Showing:

Annotations
Attributes
Diagrams
Facets
Source
Used by
Main schema Artifact_Object.xsd
Namespace http://cybox.mitre.org/objects#ArtifactObject-2
Annotations
 
This schema was originally developed by The MITRE Corporation. The CybOX XML Schema implementation is maintained by The MITRE Corporation and developed by the open CybOX Community. For more information, including how to get involved in the effort and how to submit change requests, please visit the CybOX website at http://cybox.mitre.org.
Element ArtifactObj:Artifact
Namespace http://cybox.mitre.org/objects#ArtifactObject-2
Annotations
 
The Artifact object is intended to encapsulate and convey the content of a Raw Artifact.
Diagram
Diagram Artifact_Object_xsd.tmp#ArtifactObjectType_type Artifact_Object_xsd.tmp#ArtifactObjectType_content_type Artifact_Object_xsd.tmp#ArtifactObjectType_content_type_version Artifact_Object_xsd.tmp#ArtifactObjectType_suspected_malicious Artifact_Object_xsd.tmp#ArtifactObjectType_Hashes Artifact_Object_xsd.tmp#ArtifactObjectType_Packaging Artifact_Object_xsd.tmp#ArtifactObjectType_Raw_Artifact Artifact_Object_xsd.tmp#ArtifactObjectType_Raw_Artifact_Reference Artifact_Object_xsd.tmp#ArtifactObjectType
Type ArtifactObj:ArtifactObjectType
Type hierarchy
Children ArtifactObj:Hashes, ArtifactObj:Packaging, ArtifactObj:Raw_Artifact, ArtifactObj:Raw_Artifact_Reference
Source
 
<xs:element name="Artifact" type="ArtifactObj:ArtifactObjectType">
  <xs:annotation>
    <xs:documentation>The Artifact object is intended to encapsulate and convey the content of a Raw Artifact.</xs:documentation>
  </xs:annotation>
</xs:element>
Element ArtifactObj:ArtifactObjectType / ArtifactObj:Hashes
Namespace http://cybox.mitre.org/objects#ArtifactObject-2
Annotations
 
The Hashes field is optional and specifies hashes for the Raw_Artifact content.
Diagram
Diagram
Type HashListType
Source
 
<xs:element name="Hashes" type="cyboxCommon:HashListType" minOccurs="0">
  <xs:annotation>
    <xs:documentation>The Hashes field is optional and specifies hashes for the Raw_Artifact content.</xs:documentation>
  </xs:annotation>
</xs:element>
Element ArtifactObj:ArtifactObjectType / ArtifactObj:Packaging
Namespace http://cybox.mitre.org/objects#ArtifactObject-2
Annotations
 
The Packaging field is optional and characterizes packaging layers (e.g. compression, encryption, encoding) applied to the original content to generate the content of the Raw_Artifact field of this Object. The ordering of entries in this sequence implicitly denotes the ordering of packaging layer operations applied.
Diagram
Diagram Artifact_Object_xsd.tmp#PackagingType_is_encrypted Artifact_Object_xsd.tmp#PackagingType_is_compressed Artifact_Object_xsd.tmp#PackagingType_Compression Artifact_Object_xsd.tmp#PackagingType_Encryption Artifact_Object_xsd.tmp#PackagingType_Encoding Artifact_Object_xsd.tmp#PackagingType
Type ArtifactObj:PackagingType
Children ArtifactObj:Compression, ArtifactObj:Encoding, ArtifactObj:Encryption
Attributes
QName Type Use Annotation
is_compressed xs:boolean optional 
The is_compressed field is optional and specifies whether the Raw_Artifact content is compressed.
is_encrypted xs:boolean optional 
The is_encrypted field is optional and specifies whether the Raw_Artifact content is protected/encrypted.
Source
 
<xs:element name="Packaging" type="ArtifactObj:PackagingType" minOccurs="0">
  <xs:annotation>
    <xs:documentation>The Packaging field is optional and characterizes packaging layers (e.g. compression, encryption, encoding) applied to the original content to generate the content of the Raw_Artifact field of this Object. The ordering of entries in this sequence implicitly denotes the ordering of packaging layer operations applied.</xs:documentation>
  </xs:annotation>
</xs:element>
Element ArtifactObj:PackagingType / ArtifactObj:Compression
Namespace http://cybox.mitre.org/objects#ArtifactObject-2
Annotations
 
