Showing:

Annotations
Attributes
Diagrams
Facets
Source
Used by
Main schema PDF_File_Object.xsd
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
This schema was originally developed by The MITRE Corporation. The CybOX XML Schema implementation is maintained by The MITRE Corporation and developed by the open CybOX Community. For more information, including how to get involved in the effort and how to submit change requests, please visit the CybOX website at http://cybox.mitre.org.
Element PDFFileObj:PDF_File
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The PDF_File element is intended to characterize the structural and metadata information regarding a single PDF file.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFFileObjectType_Metadata PDF_File_Object_xsd.tmp#PDFFileObjectType_Version PDF_File_Object_xsd.tmp#PDFFileObjectType_Indirect_Objects PDF_File_Object_xsd.tmp#PDFFileObjectType_Cross_Reference_Tables PDF_File_Object_xsd.tmp#PDFFileObjectType_Trailers PDF_File_Object_xsd.tmp#PDFFileObjectType
Type PDFFileObj:PDFFileObjectType
Type hierarchy
Children PDFFileObj:Cross_Reference_Tables, PDFFileObj:Indirect_Objects, PDFFileObj:Metadata, PDFFileObj:Trailers, PDFFileObj:Version
Source
 
<xs:element name="PDF_File" type="PDFFileObj:PDFFileObjectType">
  <xs:annotation>
    <xs:documentation>The PDF_File element is intended to characterize the structural and metadata information regarding a single PDF file.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFFileObjectType / PDFFileObj:Metadata
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Metadata field captures some useful metadata associated with the PDF file.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFFileMetadataType_encrypted PDF_File_Object_xsd.tmp#PDFFileMetadataType_optimized PDF_File_Object_xsd.tmp#PDFFileMetadataType_Document_Information_Dictionary PDF_File_Object_xsd.tmp#PDFFileMetadataType_Number_Of_Indirect_Objects PDF_File_Object_xsd.tmp#PDFFileMetadataType_Number_Of_Trailers PDF_File_Object_xsd.tmp#PDFFileMetadataType_Number_Of_Cross_Reference_Tables PDF_File_Object_xsd.tmp#PDFFileMetadataType_Keyword_Counts PDF_File_Object_xsd.tmp#PDFFileMetadataType
Type PDFFileObj:PDFFileMetadataType
Children PDFFileObj:Document_Information_Dictionary, PDFFileObj:Keyword_Counts, PDFFileObj:Number_Of_Cross_Reference_Tables, PDFFileObj:Number_Of_Indirect_Objects, PDFFileObj:Number_Of_Trailers
Attributes
QName Type Use Annotation
encrypted xs:boolean optional 
The encrypted field specifies whether the PDF file is encrypted.
optimized xs:boolean optional 
The optimized field specifies whether the PDF file has been optimized.
Source
 
<xs:element minOccurs="0" name="Metadata" type="PDFFileObj:PDFFileMetadataType">
  <xs:annotation>
    <xs:documentation>The Metadata field captures some useful metadata associated with the PDF file.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFFileMetadataType / PDFFileObj:Document_Information_Dictionary
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Document_Information_Dictionary field captures the details of the PDF Document Information Dicitonary, which includes properties like the document creation date and producer, if present in the PDF document.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFDocumentInformationDictionaryType_Title PDF_File_Object_xsd.tmp#PDFDocumentInformationDictionaryType_Author PDF_File_Object_xsd.tmp#PDFDocumentInformationDictionaryType_Subject PDF_File_Object_xsd.tmp#PDFDocumentInformationDictionaryType_Keywords PDF_File_Object_xsd.tmp#PDFDocumentInformationDictionaryType_Creator PDF_File_Object_xsd.tmp#PDFDocumentInformationDictionaryType_Producer PDF_File_Object_xsd.tmp#PDFDocumentInformationDictionaryType_CreationDate PDF_File_Object_xsd.tmp#PDFDocumentInformationDictionaryType_ModDate PDF_File_Object_xsd.tmp#PDFDocumentInformationDictionaryType_Trapped PDF_File_Object_xsd.tmp#PDFDocumentInformationDictionaryType
Type PDFFileObj:PDFDocumentInformationDictionaryType
Children PDFFileObj:Author, PDFFileObj:CreationDate, PDFFileObj:Creator, PDFFileObj:Keywords, PDFFileObj:ModDate, PDFFileObj:Producer, PDFFileObj:Subject, PDFFileObj:Title, PDFFileObj:Trapped
Source
 
<xs:element minOccurs="0" name="Document_Information_Dictionary" type="PDFFileObj:PDFDocumentInformationDictionaryType">
  <xs:annotation>
    <xs:documentation>The Document_Information_Dictionary field captures the details of the PDF Document Information Dicitonary, which includes properties like the document creation date and producer, if present in the PDF document.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFDocumentInformationDictionaryType / PDFFileObj:Title
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Title field captures the title of the PDF document.
Diagram
Diagram
Type StringObjectPropertyType
Source
 
<xs:element minOccurs="0" name="Title" type="cyboxCommon:StringObjectPropertyType">
  <xs:annotation>
    <xs:documentation>The Title field captures the title of the PDF document.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFDocumentInformationDictionaryType / PDFFileObj:Author
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Author field captures the name of the person who created the PDF document.
Diagram
Diagram
Type StringObjectPropertyType
Source
 
<xs:element minOccurs="0" name="Author" type="cyboxCommon:StringObjectPropertyType">
  <xs:annotation>
    <xs:documentation>The Author field captures the name of the person who created the PDF document.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFDocumentInformationDictionaryType / PDFFileObj:Subject
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Subject field captures the subject of the PDF document.
Diagram
Diagram
Type StringObjectPropertyType
Source
 
<xs:element minOccurs="0" name="Subject" type="cyboxCommon:StringObjectPropertyType">
  <xs:annotation>
    <xs:documentation>The Subject field captures the subject of the PDF document.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFDocumentInformationDictionaryType / PDFFileObj:Keywords
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Keywords field captures the keywords associated with the PDF document.
Diagram
Diagram
Type StringObjectPropertyType
Source
 
<xs:element minOccurs="0" name="Keywords" type="cyboxCommon:StringObjectPropertyType">
  <xs:annotation>
    <xs:documentation>The Keywords field captures the keywords associated with the PDF document.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFDocumentInformationDictionaryType / PDFFileObj:Creator
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Creator field captures the name of the application that created the original document, for cases where the original document was then converted to PDF.
Diagram
Diagram
Type StringObjectPropertyType
Source
 
