Used to record and preserve information without implying anything about the captures structure of a class or property. Often used for properties that encompass general content. This is the least precise of the three verbs. Examples: The property characterizes the source of the Observable Observable_Source information. Examples of details captured include identifying characteristics, attributes, and a list of the used to collect the information. The property captures a textual description of the Action. Description Describes the distinctive nature or features of a class or property. Often used to characterizes describe classes and properties that themselves comprise one or more other properties. Examples: The property characterizes a cyber observable Action. Action The property characterizes a technique an attacker Obfuscation_Technique could potentially leverage to obfuscate the Observable. Used to clearly and precisely identify particular instances or values associated with a property. Often used for properties that are defined by a controlled specifies vocabulary or enumeration; typically used for properties that take on only a single value. Example: The property specifies the major version of the CybOX cybox_major_version Language used for the set of Observables. Terminology The key words NOT”, NOT”, “MUST”, “MUST “REQUIRED”, “SHALL”, “SHALL “SHOULD”, “SHOULD NOT”, and in this document are to be interpreted as described “RECOMMENDED”, “MAY”, “OPTIONAL” in [RFC2119]. Normative References [RFC2119] Bradner, S., words for use in RFCs to Indicate Requirement Levels”, BCP “Key 14, RFC 2119, March 1997. .
captures Used to record and preserve information without implying anything about the structure of a class or property. Often used for properties that encompass general content. This is the least precise of the three verbs. Examples: The Observable_Source property characterizes the source of the Observable information. Examples of details captured include identifying characteristics, attributes, and a list of the used to collect the information. The Description property captures a textual description of the Action. characterizes Describes the distinctive nature or features of a class or property. Often used to describe classes and properties that themselves comprise one or more other properties. Examples: The Action property characterizes a cyber observable Action. The Obfuscation_Technique property characterizes a technique an attacker could potentially leverage to obfuscate the Observable. specifies Used to clearly and precisely identify particular instances or values associated with a property. Often used for properties that are defined by a controlled vocabulary or enumeration; typically used for properties that take on only a single value. Example: The cybox_major_version property specifies the major version of the CybOX Language used for the set of Observables. Terminology The key words “MUST”, “MUST NOT”, “REQUIRED”, “SHALL”, “SHALL NOT”, “SHOULD”, “SHOULD NOT”, “RECOMMENDED”, “MAY”, and “OPTIONAL” in this document are to be interpreted as described in [RFC2119]. Normative References [RFC2119] Bradner, S., “Key words for use in RFCs to Indicate Requirement Levels”, BCP 14, RFC 2119, March 1997. .
cybox-v2.1.1-csprd01-part24-file.docx