The Compression field is optional and specifies details for a compression layer applied to the content of the Raw_Artifact.
Diagram
Diagram Artifact_Object_xsd.tmp#CompressionType_compression_mechanism Artifact_Object_xsd.tmp#CompressionType_compression_mechanism_ref Artifact_Object_xsd.tmp#CompressionType
Type ArtifactObj:CompressionType
Attributes
QName Type Use Annotation
compression_mechanism xs:string optional 
The compression_mechanism field is optional and specifies the compression algorithm utilized to protect the Raw_Artifact content.
compression_mechanism_ref xs:anyURI optional 
The compression_mechanism_ref field is optional and conveys a reference to a description of the compression algorithm utilized to protect the Raw_Artifact content.
Source
 
<xs:element name="Compression" type="ArtifactObj:CompressionType" minOccurs="0">
  <xs:annotation>
    <xs:documentation>The Compression field is optional and specifies details for a compression layer applied to the content of the Raw_Artifact.</xs:documentation>
  </xs:annotation>
</xs:element>
Element ArtifactObj:PackagingType / ArtifactObj:Encryption
Namespace http://cybox.mitre.org/objects#ArtifactObject-2
Annotations
 
The Encryption field is optional and specifies details for an encryption layer applied to the content of the Raw_Artifact.
Diagram
Diagram Artifact_Object_xsd.tmp#EncryptionType_encryption_mechanism Artifact_Object_xsd.tmp#EncryptionType_encryption_mechanism_ref Artifact_Object_xsd.tmp#EncryptionType_encryption_key Artifact_Object_xsd.tmp#EncryptionType_encryption_key_ref Artifact_Object_xsd.tmp#EncryptionType
Type ArtifactObj:EncryptionType
Attributes
QName Type Use Annotation
encryption_key xs:string optional 
The encryption_key field is optional and locally specifies the password for unprotecting/decrypting the Raw_Artifact content.
encryption_key_ref xs:anyURI optional 
The encryption_key_ref field is optional and specifies a reference to a remote specification of the password for unprotecting/decrypting the Raw_Artifact content.
encryption_mechanism xs:string optional 
The encryption_mechanism field is optional and specifies the protection/encryption algorithm utilized to protect the Raw_Artifact content.
encryption_mechanism_ref xs:anyURI optional 
The encryption_mechanism_ref field is optional and conveys a reference to a description of the protection/encryption algorithm utilized to protect the Raw_Artifact content.
Source
 
<xs:element name="Encryption" type="ArtifactObj:EncryptionType" minOccurs="0">
  <xs:annotation>
    <xs:documentation>The Encryption field is optional and specifies details for an encryption layer applied to the content of the Raw_Artifact.</xs:documentation>
  </xs:annotation>
</xs:element>
Element ArtifactObj:PackagingType / ArtifactObj:Encoding
Namespace http://cybox.mitre.org/objects#ArtifactObject-2
Annotations
 
The Encoding field is optional and specifies details for an encoding layer applied to the content of the Raw_Artifact.
Diagram
Diagram Artifact_Object_xsd.tmp#EncodingType_algorithm Artifact_Object_xsd.tmp#EncodingType_character_set Artifact_Object_xsd.tmp#EncodingType_custom_character_set_ref Artifact_Object_xsd.tmp#EncodingType
Type ArtifactObj:EncodingType
Attributes
QName Type Default Use Annotation
algorithm xs:string Base64 optional 
The algorithm field is optional and specifies the encoding algorithm utilized to encode the Raw_Artifact.
character_set xs:string optional 
The character_set field is optional and specifies the character set utilized in the Raw_Artifact content encoding.
custom_character_set_ref xs:anyURI optional 
The custom_character_set_ref field is optional and conveys a reference to a specification of the custom character set used to encode the Raw_Artifact.
Source
 
<xs:element name="Encoding" type="ArtifactObj:EncodingType" minOccurs="0">
  <xs:annotation>
    <xs:documentation>The Encoding field is optional and specifies details for an encoding layer applied to the content of the Raw_Artifact.</xs:documentation>
  </xs:annotation>
</xs:element>
Element ArtifactObj:ArtifactObjectType / ArtifactObj:Raw_Artifact
Namespace http://cybox.mitre.org/objects#ArtifactObject-2
Annotations
 
