Subset: Common
Classes from stix/schemas/common/*.json
URI: Common
Identifier and Mapping Information
Schema Source
- from schema: https://w3id.org/lmodel/attack
Classes in subset
| Class | Description |
|---|---|
| AlternateDataStreamType | Specifies properties of an NTFS alternate data stream |
| Bundle | A Bundle is a collection of arbitrary STIX Objects and Marking Definitions gr... |
| Core | Common properties and behavior across all STIX Domain Objects and STIX Relati... |
| CyberObservableCore | Common properties and behavior across all Cyber Observable Objects |
| Dictionary | A dictionary captures a set of key/value pairs |
| Extension | Converted from common/extension |
| ExtensionDefinition | The STIX Extension Definition object allows producers of threat intelligence ... |
| ExternalReference | External references are used to describe pointers to information represented ... |
| GranularMarking | The granular-marking type defines how the list of marking-definition objects ... |
| HashesType | The Hashes type represents one or more cryptographic hashes, as a special set... |
| Hex | The hex data type encodes an array of octets (8-bit bytes) as hexadecimal |
| Identifier | Represents identifiers across the CTI specifications |
| KillChainPhase | The kill-chain-phase represents a phase in a kill chain |
| LanguageContent | The language-content object represents text content for STIX Objects represen... |
| MarkingDefinition | The marking-definition object represents a specific marking |
| MimePartType | Specifies a component of a multi-part email body as defined in the email-mess... |
| Properties | Rules for custom properties |
| Timestamp | Represents timestamps across the CTI specifications |
| UrlRegex | Matches a URI according to RFC 3986 |
| WindowsRegistryValue | Structured value entry under a Windows registry key |
| X509V3ExtensionsType | Specifies any standard X |