<xs:element minOccurs="0" name="Creator" type="cyboxCommon:StringObjectPropertyType">
  <xs:annotation>
    <xs:documentation>The Creator field captures the name of the application that created the original document, for cases where the original document was then converted to PDF.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFDocumentInformationDictionaryType / PDFFileObj:Producer
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Producer field captures the name of the application that converted the document to PDF, for cases where the original document was then converted to PDF.
Diagram
Diagram
Type StringObjectPropertyType
Source
 
<xs:element maxOccurs="1" minOccurs="0" name="Producer" type="cyboxCommon:StringObjectPropertyType">
  <xs:annotation>
    <xs:documentation>The Producer field captures the name of the application that converted the document to PDF, for cases where the original document was then converted to PDF.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFDocumentInformationDictionaryType / PDFFileObj:CreationDate
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The CreationDate field captures the date and time that the document was created.
Diagram
Diagram
Type DateTimeObjectPropertyType
Source
 
<xs:element minOccurs="0" name="CreationDate" type="cyboxCommon:DateTimeObjectPropertyType">
  <xs:annotation>
    <xs:documentation>The CreationDate field captures the date and time that the document was created.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFDocumentInformationDictionaryType / PDFFileObj:ModDate
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The ModDate field captures the date and time that the document was most recently modified.
Diagram
Diagram
Type DateTimeObjectPropertyType
Source
 
<xs:element minOccurs="0" name="ModDate" type="cyboxCommon:DateTimeObjectPropertyType">
  <xs:annotation>
    <xs:documentation>The ModDate field captures the date and time that the document was most recently modified.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFDocumentInformationDictionaryType / PDFFileObj:Trapped
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Trapped field captures a name object indicating whether the document has been modified to included trapping information.
Diagram
Diagram
Type StringObjectPropertyType
Source
 
<xs:element minOccurs="0" name="Trapped" type="cyboxCommon:StringObjectPropertyType">
  <xs:annotation>
    <xs:documentation>The Trapped field captures a name object indicating whether the document has been modified to included trapping information.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFFileMetadataType / PDFFileObj:Number_Of_Indirect_Objects
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Number_Of_Indirect_Objects field captures the number of indirect PDF objects contained in the file.
Diagram
Diagram
Type PositiveIntegerObjectPropertyType
Source
 
<xs:element minOccurs="0" name="Number_Of_Indirect_Objects" type="cyboxCommon:PositiveIntegerObjectPropertyType">
  <xs:annotation>
    <xs:documentation>The Number_Of_Indirect_Objects field captures the number of indirect PDF objects contained in the file.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFFileMetadataType / PDFFileObj:Number_Of_Trailers
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Number_Of_Trailers field captures the number of trailers contained in the file.
Diagram
Diagram
Type PositiveIntegerObjectPropertyType
Source
 
<xs:element maxOccurs="1" minOccurs="0" name="Number_Of_Trailers" type="cyboxCommon:PositiveIntegerObjectPropertyType">
  <xs:annotation>
    <xs:documentation>The Number_Of_Trailers field captures the number of trailers contained in the file.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFFileMetadataType / PDFFileObj:Number_Of_Cross_Reference_Tables
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Number_Of_Cross_Reference_Tables field captures the number of cross-reference tables contained in the file.
Diagram
Diagram
Type PositiveIntegerObjectPropertyType
Source
 
<xs:element minOccurs="0" name="Number_Of_Cross_Reference_Tables" type="cyboxCommon:PositiveIntegerObjectPropertyType">
  <xs:annotation>
    <xs:documentation>The Number_Of_Cross_Reference_Tables field captures the number of cross-reference tables contained in the file.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFFileMetadataType / PDFFileObj:Keyword_Counts
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Keyword_Counts field captures the counts of various PDF keyword names in the file.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFKeywordCountsType_Page_Count PDF_File_Object_xsd.tmp#PDFKeywordCountsType_Encrypt_Count PDF_File_Object_xsd.tmp#PDFKeywordCountsType_ObjStm_Count PDF_File_Object_xsd.tmp#PDFKeywordCountsType_JS_Count PDF_File_Object_xsd.tmp#PDFKeywordCountsType_JavaScript_Count PDF_File_Object_xsd.tmp#PDFKeywordCountsType_AA_Count PDF_File_Object_xsd.tmp#PDFKeywordCountsType_OpenAction_Count PDF_File_Object_xsd.tmp#PDFKeywordCountsType_ASCIIHexDecode_Count PDF_File_Object_xsd.tmp#PDFKeywordCountsType_ASCII85Decode_Count PDF_File_Object_xsd.tmp#PDFKeywordCountsType_LZWDecode_Count PDF_File_Object_xsd.tmp#PDFKeywordCountsType_FlateDecode_Count PDF_File_Object_xsd.tmp#PDFKeywordCountsType_RunLengthDecode_Count PDF_File_Object_xsd.tmp#PDFKeywordCountsType_JBIG2Decode_Count PDF_File_Object_xsd.tmp#PDFKeywordCountsType_DCTDecode_Count PDF_File_Object_xsd.tmp#PDFKeywordCountsType_RichMedia_Count PDF_File_Object_xsd.tmp#PDFKeywordCountsType_CCITTFaxDecode_Count PDF_File_Object_xsd.tmp#PDFKeywordCountsType_Launch_Count PDF_File_Object_xsd.tmp#PDFKeywordCountsType_XFA_Count PDF_File_Object_xsd.tmp#PDFKeywordCountsType
Type PDFFileObj:PDFKeywordCountsType
Children PDFFileObj:AA_Count, PDFFileObj:ASCII85Decode_Count, PDFFileObj:ASCIIHexDecode_Count, PDFFileObj:CCITTFaxDecode_Count, PDFFileObj:DCTDecode_Count, PDFFileObj:Encrypt_Count, PDFFileObj:FlateDecode_Count, PDFFileObj:JBIG2Decode_Count, PDFFileObj:JS_Count, PDFFileObj:JavaScript_Count, PDFFileObj:LZWDecode_Count, PDFFileObj:Launch_Count, PDFFileObj:ObjStm_Count, PDFFileObj:OpenAction_Count, PDFFileObj:Page_Count, PDFFileObj:RichMedia_Count, PDFFileObj:RunLengthDecode_Count, PDFFileObj:XFA_Count
Source
 