The Raw_Artifact field contains the raw content of a cyber artifact (rather than simply analysis of that artifact). It is conveyed within a string-based field and should be further enclosed in a CDATA section within the string-based field.
Diagram
Diagram Artifact_Object_xsd.tmp#RawArtifactType
Type ArtifactObj:RawArtifactType
Type hierarchy
Source
 
<xs:element name="Raw_Artifact" type="ArtifactObj:RawArtifactType" minOccurs="0">
  <xs:annotation>
    <xs:documentation>The Raw_Artifact field contains the raw content of a cyber artifact (rather than simply analysis of that artifact). It is conveyed within a string-based field and should be further enclosed in a CDATA section within the string-based field.</xs:documentation>
  </xs:annotation>
</xs:element>
Element ArtifactObj:ArtifactObjectType / ArtifactObj:Raw_Artifact_Reference
Namespace http://cybox.mitre.org/objects#ArtifactObject-2
Annotations
 
The Raw_Artifact_Reference field contains a reference to an external instance of the raw content of a cyber artifact (rather than simply analysis of that artifact).
Diagram
Diagram
Type xs:anyURI
Source
 
<xs:element name="Raw_Artifact_Reference" type="xs:anyURI" minOccurs="0">
  <xs:annotation>
    <xs:documentation>The Raw_Artifact_Reference field contains a reference to an external instance of the raw content of a cyber artifact (rather than simply analysis of that artifact).</xs:documentation>
  </xs:annotation>
</xs:element>
Complex Type ArtifactObj:ArtifactObjectType
Namespace http://cybox.mitre.org/objects#ArtifactObject-2
Annotations
 
The ArtifactObjectType type is intended to encapsulate and convey the content of a Raw Artifact.
Diagram
Diagram Artifact_Object_xsd.tmp#ArtifactObjectType_type Artifact_Object_xsd.tmp#ArtifactObjectType_content_type Artifact_Object_xsd.tmp#ArtifactObjectType_content_type_version Artifact_Object_xsd.tmp#ArtifactObjectType_suspected_malicious Artifact_Object_xsd.tmp#ArtifactObjectType_Hashes Artifact_Object_xsd.tmp#ArtifactObjectType_Packaging Artifact_Object_xsd.tmp#ArtifactObjectType_Raw_Artifact Artifact_Object_xsd.tmp#ArtifactObjectType_Raw_Artifact_Reference
Type extension of ObjectPropertiesType
Type hierarchy
Used by
Children ArtifactObj:Hashes, ArtifactObj:Packaging, ArtifactObj:Raw_Artifact, ArtifactObj:Raw_Artifact_Reference
Source
 
<xs:complexType name="ArtifactObjectType">
  <xs:annotation>
    <xs:documentation>The ArtifactObjectType type is intended to encapsulate and convey the content of a Raw Artifact.</xs:documentation>
  </xs:annotation>
  <xs:complexContent>
    <xs:extension base="cyboxCommon:ObjectPropertiesType">
      <xs:sequence>
        <xs:element name="Hashes" type="cyboxCommon:HashListType" minOccurs="0">
          <xs:annotation>
            <xs:documentation>The Hashes field is optional and specifies hashes for the Raw_Artifact content.</xs:documentation>
          </xs:annotation>
        </xs:element>
        <xs:element name="Packaging" type="ArtifactObj:PackagingType" minOccurs="0">
          <xs:annotation>
            <xs:documentation>The Packaging field is optional and characterizes packaging layers (e.g. compression, encryption, encoding) applied to the original content to generate the content of the Raw_Artifact field of this Object. The ordering of entries in this sequence implicitly denotes the ordering of packaging layer operations applied.</xs:documentation>
          </xs:annotation>
        </xs:element>
        <xs:choice>
          <xs:element name="Raw_Artifact" type="ArtifactObj:RawArtifactType" minOccurs="0">
            <xs:annotation>
              <xs:documentation>The Raw_Artifact field contains the raw content of a cyber artifact (rather than simply analysis of that artifact). It is conveyed within a string-based field and should be further enclosed in a CDATA section within the string-based field.</xs:documentation>
            </xs:annotation>
          </xs:element>
          <xs:element name="Raw_Artifact_Reference" type="xs:anyURI" minOccurs="0">
            <xs:annotation>
              <xs:documentation>The Raw_Artifact_Reference field contains a reference to an external instance of the raw content of a cyber artifact (rather than simply analysis of that artifact).</xs:documentation>
            </xs:annotation>
          </xs:element>
        </xs:choice>
      </xs:sequence>
      <xs:attribute name="type" type="ArtifactObj:ArtifactTypeEnum">
        <xs:annotation>
          <xs:documentation>The type field specifies the general type of the artifact contained in this Defined Object.</xs:documentation>
        </xs:annotation>
      </xs:attribute>
      <xs:attribute name="content_type" type="xs:string">
        <xs:annotation>
          <xs:documentation>The content_type field is optional and specifies the Internet Media Type of the artifact contained in this Defined Object.</xs:documentation>
        </xs:annotation>
      </xs:attribute>
      <xs:attribute name="content_type_version" type="xs:string">
        <xs:annotation>
          <xs:documentation>The content_type_version field is optional and specifies the content type version of the artifact contained in this Defined Object.</xs:documentation>
        </xs:annotation>
      </xs:attribute>
      <xs:attribute name="suspected_malicious" type="xs:boolean">
        <xs:annotation>
          <xs:documentation>The suspected_malicious field is optional and conveys whether the content of the Raw_Artifact is believed to be malicoius.</xs:documentation>
        </xs:annotation>
      </xs:attribute>
    </xs:extension>
  </xs:complexContent>
</xs:complexType>
Complex Type ArtifactObj:PackagingType
Namespace http://cybox.mitre.org/objects#ArtifactObject-2
Annotations
 
