Example Content
Observable pattern for a URL matching one of three values utilizing IsInSet
<?xml version="1.0" encoding="UTF-8"?>
<cybox:Observables xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xmlns:cybox="http://cybox.mitre.org/cybox_v1" xmlns:common="http://cybox.mitre.org/Common_v1"
xmlns:URIObj="http://cybox.mitre.org/objects#URIObject"
xsi:schemaLocation="http://cybox.mitre.org/cybox_v1
http://cybox.mitre.org/XMLSchema/cybox_core_v1.0(draft).xsd
http://cybox.mitre.org/objects#URIObject
http://cybox.mitre.org/XMLSchema/objects/URI/URI_Object_1.1.xsd"
cybox_major_version="1" cybox_minor_version="0(draft)">
<cybox:Observable id="cybox:Obs1">
<!-- Observable for any single URL matching one of the URLs defined in Sample1, Sample 2 or Sample3 utilizing IsInSet-->
<cybox:Stateful_Measure>
<cybox:Object id="cybox:A1" type="URI">
<cybox:Defined_Object xsi:type="URIObj:URIObjectType">
<URIObj:Value condition="IsInSet"
value_set="www.sample1.com/index.html, sample2.com/login.html, dev.sample3.com/index/kb.html"
datatype="AnyURI"/>
</cybox:Defined_Object>
</cybox:Object>
</cybox:Stateful_Measure>
</cybox:Observable>
</cybox:Observables>
|