<xs:element minOccurs="0" name="Keyword_Counts" type="PDFFileObj:PDFKeywordCountsType">
  <xs:annotation>
    <xs:documentation>The Keyword_Counts field captures the counts of various PDF keyword names in the file.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFKeywordCountsType / PDFFileObj:Page_Count
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Page_Count field captures the number of occurrences of the '/Page' keyword in the PDF file, which provides an indication of the number of pages in the PDF document.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFKeywordCountType_Non_Obfuscated_Count PDF_File_Object_xsd.tmp#PDFKeywordCountType_Obfuscated_Count PDF_File_Object_xsd.tmp#PDFKeywordCountType
Type PDFFileObj:PDFKeywordCountType
Children PDFFileObj:Non_Obfuscated_Count, PDFFileObj:Obfuscated_Count
Source
 
<xs:element minOccurs="0" name="Page_Count" type="PDFFileObj:PDFKeywordCountType">
  <xs:annotation>
    <xs:documentation>The Page_Count field captures the number of occurrences of the '/Page' keyword in the PDF file, which provides an indication of the number of pages in the PDF document.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFKeywordCountType / PDFFileObj:Non_Obfuscated_Count
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Non_Obfuscated_Count field captures the number of times the keyword occurred in the PDF file without any obfuscation.
Diagram
Diagram
Type NonNegativeIntegerObjectPropertyType
Source
 
<xs:element minOccurs="0" name="Non_Obfuscated_Count" type="cyboxCommon:NonNegativeIntegerObjectPropertyType">
  <xs:annotation>
    <xs:documentation>The Non_Obfuscated_Count field captures the number of times the keyword occurred in the PDF file without any obfuscation.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFKeywordCountType / PDFFileObj:Obfuscated_Count
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Obfuscated_Count field captures the number of times the keyword occurred in the PDF file with some form of obfuscation, such as with hexcodes.
Diagram
Diagram
Type NonNegativeIntegerObjectPropertyType
Source
 
<xs:element minOccurs="0" name="Obfuscated_Count" type="cyboxCommon:NonNegativeIntegerObjectPropertyType">
  <xs:annotation>
    <xs:documentation>The Obfuscated_Count field captures the number of times the keyword occurred in the PDF file with some form of obfuscation, such as with hexcodes.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFKeywordCountsType / PDFFileObj:Encrypt_Count
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Encrypt_Count field captures the number of occurrences of the '/Encrypt' keyword in the PDF file, which indicates that the PDF uses encryption.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFKeywordCountType_Non_Obfuscated_Count PDF_File_Object_xsd.tmp#PDFKeywordCountType_Obfuscated_Count PDF_File_Object_xsd.tmp#PDFKeywordCountType
Type PDFFileObj:PDFKeywordCountType
Children PDFFileObj:Non_Obfuscated_Count, PDFFileObj:Obfuscated_Count
Source
 
<xs:element minOccurs="0" name="Encrypt_Count" type="PDFFileObj:PDFKeywordCountType">
  <xs:annotation>
    <xs:documentation>The Encrypt_Count field captures the number of occurrences of the '/Encrypt' keyword in the PDF file, which indicates that the PDF uses encryption.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFKeywordCountsType / PDFFileObj:ObjStm_Count
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The ObjStm_Count field captures the number of occurrences of the '/ObjStm' keyword in the PDF file.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFKeywordCountType_Non_Obfuscated_Count PDF_File_Object_xsd.tmp#PDFKeywordCountType_Obfuscated_Count PDF_File_Object_xsd.tmp#PDFKeywordCountType
Type PDFFileObj:PDFKeywordCountType
Children PDFFileObj:Non_Obfuscated_Count, PDFFileObj:Obfuscated_Count
Source
 
<xs:element minOccurs="0" name="ObjStm_Count" type="PDFFileObj:PDFKeywordCountType">
  <xs:annotation>
    <xs:documentation>The ObjStm_Count field captures the number of occurrences of the '/ObjStm' keyword in the PDF file.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFKeywordCountsType / PDFFileObj:JS_Count
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The JS_Count field captures the number of occurrences of the '/JS' keyword in the PDF file.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFKeywordCountType_Non_Obfuscated_Count PDF_File_Object_xsd.tmp#PDFKeywordCountType_Obfuscated_Count PDF_File_Object_xsd.tmp#PDFKeywordCountType
Type PDFFileObj:PDFKeywordCountType
Children PDFFileObj:Non_Obfuscated_Count, PDFFileObj:Obfuscated_Count
Source
 
<xs:element minOccurs="0" name="JS_Count" type="PDFFileObj:PDFKeywordCountType">
  <xs:annotation>
    <xs:documentation>The JS_Count field captures the number of occurrences of the '/JS' keyword in the PDF file.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFKeywordCountsType / PDFFileObj:JavaScript_Count
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The JavaScript_Count field captures the number of occurrences of the '/JavaScript' keyword in the PDF file.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFKeywordCountType_Non_Obfuscated_Count PDF_File_Object_xsd.tmp#PDFKeywordCountType_Obfuscated_Count PDF_File_Object_xsd.tmp#PDFKeywordCountType
Type PDFFileObj:PDFKeywordCountType
Children PDFFileObj:Non_Obfuscated_Count, PDFFileObj:Obfuscated_Count
Source
 
<xs:element minOccurs="0" name="JavaScript_Count" type="PDFFileObj:PDFKeywordCountType">
  <xs:annotation>
    <xs:documentation>The JavaScript_Count field captures the number of occurrences of the '/JavaScript' keyword in the PDF file.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFKeywordCountsType / PDFFileObj:AA_Count
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The AA_Count field captures the number of occurrences of the '/AA' keyword in the PDF file.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFKeywordCountType_Non_Obfuscated_Count PDF_File_Object_xsd.tmp#PDFKeywordCountType_Obfuscated_Count PDF_File_Object_xsd.tmp#PDFKeywordCountType
Type PDFFileObj:PDFKeywordCountType
Children PDFFileObj:Non_Obfuscated_Count, PDFFileObj:Obfuscated_Count
Source
 
<xs:element minOccurs="0" name="AA_Count" type="PDFFileObj:PDFKeywordCountType">
  <xs:annotation>
    <xs:documentation>The AA_Count field captures the number of occurrences of the '/AA' keyword in the PDF file.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFKeywordCountsType / PDFFileObj:OpenAction_Count
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The OpenAction_Count field captures the number of occurrences of the '/OpenAction' keyword in the PDF file.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFKeywordCountType_Non_Obfuscated_Count PDF_File_Object_xsd.tmp#PDFKeywordCountType_Obfuscated_Count PDF_File_Object_xsd.tmp#PDFKeywordCountType
Type PDFFileObj:PDFKeywordCountType
Children PDFFileObj:Non_Obfuscated_Count, PDFFileObj:Obfuscated_Count
Source
 