The PackagingType captures any packaging layers applied to an artifact.
Diagram
Diagram Artifact_Object_xsd.tmp#PackagingType_is_encrypted Artifact_Object_xsd.tmp#PackagingType_is_compressed Artifact_Object_xsd.tmp#PackagingType_Compression Artifact_Object_xsd.tmp#PackagingType_Encryption Artifact_Object_xsd.tmp#PackagingType_Encoding
Used by
Children ArtifactObj:Compression, ArtifactObj:Encoding, ArtifactObj:Encryption
Attributes
QName Type Use Annotation
is_compressed xs:boolean optional 
The is_compressed field is optional and specifies whether the Raw_Artifact content is compressed.
is_encrypted xs:boolean optional 
The is_encrypted field is optional and specifies whether the Raw_Artifact content is protected/encrypted.
Source
 
<xs:complexType name="PackagingType">
  <xs:annotation>
    <xs:documentation>The PackagingType captures any packaging layers applied to an artifact.</xs:documentation>
  </xs:annotation>
  <xs:sequence>
    <xs:choice maxOccurs="unbounded">
      <xs:element name="Compression" type="ArtifactObj:CompressionType" minOccurs="0">
        <xs:annotation>
          <xs:documentation>The Compression field is optional and specifies details for a compression layer applied to the content of the Raw_Artifact.</xs:documentation>
        </xs:annotation>
      </xs:element>
      <xs:element name="Encryption" type="ArtifactObj:EncryptionType" minOccurs="0">
        <xs:annotation>
          <xs:documentation>The Encryption field is optional and specifies details for an encryption layer applied to the content of the Raw_Artifact.</xs:documentation>
        </xs:annotation>
      </xs:element>
      <xs:element name="Encoding" type="ArtifactObj:EncodingType" minOccurs="0">
        <xs:annotation>
          <xs:documentation>The Encoding field is optional and specifies details for an encoding layer applied to the content of the Raw_Artifact.</xs:documentation>
        </xs:annotation>
      </xs:element>
    </xs:choice>
  </xs:sequence>
  <xs:attribute name="is_encrypted" type="xs:boolean">
    <xs:annotation>
      <xs:documentation>The is_encrypted field is optional and specifies whether the Raw_Artifact content is protected/encrypted.</xs:documentation>
    </xs:annotation>
  </xs:attribute>
  <xs:attribute name="is_compressed" type="xs:boolean">
    <xs:annotation>
      <xs:documentation>The is_compressed field is optional and specifies whether the Raw_Artifact content is compressed.</xs:documentation>
    </xs:annotation>
  </xs:attribute>
</xs:complexType>
Complex Type ArtifactObj:CompressionType
Namespace http://cybox.mitre.org/objects#ArtifactObject-2
Annotations
 
The CompressionType captures any compression packaging details for an artifact.
Diagram
Diagram Artifact_Object_xsd.tmp#CompressionType_compression_mechanism Artifact_Object_xsd.tmp#CompressionType_compression_mechanism_ref
Used by
Attributes
QName Type Use Annotation
compression_mechanism xs:string optional 
The compression_mechanism field is optional and specifies the compression algorithm utilized to protect the Raw_Artifact content.
compression_mechanism_ref xs:anyURI optional 
The compression_mechanism_ref field is optional and conveys a reference to a description of the compression algorithm utilized to protect the Raw_Artifact content.
Source
 
