However, through the use of the property, a reference to a idref Campaign defined elsewhere can be specified via the direct use of the class. stixCommon:CampaignBaseType ThreatActorsType Class The class specifies a set of one or more cyber Threat Actors. ThreatActorsType The property table of the class is given in Table 39. ThreatActorsType . Properties of the class ThreatActorsType Name Type Multiplicity Description The property characterizes a cyber Threat Actor. The ThreatActor class is a minimal base class that stixCommon:ThreatActorBaseType is intended to be extended. The default and strongly recommended class to fully implement an ThreatActor is the class ta:ThreatActorType Threat_Actor stixCommon:ThreatActorBaseType 1..* defined in . Base classes are used to minimize interdependence between STIX components, not to enable or encourage conflicting syntactic variation. However, through the use of the property, a reference to idref a Threat Actor defined elsewhere can be specified via the direct use of the class. stixCommon:ThreatActorBaseType RelatedReportsType The class specifies a set of one or more STIX Reports related to this STIX Report and therefore is a self-referential RelatedReportsType relationship. It extends the superclass defined in the STIX Common data model, which specifies the scope GenericRelationshipListType (whether the elements of the set are related individually or as a group). The UML diagram corresponding to the is shown in Figure 32. RelatedReportsType Figure . UML diagram showing the use of the class RelatedReportsType shows the properties of the specialization and is associated with the UML diagram in Table 310 Figure 32. RelatedReportsType
However, through the use of the idref property, a reference to a Campaign defined elsewhere can be specified via the direct use of the stixCommon:CampaignBaseType class. ThreatActorsType Class The ThreatActorsType class specifies a set of one or more cyber Threat Actors. The property table of the ThreatActorsType class is given in Table 39. . Properties of the ThreatActorsType class Name Type Multiplicity Description Threat_Actor stixCommon:ThreatActorBaseType 1..* The ThreatActor property characterizes a cyber Threat Actor. The stixCommon:ThreatActorBaseType class is a minimal base class that is intended to be extended. The default and strongly recommended class to fully implement an ThreatActor is the ta:ThreatActorType class defined in . Base classes are used to minimize interdependence between STIX components, not to enable or encourage conflicting syntactic variation. However, through the use of the idref property, a reference to a Threat Actor defined elsewhere can be specified via the direct use of the stixCommon:ThreatActorBaseType class. RelatedReportsType The RelatedReportsType class specifies a set of one or more STIX Reports related to this STIX Report and therefore is a self-referential relationship. It extends the GenericRelationshipListType superclass defined in the STIX Common data model, which specifies the scope (whether the elements of the set are related individually or as a group). The UML diagram corresponding to the RelatedReportsType is shown in Figure 32. Figure . UML diagram showing the use of the RelatedReportsType class Table 310 shows the properties of the RelatedReportsType specialization and is associated with the UML diagram in Figure 32.
stix-v1.2.1-cs01-part11-report.docx