<xs:element minOccurs="0" name="OpenAction_Count" type="PDFFileObj:PDFKeywordCountType">
  <xs:annotation>
    <xs:documentation>The OpenAction_Count field captures the number of occurrences of the '/OpenAction' keyword in the PDF file.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFKeywordCountsType / PDFFileObj:ASCIIHexDecode_Count
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The ASCIIHexDecode_Count field captures the number of occurrences of the '/ASCIIHexDecode' keyword in the PDF file.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFKeywordCountType_Non_Obfuscated_Count PDF_File_Object_xsd.tmp#PDFKeywordCountType_Obfuscated_Count PDF_File_Object_xsd.tmp#PDFKeywordCountType
Type PDFFileObj:PDFKeywordCountType
Children PDFFileObj:Non_Obfuscated_Count, PDFFileObj:Obfuscated_Count
Source
 
<xs:element minOccurs="0" name="ASCIIHexDecode_Count" type="PDFFileObj:PDFKeywordCountType">
  <xs:annotation>
    <xs:documentation>The ASCIIHexDecode_Count field captures the number of occurrences of the '/ASCIIHexDecode' keyword in the PDF file.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFKeywordCountsType / PDFFileObj:ASCII85Decode_Count
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The ASCII85Decode_Count field captures the number of occurrences of the '/ASCII85Decode' keyword in the PDF file.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFKeywordCountType_Non_Obfuscated_Count PDF_File_Object_xsd.tmp#PDFKeywordCountType_Obfuscated_Count PDF_File_Object_xsd.tmp#PDFKeywordCountType
Type PDFFileObj:PDFKeywordCountType
Children PDFFileObj:Non_Obfuscated_Count, PDFFileObj:Obfuscated_Count
Source
 
<xs:element minOccurs="0" name="ASCII85Decode_Count" type="PDFFileObj:PDFKeywordCountType">
  <xs:annotation>
    <xs:documentation>The ASCII85Decode_Count field captures the number of occurrences of the '/ASCII85Decode' keyword in the PDF file.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFKeywordCountsType / PDFFileObj:LZWDecode_Count
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The LZWDecode_Count field captures the number of occurrences of the '/LZWDecode' keyword in the PDF file.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFKeywordCountType_Non_Obfuscated_Count PDF_File_Object_xsd.tmp#PDFKeywordCountType_Obfuscated_Count PDF_File_Object_xsd.tmp#PDFKeywordCountType
Type PDFFileObj:PDFKeywordCountType
Children PDFFileObj:Non_Obfuscated_Count, PDFFileObj:Obfuscated_Count
Source
 
<xs:element minOccurs="0" name="LZWDecode_Count" type="PDFFileObj:PDFKeywordCountType">
  <xs:annotation>
    <xs:documentation>The LZWDecode_Count field captures the number of occurrences of the '/LZWDecode' keyword in the PDF file.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFKeywordCountsType / PDFFileObj:FlateDecode_Count
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The FlateDecode_Count field captures the number of occurrences of the '/FlateDecode' keyword in the PDF file.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFKeywordCountType_Non_Obfuscated_Count PDF_File_Object_xsd.tmp#PDFKeywordCountType_Obfuscated_Count PDF_File_Object_xsd.tmp#PDFKeywordCountType
Type PDFFileObj:PDFKeywordCountType
Children PDFFileObj:Non_Obfuscated_Count, PDFFileObj:Obfuscated_Count
Source
 
<xs:element minOccurs="0" name="FlateDecode_Count" type="PDFFileObj:PDFKeywordCountType">
  <xs:annotation>
    <xs:documentation>The FlateDecode_Count field captures the number of occurrences of the '/FlateDecode' keyword in the PDF file.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFKeywordCountsType / PDFFileObj:RunLengthDecode_Count
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The RunLengthDecode_Count field captures the number of occurrences of the '/RunLengthDecode' keyword in the PDF file.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFKeywordCountType_Non_Obfuscated_Count PDF_File_Object_xsd.tmp#PDFKeywordCountType_Obfuscated_Count PDF_File_Object_xsd.tmp#PDFKeywordCountType
Type PDFFileObj:PDFKeywordCountType
Children PDFFileObj:Non_Obfuscated_Count, PDFFileObj:Obfuscated_Count
Source
 
<xs:element minOccurs="0" name="RunLengthDecode_Count" type="PDFFileObj:PDFKeywordCountType">
  <xs:annotation>
    <xs:documentation>The RunLengthDecode_Count field captures the number of occurrences of the '/RunLengthDecode' keyword in the PDF file.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFKeywordCountsType / PDFFileObj:JBIG2Decode_Count
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The JBIG2Decode_Count field captures the number of occurrences of the '/JBIG2Decode' keyword in the PDF file.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFKeywordCountType_Non_Obfuscated_Count PDF_File_Object_xsd.tmp#PDFKeywordCountType_Obfuscated_Count PDF_File_Object_xsd.tmp#PDFKeywordCountType
Type PDFFileObj:PDFKeywordCountType
Children PDFFileObj:Non_Obfuscated_Count, PDFFileObj:Obfuscated_Count
Source
 
<xs:element minOccurs="0" name="JBIG2Decode_Count" type="PDFFileObj:PDFKeywordCountType">
  <xs:annotation>
    <xs:documentation>The JBIG2Decode_Count field captures the number of occurrences of the '/JBIG2Decode' keyword in the PDF file.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFKeywordCountsType / PDFFileObj:DCTDecode_Count
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The DCTDecode_Count field captures the number of occurrences of the '/DCTDecode' keyword in the PDF file.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFKeywordCountType_Non_Obfuscated_Count PDF_File_Object_xsd.tmp#PDFKeywordCountType_Obfuscated_Count PDF_File_Object_xsd.tmp#PDFKeywordCountType
Type PDFFileObj:PDFKeywordCountType
Children PDFFileObj:Non_Obfuscated_Count, PDFFileObj:Obfuscated_Count
Source
 
