 0..1 ReportsType Reports The property specifies a set of one or Related_Packages Related_Packages 0..1 RelatedPackagesType more Packages which may be relevant to this STIX Package.
semantic meaning if used in the absence of either the id or idref properties. version STIXPackageVersionEnum 0..1 The version property specifies the version identifier of the STIX Core data for STIX v1.2.1 used to capture the information associated with the STIX Package. STIX_Header STIXHeaderType 0..1 The STIX_Header property characterizes the metadata for this package of STIX content. Observables cybox:ObservablesType 0..1 The Observables property specifies a set of one or more cyber observables. Indicators IndicatorsType 0..1 The Indicators property specifies a set of one or more cyber threat Indicators. TTPs TTPsType 0..1 The TTPs property specifies a set of one or more cyber threat adversary Tactics, Techniques or Procedures (TTPs), or Kill Chains. Exploit_Targets stixCommon:ExploitTargetsType 0..1 The Exploit_Targets property specifies a set of zero or more potential targets for exploitation. Incidents IncidentsType 0..1 The Incidents property specifies a set of one or more cyber threat Incidents. Courses_Of_Action CoursesOfActionType 0..1 The CoursesOfActions property specifies a set of one or more Courses of Action that could be taken in regard to one of more cyber threats. Campaigns CampaignsType 0..1 The Campaigns property specifies a set of one or more Campaigns. Threat_Actors ThreatActorsType 0..1 The ThreatActors property specifies a set of one or more Threat Actors. Reports ReportsType 0..1 The Reports property specifies a set of one or more Reports. Related_Packages RelatedPackagesType 0..1 The Related_Packages property specifies a set of one or more Packages which may be relevant to this STIX Package.
stix-v1.2.1-csprd01-part3-core.docx