formatting is supported via the structuring_format property of the class. StructuredTextType The property captures a short Short_Description textual description of the attack pattern. This property is Short_Description 0..* secondary and should only be used if the stixCommon:StructuredTextType Description property is already populated and another, shorter description is available. MalwareType Class The class characterizes a set of one or more malware instances that an adversary may leverage. MalwareType The property of the is shown in Table 36. MalwareType Table . Properties of the class MalwareType Name Type Multiplicity Description The property characterizes a single Malware_Instance Malware_Instance 1..* MalwareInstanceType malware instance that an adversary may leverage. MalwareInstanceType Class The class characterizes a malware instance through the capture of basic information such as the type, name, and MalwareInstanceType description of the malware. A malware instance may characterize anything from a specific malware sample to an entire family. The class is intended to be extended as appropriate to enable the structured description of a malware instance. STIX v1.2.1 MalwareInstanceType defines a default extension to the class to leverage the Malware Attribute Enumeration and Classification (MAEC) data MalwareInstanceType model. The UML diagram corresponding to the is shown in Please see for extension-related details. Figure 34. MalwareInstanceType Figure . UML diagram of the class MalwareInstanceType The property table given in Table 37 corresponds to the UML diagram given in Figure 34. Table . Properties of the class MalwareInstanceType
formatting is supported via the structuring_format property of the StructuredTextType class. Short_Description stixCommon:StructuredTextType 0..* The Short_Description property captures a short textual description of the attack pattern. This property is secondary and should only be used if the Description property is already populated and another, shorter description is available. MalwareType Class The MalwareType class characterizes a set of one or more malware instances that an adversary may leverage. The property of the MalwareType is shown in Table 36. Table . Properties of the MalwareType class Name Type Multiplicity Description Malware_Instance MalwareInstanceType 1..* The Malware_Instance property characterizes a single malware instance that an adversary may leverage. MalwareInstanceType Class The MalwareInstanceType class characterizes a malware instance through the capture of basic information such as the type, name, and description of the malware. A malware instance may characterize anything from a specific malware sample to an entire family. The MalwareInstanceType class is intended to be extended as appropriate to enable the structured description of a malware instance. STIX v1.2.1 defines a default extension to the MalwareInstanceType class to leverage the Malware Attribute Enumeration and Classification (MAEC) data model. The UML diagram corresponding to the MalwareInstanceType is shown in Figure 34. Please see for extension-related details. Figure . UML diagram of the MalwareInstanceType class The property table given in Table 37 corresponds to the UML diagram given in Figure 34. Table . Properties of the MalwareInstanceType class
stix-v1.2.1-part5-ttp.docx