<xs:element minOccurs="0" name="DCTDecode_Count" type="PDFFileObj:PDFKeywordCountType">
  <xs:annotation>
    <xs:documentation>The DCTDecode_Count field captures the number of occurrences of the '/DCTDecode' keyword in the PDF file.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFKeywordCountsType / PDFFileObj:RichMedia_Count
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The RichMedia_Count field captures the number of occurrences of the '/RichMedia' keyword in the PDF file.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFKeywordCountType_Non_Obfuscated_Count PDF_File_Object_xsd.tmp#PDFKeywordCountType_Obfuscated_Count PDF_File_Object_xsd.tmp#PDFKeywordCountType
Type PDFFileObj:PDFKeywordCountType
Children PDFFileObj:Non_Obfuscated_Count, PDFFileObj:Obfuscated_Count
Source
 
<xs:element minOccurs="0" name="RichMedia_Count" type="PDFFileObj:PDFKeywordCountType">
  <xs:annotation>
    <xs:documentation>The RichMedia_Count field captures the number of occurrences of the '/RichMedia' keyword in the PDF file.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFKeywordCountsType / PDFFileObj:CCITTFaxDecode_Count
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The CCITTFaxDecode_Count field captures the number of occurrences of the '/CCITTFaxDecode' keyword in the PDF file.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFKeywordCountType_Non_Obfuscated_Count PDF_File_Object_xsd.tmp#PDFKeywordCountType_Obfuscated_Count PDF_File_Object_xsd.tmp#PDFKeywordCountType
Type PDFFileObj:PDFKeywordCountType
Children PDFFileObj:Non_Obfuscated_Count, PDFFileObj:Obfuscated_Count
Source
 
<xs:element minOccurs="0" name="CCITTFaxDecode_Count" type="PDFFileObj:PDFKeywordCountType">
  <xs:annotation>
    <xs:documentation>The CCITTFaxDecode_Count field captures the number of occurrences of the '/CCITTFaxDecode' keyword in the PDF file.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFKeywordCountsType / PDFFileObj:Launch_Count
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Launch_Count field captures the number of occurrences of the '/Launch' keyword in the PDF file.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFKeywordCountType_Non_Obfuscated_Count PDF_File_Object_xsd.tmp#PDFKeywordCountType_Obfuscated_Count PDF_File_Object_xsd.tmp#PDFKeywordCountType
Type PDFFileObj:PDFKeywordCountType
Children PDFFileObj:Non_Obfuscated_Count, PDFFileObj:Obfuscated_Count
Source
 
<xs:element minOccurs="0" name="Launch_Count" type="PDFFileObj:PDFKeywordCountType">
  <xs:annotation>
    <xs:documentation>The Launch_Count field captures the number of occurrences of the '/Launch' keyword in the PDF file.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFKeywordCountsType / PDFFileObj:XFA_Count
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The XFA_Count field captures the number of occurrences of the '/XFA' keyword in the PDF file.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFKeywordCountType_Non_Obfuscated_Count PDF_File_Object_xsd.tmp#PDFKeywordCountType_Obfuscated_Count PDF_File_Object_xsd.tmp#PDFKeywordCountType
Type PDFFileObj:PDFKeywordCountType
Children PDFFileObj:Non_Obfuscated_Count, PDFFileObj:Obfuscated_Count
Source
 
<xs:element minOccurs="0" name="XFA_Count" type="PDFFileObj:PDFKeywordCountType">
  <xs:annotation>
    <xs:documentation>The XFA_Count field captures the number of occurrences of the '/XFA' keyword in the PDF file.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFFileObjectType / PDFFileObj:Version
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Version field specifies the decimal version number portion of the string from the PDF Header that specifies the version of the PDF specification to which the PDF file conforms, e.g. '1.4'.
Diagram
Diagram
Type DoubleObjectPropertyType
Source
 
<xs:element minOccurs="0" name="Version" type="cyboxCommon:DoubleObjectPropertyType">
  <xs:annotation>
    <xs:documentation>The Version field specifies the decimal version number portion of the string from the PDF Header that specifies the version of the PDF specification to which the PDF file conforms, e.g. '1.4'.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFFileObjectType / PDFFileObj:Indirect_Objects
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Indirect_Objects field captures the indirect objects included in the PDF file, representing the contents of a document.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFIndirectObjectListType_Indirect_Object PDF_File_Object_xsd.tmp#PDFIndirectObjectListType
Type PDFFileObj:PDFIndirectObjectListType
Children PDFFileObj:Indirect_Object
Source
 
<xs:element minOccurs="0" name="Indirect_Objects" type="PDFFileObj:PDFIndirectObjectListType">
  <xs:annotation>
    <xs:documentation>The Indirect_Objects field captures the indirect objects included in the PDF file, representing the contents of a document.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFIndirectObjectListType / PDFFileObj:Indirect_Object
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Indirect_Object field captures a single PDF indirect object contained in the file.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFIndirectObjectType_type PDF_File_Object_xsd.tmp#PDFIndirectObjectType_ID PDF_File_Object_xsd.tmp#PDFIndirectObjectType_Contents PDF_File_Object_xsd.tmp#PDFIndirectObjectType_Offset PDF_File_Object_xsd.tmp#PDFIndirectObjectType_Hashes PDF_File_Object_xsd.tmp#PDFIndirectObjectType
Type PDFFileObj:PDFIndirectObjectType
Children PDFFileObj:Contents, PDFFileObj:Hashes, PDFFileObj:ID, PDFFileObj:Offset
Attributes
QName Type Use Annotation
type PDFFileObj:PDFObjectTypeEnum optional 
The type field specifies the basic type of the PDF indirect object.
Source
 
<xs:element maxOccurs="unbounded" name="Indirect_Object" type="PDFFileObj:PDFIndirectObjectType" form="qualified">
  <xs:annotation>
    <xs:documentation>The Indirect_Object field captures a single PDF indirect object contained in the file.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFIndirectObjectType / PDFFileObj:ID
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The ID field specifies the identifier of the PDF indirect object, consisting of an object number and generation number.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFIndirectObjectIDType_Object_Number PDF_File_Object_xsd.tmp#PDFIndirectObjectIDType_Generation_Number PDF_File_Object_xsd.tmp#PDFIndirectObjectIDType
Type PDFFileObj:PDFIndirectObjectIDType
Children PDFFileObj:Generation_Number, PDFFileObj:Object_Number
Source
 
