structure such as the subclass as defined . Through the CIQIdentity3.0InstanceType use of the property, a reference to an Identity defined elsewhere can be specified idref via the direct use of the class. IdentityType RelatedIncidentType Class The class characterizes a relationship to an Incident. It extends the superclass by specifying a RelatedIncidentType GenericRelationshipType related Incident. The UML diagram corresponding to the class is shown in Figure 38. RelatedIncidentType Figure 38. UML diagram of the class RelatedIncidentType The property table given in Table 316 corresponds to the UML diagram shown in Figure 38. Table 316. Properties of the class RelatedIncidentType Name Type Multiplicity Description The property characterizes a cyber threat Incident. The Incident class is a minimal base class that is intended to be IncidentBaseType extended. The default and strongly RECOMMENDED class to fully implement an Incident is the class defined in . Base classes are incident:IncidentType Incident 1 IncidentBaseType used to minimize interdependence between STIX components, not to enable or encourage conflicting syntactic variation. Through the use of the property, idref a reference to an Incident defined elsewhere can be specified via the direct use of the class. IncidentBaseType RelatedIndicatorType Class The characterizes a relationship to an Indicator. It extends the superclass by specifying a RelatedIndicatorType GenericRelationshipType related Indicator. The UML diagram corresponding to the class is shown in Figure 39. RelatedIndicatorType
structure such as the CIQIdentity3.0InstanceType subclass as defined . Through the use of the idref property, a reference to an Identity defined elsewhere can be specified via the direct use of the IdentityType class. RelatedIncidentType Class The RelatedIncidentType class characterizes a relationship to an Incident. It extends the GenericRelationshipType superclass by specifying a related Incident. The UML diagram corresponding to the RelatedIncidentType class is shown in Figure 38. Figure 38. UML diagram of the RelatedIncidentType class The property table given in Table 316 corresponds to the UML diagram shown in Figure 38. Table 316. Properties of the RelatedIncidentType class Name Type Multiplicity Description Incident IncidentBaseType 1 The Incident property characterizes a cyber threat Incident. The IncidentBaseType class is a minimal base class that is intended to be extended. The default and strongly RECOMMENDED class to fully implement an Incident is the incident:IncidentType class defined in . Base classes are used to minimize interdependence between STIX components, not to enable or encourage conflicting syntactic variation. Through the use of the idref property, a reference to an Incident defined elsewhere can be specified via the direct use of the IncidentBaseType class. RelatedIndicatorType Class The RelatedIndicatorType characterizes a relationship to an Indicator. It extends the GenericRelationshipType superclass by specifying a related Indicator. The UML diagram corresponding to the RelatedIndicatorType class is shown in Figure 39.
stix-v1.2.1-csprd01-part2-common.docx