<xs:complexType name="CompressionType">
  <xs:annotation>
    <xs:documentation>The CompressionType captures any compression packaging details for an artifact.</xs:documentation>
  </xs:annotation>
  <xs:attribute name="compression_mechanism" type="xs:string">
    <xs:annotation>
      <xs:documentation>The compression_mechanism field is optional and specifies the compression algorithm utilized to protect the Raw_Artifact content.</xs:documentation>
    </xs:annotation>
  </xs:attribute>
  <xs:attribute name="compression_mechanism_ref" type="xs:anyURI">
    <xs:annotation>
      <xs:documentation>The compression_mechanism_ref field is optional and conveys a reference to a description of the compression algorithm utilized to protect the Raw_Artifact content.</xs:documentation>
    </xs:annotation>
  </xs:attribute>
</xs:complexType>
Complex Type ArtifactObj:EncryptionType
Namespace http://cybox.mitre.org/objects#ArtifactObject-2
Annotations
 
The EncryptionType captures any encryption packaging details for an artifact.
Diagram
Diagram Artifact_Object_xsd.tmp#EncryptionType_encryption_mechanism Artifact_Object_xsd.tmp#EncryptionType_encryption_mechanism_ref Artifact_Object_xsd.tmp#EncryptionType_encryption_key Artifact_Object_xsd.tmp#EncryptionType_encryption_key_ref
Used by
Attributes
QName Type Use Annotation
encryption_key xs:string optional 
The encryption_key field is optional and locally specifies the password for unprotecting/decrypting the Raw_Artifact content.
encryption_key_ref xs:anyURI optional 
The encryption_key_ref field is optional and specifies a reference to a remote specification of the password for unprotecting/decrypting the Raw_Artifact content.
encryption_mechanism xs:string optional 
The encryption_mechanism field is optional and specifies the protection/encryption algorithm utilized to protect the Raw_Artifact content.
encryption_mechanism_ref xs:anyURI optional 
The encryption_mechanism_ref field is optional and conveys a reference to a description of the protection/encryption algorithm utilized to protect the Raw_Artifact content.
Source
 
<xs:complexType name="EncryptionType">
  <xs:annotation>
    <xs:documentation>The EncryptionType captures any encryption packaging details for an artifact.</xs:documentation>
  </xs:annotation>
  <xs:attribute name="encryption_mechanism" type="xs:string">
    <xs:annotation>
      <xs:documentation>The encryption_mechanism field is optional and specifies the protection/encryption algorithm utilized to protect the Raw_Artifact content.</xs:documentation>
    </xs:annotation>
  </xs:attribute>
  <xs:attribute name="encryption_mechanism_ref" type="xs:anyURI">
    <xs:annotation>
      <xs:documentation>The encryption_mechanism_ref field is optional and conveys a reference to a description of the protection/encryption algorithm utilized to protect the Raw_Artifact content.</xs:documentation>
    </xs:annotation>
  </xs:attribute>
  <xs:attribute name="encryption_key" type="xs:string">
    <xs:annotation>
      <xs:documentation>The encryption_key field is optional and locally specifies the password for unprotecting/decrypting the Raw_Artifact content.</xs:documentation>
    </xs:annotation>
  </xs:attribute>
  <xs:attribute name="encryption_key_ref" type="xs:anyURI">
    <xs:annotation>
      <xs:documentation>The encryption_key_ref field is optional and specifies a reference to a remote specification of the password for unprotecting/decrypting the Raw_Artifact content.</xs:documentation>
    </xs:annotation>
  </xs:attribute>
</xs:complexType>
Complex Type ArtifactObj:EncodingType
Namespace http://cybox.mitre.org/objects#ArtifactObject-2
Annotations
 
The EncodingType captures any encoding packaging details for an artifact.
Diagram
Diagram Artifact_Object_xsd.tmp#EncodingType_algorithm Artifact_Object_xsd.tmp#EncodingType_character_set Artifact_Object_xsd.tmp#EncodingType_custom_character_set_ref
Used by
Attributes
QName Type Default Use Annotation
algorithm xs:string Base64 optional 
The algorithm field is optional and specifies the encoding algorithm utilized to encode the Raw_Artifact.
character_set xs:string optional 
The character_set field is optional and specifies the character set utilized in the Raw_Artifact content encoding.
custom_character_set_ref xs:anyURI optional 
The custom_character_set_ref field is optional and conveys a reference to a specification of the custom character set used to encode the Raw_Artifact.
Source
 