<xs:element minOccurs="0" name="ID" type="PDFFileObj:PDFIndirectObjectIDType">
  <xs:annotation>
    <xs:documentation>The ID field specifies the identifier of the PDF indirect object, consisting of an object number and generation number.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFIndirectObjectIDType / PDFFileObj:Object_Number
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Object_Number field captures the number portion of the indirect object ID.
Diagram
Diagram
Type PositiveIntegerObjectPropertyType
Source
 
<xs:element minOccurs="0" name="Object_Number" type="cyboxCommon:PositiveIntegerObjectPropertyType">
  <xs:annotation>
    <xs:documentation>The Object_Number field captures the number portion of the indirect object ID.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFIndirectObjectIDType / PDFFileObj:Generation_Number
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Generation_Number field captures the generation number portion of the indirect object ID.
Diagram
Diagram
Type NonNegativeIntegerObjectPropertyType
Source
 
<xs:element minOccurs="0" name="Generation_Number" type="cyboxCommon:NonNegativeIntegerObjectPropertyType">
  <xs:annotation>
    <xs:documentation>The Generation_Number field captures the generation number portion of the indirect object ID.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFIndirectObjectType / PDFFileObj:Contents
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Contents field captures the contents of the PDF indirect object, including non-stream and stream data.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFIndirectObjectContentsType_Non_Stream_Contents PDF_File_Object_xsd.tmp#PDFIndirectObjectContentsType_Stream_Contents PDF_File_Object_xsd.tmp#PDFIndirectObjectContentsType
Type PDFFileObj:PDFIndirectObjectContentsType
Children PDFFileObj:Non_Stream_Contents, PDFFileObj:Stream_Contents
Source
 
<xs:element minOccurs="0" name="Contents" type="PDFFileObj:PDFIndirectObjectContentsType">
  <xs:annotation>
    <xs:documentation>The Contents field captures the contents of the PDF indirect object, including non-stream and stream data.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFIndirectObjectContentsType / PDFFileObj:Non_Stream_Contents
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Non_Stream_Contents field captures the raw contents of the PDF indirect object excluding any stream data (i.e. everything after the 'obj' keyword and before the 'endobj' keyword up to but not including anything between the 'stream' and 'endstream' keywords) as a string enclosed in an XML CDATA section.
Diagram
Diagram
Type StringObjectPropertyType
Source
 
<xs:element minOccurs="0" name="Non_Stream_Contents" type="cyboxCommon:StringObjectPropertyType">
  <xs:annotation>
    <xs:documentation>The Non_Stream_Contents field captures the raw contents of the PDF indirect object excluding any stream data (i.e. everything after the 'obj' keyword and before the 'endobj' keyword up to but not including anything between the 'stream' and 'endstream' keywords) as a string enclosed in an XML CDATA section.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFIndirectObjectContentsType / PDFFileObj:Stream_Contents
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Stream_Contents field captures the stream contained within in the PDF indirect object, if applicable.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFStreamType_Raw_Stream PDF_File_Object_xsd.tmp#PDFStreamType_Raw_Stream_Hashes PDF_File_Object_xsd.tmp#PDFStreamType_Decoded_Stream PDF_File_Object_xsd.tmp#PDFStreamType_Decoded_Stream_Hashes PDF_File_Object_xsd.tmp#PDFStreamType
Type PDFFileObj:PDFStreamType
Children PDFFileObj:Decoded_Stream, PDFFileObj:Decoded_Stream_Hashes, PDFFileObj:Raw_Stream, PDFFileObj:Raw_Stream_Hashes
Source
 
<xs:element minOccurs="0" name="Stream_Contents" type="PDFFileObj:PDFStreamType">
  <xs:annotation>
    <xs:documentation>The Stream_Contents field captures the stream contained within in the PDF indirect object, if applicable.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFStreamType / PDFFileObj:Raw_Stream
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Raw_Stream element captures the raw, undecoded stream (i.e., everything between the 'stream' and 'endstream' keywords), as a hex string.
Diagram
Diagram
Type StringObjectPropertyType
Source
 
<xs:element minOccurs="0" name="Raw_Stream" type="cyboxCommon:StringObjectPropertyType">
  <xs:annotation>
    <xs:documentation>The Raw_Stream element captures the raw, undecoded stream (i.e., everything between the 'stream' and 'endstream' keywords), as a hex string.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFStreamType / PDFFileObj:Raw_Stream_Hashes
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Raw_Stream_Hashes field captures any hashes of the raw, undecoded stream.
Diagram
Diagram
Type HashListType
Source
 
<xs:element minOccurs="0" name="Raw_Stream_Hashes" type="cyboxCommon:HashListType">
  <xs:annotation>
    <xs:documentation>The Raw_Stream_Hashes field captures any hashes of the raw, undecoded stream.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFStreamType / PDFFileObj:Decoded_Stream
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Decoded_Stream field captures the decoded stream (i.e., after undoing the specified filters in the correct order) as a hex string.
Diagram
Diagram
Type HexBinaryObjectPropertyType
Source
 
<xs:element minOccurs="0" name="Decoded_Stream" type="cyboxCommon:HexBinaryObjectPropertyType">
  <xs:annotation>
    <xs:documentation>The Decoded_Stream field captures the decoded stream (i.e., after undoing the specified filters in the correct order) as a hex string.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFStreamType / PDFFileObj:Decoded_Stream_Hashes
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Decoded_Stream_Hashes field captures any hashes of the decoded stream.
Diagram
Diagram
Type HashListType
Source
 
<xs:element minOccurs="0" name="Decoded_Stream_Hashes" type="cyboxCommon:HashListType">
  <xs:annotation>
    <xs:documentation>The Decoded_Stream_Hashes field captures any hashes of the decoded stream.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFIndirectObjectType / PDFFileObj:Offset
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Offset field specifies the offset of the PDF indirect object from the beginning of the file, in bytes.
Diagram
Diagram
Type PositiveIntegerObjectPropertyType
Source
 
<xs:element minOccurs="0" name="Offset" type="cyboxCommon:PositiveIntegerObjectPropertyType">
  <xs:annotation>
    <xs:documentation>The Offset field specifies the offset of the PDF indirect object from the beginning of the file, in bytes.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFIndirectObjectType / PDFFileObj:Hashes
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Hashes field captures any hashes that were computed for the PDF indirect object.
Diagram
Diagram
Type HashListType
Source
 
