Name Type Multiplicity Description The property captures a title for the Report and reflects Title what the content producer thinks the Report as a whole should be Title 0..1 called. The property is typically used by humans to basicDataTypes:BasicString Title reference a particular Report; however, it is not suggested for correlation. The property specifies the intended purpose(s) or use(s) Intent for the Report. Examples of potential purposes are collective threat intelligence, campaign characterization and malware samples (these specific values are only provided to help explain the property: they are neither recommended types nor stixCommon: necessarily part of any existing vocabulary). The content creator Intent 0..* may choose any arbitrary value or may constrain the set of VocabularyStringType possible values by referencing an externally-defined vocabulary or leveraging a formally defined vocabulary extending from the class. stixCommon:ControlledVocabularyStringType The STIX default vocabulary class for use in this property is 'ReportIntentVocab-1.0'. The property captures a textual description of the Description stixCommon: Report. Any length is permitted. Optional formatting is supported Description 0..* via the property of the structuring_format StructuredTextType class. StructuredTextType The property captures a short textual Short_Description stixCommon: description of the Report. This property is secondary and should Short_Description 0..* only be used if the property is already populated Description StructuredTextType and another, shorter description is available. The property specifies the appropriate data handling Handling markings for the properties of this Report. The marking scope is Handling 0..1 marking:MarkingType limited to the Report and the content it contains. Note that data handling markings can also be specified at a higher level. The property characterizes the source of Information_Source stixCommon: Information_Source 0..1 the Report and all of its contained information unless that InformationSourceType information specifies a different source. Examples of details
Name Type Multiplicity Description Title basicDataTypes:BasicString 0..1 The Title property captures a title for the Report and reflects what the content producer thinks the Report as a whole should be called. The Title property is typically used by humans to reference a particular Report; however, it is not suggested for correlation. Intent stixCommon: VocabularyStringType 0..* The Intent property specifies the intended purpose(s) or use(s) for the Report. Examples of potential purposes are collective threat intelligence, campaign characterization and malware samples (these specific values are only provided to help explain the property: they are neither recommended types nor necessarily part of any existing vocabulary). The content creator may choose any arbitrary value or may constrain the set of possible values by referencing an externally-defined vocabulary or leveraging a formally defined vocabulary extending from the stixCommon:ControlledVocabularyStringType class. The STIX default vocabulary class for use in this property is 'ReportIntentVocab-1.0'. Description stixCommon: StructuredTextType 0..* The Description property captures a textual description of the Report. Any length is permitted. Optional formatting is supported via the structuring_format property of the StructuredTextType class. Short_Description stixCommon: StructuredTextType 0..* The Short_Description property captures a short textual description of the Report. This property is secondary and should only be used if the Description property is already populated and another, shorter description is available. Handling marking:MarkingType 0..1 The Handling property specifies the appropriate data handling markings for the properties of this Report. The marking scope is limited to the Report and the content it contains. Note that data handling markings can also be specified at a higher level. Information_Source stixCommon: InformationSourceType 0..1 The Information_Source property characterizes the source of the Report and all of its contained information unless that information specifies a different source. Examples of details
stix-v1.2.1-csprd01-part11-report.docx