<xs:complexType name="EncodingType">
  <xs:annotation>
    <xs:documentation>The EncodingType captures any encoding packaging details for an artifact.</xs:documentation>
  </xs:annotation>
  <xs:attribute name="algorithm" type="xs:string" default="Base64">
    <xs:annotation>
      <xs:documentation>The algorithm field is optional and specifies the encoding algorithm utilized to encode the Raw_Artifact.</xs:documentation>
    </xs:annotation>
  </xs:attribute>
  <xs:attribute name="character_set" type="xs:string">
    <xs:annotation>
      <xs:documentation>The character_set field is optional and specifies the character set utilized in the Raw_Artifact content encoding.</xs:documentation>
    </xs:annotation>
  </xs:attribute>
  <xs:attribute name="custom_character_set_ref" type="xs:anyURI">
    <xs:annotation>
      <xs:documentation>The custom_character_set_ref field is optional and conveys a reference to a specification of the custom character set used to encode the Raw_Artifact.</xs:documentation>
    </xs:annotation>
  </xs:attribute>
</xs:complexType>
Complex Type ArtifactObj:RawArtifactType
Namespace http://cybox.mitre.org/objects#ArtifactObject-2
Annotations
 
The RawArtifactType is intended to convey, with minimal characterization, the content of the Raw Artifact itself.
Diagram
Diagram
Type extension of StringObjectPropertyType
Type hierarchy
Used by
Source
 
<xs:complexType name="RawArtifactType">
  <xs:annotation>
    <xs:documentation>The RawArtifactType is intended to convey, with minimal characterization, the content of the Raw Artifact itself.</xs:documentation>
  </xs:annotation>
  <xs:complexContent>
    <xs:extension base="cyboxCommon:StringObjectPropertyType"/>
  </xs:complexContent>
</xs:complexType>
Simple Type ArtifactObj:ArtifactTypeEnum
Namespace http://cybox.mitre.org/objects#ArtifactObject-2
Annotations
 
The ArtifactTypeEnum is a (non-exhaustive) enumeration of cyber raw artifact types.
Diagram
Diagram
Type restriction of xs:string
Facets
enumeration File 
The File value specifies that the artifact is a file.
enumeration Memory Region 
The Memory Region value specifies that the artifact is a block of data from a region of memory.
enumeration File System Fragment 
The File System Fragment value specifies that the artifact is a block of data from a file system.
enumeration Network Traffic 
The Network Traffic value specifies that the artifact is a block of network traffic data such as PCAP.
enumeration Generic Data Region 
The Generic Data Region value specifies that the artifact is a block of data from an unknown source.
Used by
Source
 
<xs:simpleType name="ArtifactTypeEnum">
  <xs:annotation>
    <xs:documentation>The ArtifactTypeEnum is a (non-exhaustive) enumeration of cyber raw artifact types.</xs:documentation>
  </xs:annotation>
  <xs:restriction base="xs:string">
    <xs:enumeration value="File">
      <xs:annotation>
        <xs:documentation>The File value specifies that the artifact is a file.</xs:documentation>
      </xs:annotation>
    </xs:enumeration>
    <xs:enumeration value="Memory Region">
      <xs:annotation>
        <xs:documentation>The Memory Region value specifies that the artifact is a block of data from a region of memory.</xs:documentation>
      </xs:annotation>
    </xs:enumeration>
    <xs:enumeration value="File System Fragment">
      <xs:annotation>
        <xs:documentation>The File System Fragment value specifies that the artifact is a block of data from a file system.</xs:documentation>
      </xs:annotation>
    </xs:enumeration>
    <xs:enumeration value="Network Traffic">
      <xs:annotation>
        <xs:documentation>The Network Traffic value specifies that the artifact is a block of network traffic data such as PCAP.</xs:documentation>
      </xs:annotation>
    </xs:enumeration>
    <xs:enumeration value="Generic Data Region">
      <xs:annotation>
        <xs:documentation>The Generic Data Region value specifies that the artifact is a block of data from an unknown source.</xs:documentation>
      </xs:annotation>
    </xs:enumeration>
  </xs:restriction>
</xs:simpleType>
Attribute ArtifactObj:CompressionType / @compression_mechanism
Namespace No namespace
Annotations
 