<xs:element minOccurs="0" name="Hashes" type="cyboxCommon:HashListType">
  <xs:annotation>
    <xs:documentation>The Hashes field captures any hashes that were computed for the PDF indirect object.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFFileObjectType / PDFFileObj:Cross_Reference_Tables
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Cross_Reference_Tables field captures the cross-reference tables included in the PDF file, used for facilitating random access of indirect PDF objects.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFXRefTableListType_Cross_Reference_Table PDF_File_Object_xsd.tmp#PDFXRefTableListType
Type PDFFileObj:PDFXRefTableListType
Children PDFFileObj:Cross_Reference_Table
Source
 
<xs:element minOccurs="0" name="Cross_Reference_Tables" type="PDFFileObj:PDFXRefTableListType">
  <xs:annotation>
    <xs:documentation>The Cross_Reference_Tables field captures the cross-reference tables included in the PDF file, used for facilitating random access of indirect PDF objects.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFXRefTableListType / PDFFileObj:Cross_Reference_Table
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Cross_Reference_Table field captures the cross-reference table contained in the PDF file, for the random access of indirect objects contained in the file.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFXRefTableType_Subsections PDF_File_Object_xsd.tmp#PDFXRefTableType_Offset PDF_File_Object_xsd.tmp#PDFXRefTableType_Hashes PDF_File_Object_xsd.tmp#PDFXRefTableType
Type PDFFileObj:PDFXRefTableType
Children PDFFileObj:Hashes, PDFFileObj:Offset, PDFFileObj:Subsections
Source
 
<xs:element maxOccurs="unbounded" minOccurs="1" name="Cross_Reference_Table" type="PDFFileObj:PDFXRefTableType">
  <xs:annotation>
    <xs:documentation>The Cross_Reference_Table field captures the cross-reference table contained in the PDF file, for the random access of indirect objects contained in the file.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFXRefTableType / PDFFileObj:Subsections
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Subsections field captures the subsections contained in the cross-reference table.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFXrefTableSubsectionListType_Subsection PDF_File_Object_xsd.tmp#PDFXrefTableSubsectionListType
Type PDFFileObj:PDFXrefTableSubsectionListType
Children PDFFileObj:Subsection
Source
 
<xs:element minOccurs="0" name="Subsections" type="PDFFileObj:PDFXrefTableSubsectionListType">
  <xs:annotation>
    <xs:documentation>The Subsections field captures the subsections contained in the cross-reference table.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFXrefTableSubsectionListType / PDFFileObj:Subsection
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Subsection field captures a single cross-reference table subsection in the list.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFXrefTableSubsectionType_First_Object_Number PDF_File_Object_xsd.tmp#PDFXrefTableSubsectionType_Number_Of_Objects PDF_File_Object_xsd.tmp#PDFXrefTableSubsectionType_Cross_Reference_Entries PDF_File_Object_xsd.tmp#PDFXrefTableSubsectionType
Type PDFFileObj:PDFXrefTableSubsectionType
Children PDFFileObj:Cross_Reference_Entries, PDFFileObj:First_Object_Number, PDFFileObj:Number_Of_Objects
Source
 
<xs:element maxOccurs="unbounded" name="Subsection" type="PDFFileObj:PDFXrefTableSubsectionType">
  <xs:annotation>
    <xs:documentation>The Subsection field captures a single cross-reference table subsection in the list.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFXrefTableSubsectionType / PDFFileObj:First_Object_Number
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The First_Object_Number field captures the object number of the first object for which there is a corresponding entry in this cross-reference subsection.
Diagram
Diagram
Type NonNegativeIntegerObjectPropertyType
Source
 
<xs:element minOccurs="0" name="First_Object_Number" type="cyboxCommon:NonNegativeIntegerObjectPropertyType">
  <xs:annotation>
    <xs:documentation>The First_Object_Number field captures the object number of the first object for which there is a corresponding entry in this cross-reference subsection.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFXrefTableSubsectionType / PDFFileObj:Number_Of_Objects
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Number_Of_Objects field captures the number of objects for which there are corresponding entries in this cross-reference subsection.
Diagram
Diagram
Type NonNegativeIntegerObjectPropertyType
Source
 
<xs:element minOccurs="0" name="Number_Of_Objects" type="cyboxCommon:NonNegativeIntegerObjectPropertyType">
  <xs:annotation>
    <xs:documentation>The Number_Of_Objects field captures the number of objects for which there are corresponding entries in this cross-reference subsection.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFXrefTableSubsectionType / PDFFileObj:Cross_Reference_Entries
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Cross_Reference_Entries field specifies the cross-reference entries contained in this cross-reference subsection.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFXrefEntryListType_Cross_Reference_Entry PDF_File_Object_xsd.tmp#PDFXrefEntryListType
Type PDFFileObj:PDFXrefEntryListType
Children PDFFileObj:Cross_Reference_Entry
Source
 
<xs:element minOccurs="0" name="Cross_Reference_Entries" type="PDFFileObj:PDFXrefEntryListType">
  <xs:annotation>
    <xs:documentation>The Cross_Reference_Entries field specifies the cross-reference entries contained in this cross-reference subsection.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFXrefEntryListType / PDFFileObj:Cross_Reference_Entry
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Cross_Reference_Entry field captures a single cross-reference subsection entry in the list.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFXrefEntryType_type PDF_File_Object_xsd.tmp#PDFXrefEntryType_Byte_Offset PDF_File_Object_xsd.tmp#PDFXrefEntryType_Object_Number PDF_File_Object_xsd.tmp#PDFXrefEntryType_Generation_Number PDF_File_Object_xsd.tmp#PDFXrefEntryType
Type PDFFileObj:PDFXrefEntryType
Children PDFFileObj:Byte_Offset, PDFFileObj:Generation_Number, PDFFileObj:Object_Number
Attributes
QName Type Use Annotation
type PDFFileObj:PDFXrefEntryTypeEnum optional 
The type field specifies the type of the cross-reference entry.
Source
 
<xs:element maxOccurs="unbounded" name="Cross_Reference_Entry" type="PDFFileObj:PDFXrefEntryType">
  <xs:annotation>
    <xs:documentation>The Cross_Reference_Entry field captures a single cross-reference subsection entry in the list.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFXrefEntryType / PDFFileObj:Byte_Offset
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Byte_Offset field captures the 10-digit number, padded with leading zeros if necessary, that specifies the number of bytes from the beginning of the file to the beginning of the object.
Diagram
Diagram
Type IntegerObjectPropertyType
Source
 
