The property captures an identifier for the External_ID External_ID 0..* ExternalIDType Incident managed in an external non-STIX system. The property specifies a variety of time values Time Time TimeType 0..1 associated with the Incident (e.g., the time the Incident was officially opened). The property captures a textual description of Description stixCommon: the Incident. Any length is permitted. Optional formatting is Description 0..* supported via the property of the structuring_format StructuredTextType class. StructuredTextType The property captures a textual Short_Description stixCommon: description of the Incident. This property is secondary and Short_Description 0..* should only be used if the property is already Description StructuredTextType populated and another, shorter description is available. The property specifies a set of categorization Categories Categories 0..1 CategoriesType labels for the Incident. stixCommon: The property characterizes the entity that reported Reporter 0..1 Reporter the Incident. InformationSourceType stixCommon: The property characterizes the entity playing the Responder Responder 0..* role of the responder for the Incident. InformationSourceType stixCommon: The property characterizes the entity playing Coordinator Coordinator 0..* the role of coordinator for the Incident. InformationSourceType The property chracterizes information about a victim Victim of the Incident. For situations calling for more than a simple stixCommon: Victim 0..* name, the underlying class may be extended using a more IdentityType complete structure such as the CIQIdentity3.0InstanceType subclass as defined in . The property characterizes the assets Affected_Assets Affected_Assets 0..1 AffectedAssetsType affected during the Incident. The property characterizes an Impact_Assessment Impact_Assessment ImpactAssessmentType 0..1 assessment of impact for the Incident.
External_ID ExternalIDType 0..* The External_ID property captures an identifier for the Incident managed in an external non-STIX system. Time TimeType 0..1 The Time property specifies a variety of time values associated with the Incident (e.g., the time the Incident was officially opened). Description stixCommon: StructuredTextType 0..* The Description property captures a textual description of the Incident. Any length is permitted. Optional formatting is supported via the structuring_format property of the StructuredTextType class. Short_Description stixCommon: StructuredTextType 0..* The Short_Description property captures a textual description of the Incident. This property is secondary and should only be used if the Description property is already populated and another, shorter description is available. Categories CategoriesType 0..1 The Categories property specifies a set of categorization labels for the Incident. Reporter stixCommon: InformationSourceType 0..1 The Reporter property characterizes the entity that reported the Incident. Responder stixCommon: InformationSourceType 0..* The Responder property characterizes the entity playing the role of the responder for the Incident. Coordinator stixCommon: InformationSourceType 0..* The Coordinator property characterizes the entity playing the role of coordinator for the Incident. Victim stixCommon: IdentityType 0..* The Victim property chracterizes information about a victim of the Incident. For situations calling for more than a simple name, the underlying class may be extended using a more complete structure such as the CIQIdentity3.0InstanceType subclass as defined in . Affected_Assets AffectedAssetsType 0..1 The Affected_Assets property characterizes the assets affected during the Incident. Impact_Assessment ImpactAssessmentType 0..1 The Impact_Assessment property characterizes an assessment of impact for the Incident.
stix-v1.2.1-part6-incident.docx