The compression_mechanism field is optional and specifies the compression algorithm utilized to protect the Raw_Artifact content.
Type xs:string
Used by
Source
 
<xs:attribute name="compression_mechanism" type="xs:string">
  <xs:annotation>
    <xs:documentation>The compression_mechanism field is optional and specifies the compression algorithm utilized to protect the Raw_Artifact content.</xs:documentation>
  </xs:annotation>
</xs:attribute>
Attribute ArtifactObj:CompressionType / @compression_mechanism_ref
Namespace No namespace
Annotations
 
The compression_mechanism_ref field is optional and conveys a reference to a description of the compression algorithm utilized to protect the Raw_Artifact content.
Type xs:anyURI
Used by
Source
 
<xs:attribute name="compression_mechanism_ref" type="xs:anyURI">
  <xs:annotation>
    <xs:documentation>The compression_mechanism_ref field is optional and conveys a reference to a description of the compression algorithm utilized to protect the Raw_Artifact content.</xs:documentation>
  </xs:annotation>
</xs:attribute>
Attribute ArtifactObj:EncryptionType / @encryption_mechanism
Namespace No namespace
Annotations
 
The encryption_mechanism field is optional and specifies the protection/encryption algorithm utilized to protect the Raw_Artifact content.
Type xs:string
Used by
Source
 
<xs:attribute name="encryption_mechanism" type="xs:string">
  <xs:annotation>
    <xs:documentation>The encryption_mechanism field is optional and specifies the protection/encryption algorithm utilized to protect the Raw_Artifact content.</xs:documentation>
  </xs:annotation>
</xs:attribute>
Attribute ArtifactObj:EncryptionType / @encryption_mechanism_ref
Namespace No namespace
Annotations
 
The encryption_mechanism_ref field is optional and conveys a reference to a description of the protection/encryption algorithm utilized to protect the Raw_Artifact content.
Type xs:anyURI
Used by
Source
 
<xs:attribute name="encryption_mechanism_ref" type="xs:anyURI">
  <xs:annotation>
    <xs:documentation>The encryption_mechanism_ref field is optional and conveys a reference to a description of the protection/encryption algorithm utilized to protect the Raw_Artifact content.</xs:documentation>
  </xs:annotation>
</xs:attribute>
Attribute ArtifactObj:EncryptionType / @encryption_key
Namespace No namespace
Annotations
 
The encryption_key field is optional and locally specifies the password for unprotecting/decrypting the Raw_Artifact content.
Type xs:string
Used by
Source
 
<xs:attribute name="encryption_key" type="xs:string">
  <xs:annotation>
    <xs:documentation>The encryption_key field is optional and locally specifies the password for unprotecting/decrypting the Raw_Artifact content.</xs:documentation>
  </xs:annotation>
</xs:attribute>
Attribute ArtifactObj:EncryptionType / @encryption_key_ref
Namespace No namespace
Annotations
 
The encryption_key_ref field is optional and specifies a reference to a remote specification of the password for unprotecting/decrypting the Raw_Artifact content.
Type xs:anyURI
Used by
Source
 
<xs:attribute name="encryption_key_ref" type="xs:anyURI">
  <xs:annotation>
    <xs:documentation>The encryption_key_ref field is optional and specifies a reference to a remote specification of the password for unprotecting/decrypting the Raw_Artifact content.</xs:documentation>
  </xs:annotation>
</xs:attribute>
Attribute ArtifactObj:EncodingType / @algorithm
Namespace No namespace
Annotations
 
The algorithm field is optional and specifies the encoding algorithm utilized to encode the Raw_Artifact.
Type xs:string
Used by
Source
 
<xs:attribute name="algorithm" type="xs:string" default="Base64">
  <xs:annotation>
    <xs:documentation>The algorithm field is optional and specifies the encoding algorithm utilized to encode the Raw_Artifact.</xs:documentation>
  </xs:annotation>
</xs:attribute>
Attribute ArtifactObj:EncodingType / @character_set
Namespace No namespace
Annotations
 
The character_set field is optional and specifies the character set utilized in the Raw_Artifact content encoding.
Type xs:string
Used by
Source
 
<xs:attribute name="character_set" type="xs:string">
  <xs:annotation>
    <xs:documentation>The character_set field is optional and specifies the character set utilized in the Raw_Artifact content encoding.</xs:documentation>
  </xs:annotation>
</xs:attribute>
Attribute ArtifactObj:EncodingType / @custom_character_set_ref
Namespace No namespace
Annotations
 
The custom_character_set_ref field is optional and conveys a reference to a specification of the custom character set used to encode the Raw_Artifact.
Type xs:anyURI
Used by
Source
 
<xs:attribute name="custom_character_set_ref" type="xs:anyURI">
  <xs:annotation>
    <xs:documentation>The custom_character_set_ref field is optional and conveys a reference to a specification of the custom character set used to encode the Raw_Artifact.</xs:documentation>
  </xs:annotation>
</xs:attribute>
Attribute ArtifactObj:PackagingType / @is_encrypted
Namespace No namespace
Annotations
 
The is_encrypted field is optional and specifies whether the Raw_Artifact content is protected/encrypted.
Type xs:boolean
Used by
Source
 
<xs:attribute name="is_encrypted" type="xs:boolean">
  <xs:annotation>
    <xs:documentation>The is_encrypted field is optional and specifies whether the Raw_Artifact content is protected/encrypted.</xs:documentation>
  </xs:annotation>
</xs:attribute>
Attribute ArtifactObj:PackagingType / @is_compressed
Namespace No namespace
Annotations
 
The is_compressed field is optional and specifies whether the Raw_Artifact content is compressed.
Type xs:boolean
Used by
Source
 
<xs:attribute name="is_compressed" type="xs:boolean">
  <xs:annotation>
    <xs:documentation>The is_compressed field is optional and specifies whether the Raw_Artifact content is compressed.</xs:documentation>
  </xs:annotation>
</xs:attribute>
Attribute ArtifactObj:ArtifactObjectType / @type
Namespace No namespace
Annotations
 
The type field specifies the general type of the artifact contained in this Defined Object.
Type ArtifactObj:ArtifactTypeEnum
Facets
enumeration File 
The File value specifies that the artifact is a file.
enumeration Memory Region 
The Memory Region value specifies that the artifact is a block of data from a region of memory.
enumeration File System Fragment 
The File System Fragment value specifies that the artifact is a block of data from a file system.
enumeration Network Traffic 
The Network Traffic value specifies that the artifact is a block of network traffic data such as PCAP.
enumeration Generic Data Region 
The Generic Data Region value specifies that the artifact is a block of data from an unknown source.
Used by
Source
 
<xs:attribute name="type" type="ArtifactObj:ArtifactTypeEnum">
  <xs:annotation>
    <xs:documentation>The type field specifies the general type of the artifact contained in this Defined Object.</xs:documentation>
  </xs:annotation>
</xs:attribute>
Attribute ArtifactObj:ArtifactObjectType / @content_type
Namespace No namespace
Annotations
 
The content_type field is optional and specifies the Internet Media Type of the artifact contained in this Defined Object.
Type xs:string
Used by
Complex Type ArtifactObj:ArtifactObjectType
Source
 
<xs:attribute name="content_type" type="xs:string">
  <xs:annotation>
    <xs:documentation>The content_type field is optional and specifies the Internet Media Type of the artifact contained in this Defined Object.</xs:documentation>
  </xs:annotation>
</xs:attribute>
Attribute ArtifactObj:ArtifactObjectType / @content_type_version
Namespace No namespace
Annotations
 
The content_type_version field is optional and specifies the content type version of the artifact contained in this Defined Object.
Type xs:string
Used by
Complex Type ArtifactObj:ArtifactObjectType
Source
 
<xs:attribute name="content_type_version" type="xs:string">
  <xs:annotation>
    <xs:documentation>The content_type_version field is optional and specifies the content type version of the artifact contained in this Defined Object.</xs:documentation>
  </xs:annotation>
</xs:attribute>
Attribute ArtifactObj:ArtifactObjectType / @suspected_malicious
Namespace No namespace
Annotations
 
The suspected_malicious field is optional and conveys whether the content of the Raw_Artifact is believed to be malicoius.
Type xs:boolean
Used by
Source
 
<xs:attribute name="suspected_malicious" type="xs:boolean">
  <xs:annotation>
    <xs:documentation>The suspected_malicious field is optional and conveys whether the content of the Raw_Artifact is believed to be malicoius.</xs:documentation>
  </xs:annotation>
</xs:attribute>
XML Schema documentation generated by ® XML Editor.