<xs:element minOccurs="1" name="Byte_Offset" type="cyboxCommon:IntegerObjectPropertyType">
  <xs:annotation>
    <xs:documentation>The Byte_Offset field captures the 10-digit number, padded with leading zeros if necessary, that specifies the number of bytes from the beginning of the file to the beginning of the object.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFXrefEntryType / PDFFileObj:Object_Number
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Object_Number field specifies the 10-digit object number of the next free object.
Diagram
Diagram
Type NonNegativeIntegerObjectPropertyType
Source
 
<xs:element minOccurs="1" name="Object_Number" type="cyboxCommon:NonNegativeIntegerObjectPropertyType">
  <xs:annotation>
    <xs:documentation>The Object_Number field specifies the 10-digit object number of the next free object.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFXrefEntryType / PDFFileObj:Generation_Number
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Generation_Number field specifies the 5-digit generation number to be used when an object with the same object number is created.
Diagram
Diagram
Type NonNegativeIntegerObjectPropertyType
Source
 
<xs:element minOccurs="0" name="Generation_Number" type="cyboxCommon:NonNegativeIntegerObjectPropertyType">
  <xs:annotation>
    <xs:documentation>The Generation_Number field specifies the 5-digit generation number to be used when an object with the same object number is created.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFXRefTableType / PDFFileObj:Offset
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Offset field specifies the offset of the cross-reference from the beginning of the file, in bytes.
Diagram
Diagram
Type PositiveIntegerObjectPropertyType
Source
 
<xs:element minOccurs="0" name="Offset" type="cyboxCommon:PositiveIntegerObjectPropertyType">
  <xs:annotation>
    <xs:documentation>The Offset field specifies the offset of the cross-reference from the beginning of the file, in bytes.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFXRefTableType / PDFFileObj:Hashes
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Hashes field captures any hashes that were computed for the cross-reference table.
Diagram
Diagram
Type HashListType
Source
 
<xs:element minOccurs="0" name="Hashes" type="cyboxCommon:HashListType">
  <xs:annotation>
    <xs:documentation>The Hashes field captures any hashes that were computed for the cross-reference table.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFFileObjectType / PDFFileObj:Trailers
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Trailers field captures the trailers included in the PDF file, used for capturing offsets to the cross-reference table and important objects.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFTrailerListType_Trailer PDF_File_Object_xsd.tmp#PDFTrailerListType
Type PDFFileObj:PDFTrailerListType
Children PDFFileObj:Trailer
Source
 
<xs:element minOccurs="0" name="Trailers" type="PDFFileObj:PDFTrailerListType">
  <xs:annotation>
    <xs:documentation>The Trailers field captures the trailers included in the PDF file, used for capturing offsets to the cross-reference table and important objects.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFTrailerListType / PDFFileObj:Trailer
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Trailer field captures a PDF file trailer contained in the file, used by applications for quickly locating the cross-reference table and certain special objects.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFTrailerType_Size PDF_File_Object_xsd.tmp#PDFTrailerType_Prev PDF_File_Object_xsd.tmp#PDFTrailerType_Root PDF_File_Object_xsd.tmp#PDFTrailerType_Encrypt PDF_File_Object_xsd.tmp#PDFTrailerType_Info PDF_File_Object_xsd.tmp#PDFTrailerType_ID PDF_File_Object_xsd.tmp#PDFTrailerType_Last_Cross_Reference_Offset PDF_File_Object_xsd.tmp#PDFTrailerType_Offset PDF_File_Object_xsd.tmp#PDFTrailerType_Hashes PDF_File_Object_xsd.tmp#PDFTrailerType
Type PDFFileObj:PDFTrailerType
Children PDFFileObj:Encrypt, PDFFileObj:Hashes, PDFFileObj:ID, PDFFileObj:Info, PDFFileObj:Last_Cross_Reference_Offset, PDFFileObj:Offset, PDFFileObj:Prev, PDFFileObj:Root, PDFFileObj:Size
Source
 
<xs:element maxOccurs="unbounded" name="Trailer" type="PDFFileObj:PDFTrailerType">
  <xs:annotation>
    <xs:documentation>The Trailer field captures a PDF file trailer contained in the file, used by applications for quickly locating the cross-reference table and certain special objects.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFTrailerType / PDFFileObj:Size
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Size field captures the total number of entries in the file's cross-reference table.
Diagram
Diagram
Type PositiveIntegerObjectPropertyType
Source
 
<xs:element minOccurs="0" name="Size" type="cyboxCommon:PositiveIntegerObjectPropertyType">
  <xs:annotation>
    <xs:documentation>The Size field captures the total number of entries in the file's cross-reference table.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFTrailerType / PDFFileObj:Prev
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Prev field the byte offset from the beginning of the file to the beginning of the previous cross-reference table. This is only applicable for files that have more than one cross-reference table.
Diagram
Diagram
Type PositiveIntegerObjectPropertyType
Source
 
<xs:element minOccurs="0" name="Prev" type="cyboxCommon:PositiveIntegerObjectPropertyType">
  <xs:annotation>
    <xs:documentation>The Prev field the byte offset from the beginning of the file to the beginning of the previous cross-reference table. This is only applicable for files that have more than one cross-reference table.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFTrailerType / PDFFileObj:Root
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Root field captures an indirect object reference that points to the catalog dictionary for the PDF document contained in the file.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFIndirectObjectIDType_Object_Number PDF_File_Object_xsd.tmp#PDFIndirectObjectIDType_Generation_Number PDF_File_Object_xsd.tmp#PDFIndirectObjectIDType
Type PDFFileObj:PDFIndirectObjectIDType
Children PDFFileObj:Generation_Number, PDFFileObj:Object_Number
Source
 
<xs:element minOccurs="0" name="Root" type="PDFFileObj:PDFIndirectObjectIDType">
  <xs:annotation>
    <xs:documentation>The Root field captures an indirect object reference that points to the catalog dictionary for the PDF document contained in the file.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFTrailerType / PDFFileObj:Encrypt
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Encrypt field captures the PDF document's encryption dictionary, either through an indirect reference or embedded set of key/value pairs.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFDictionaryType_Object_Reference PDF_File_Object_xsd.tmp#PDFDictionaryType_Raw_Contents PDF_File_Object_xsd.tmp#PDFDictionaryType
Type PDFFileObj:PDFDictionaryType
Children PDFFileObj:Object_Reference, PDFFileObj:Raw_Contents
Source
 
<xs:element minOccurs="0" name="Encrypt" type="PDFFileObj:PDFDictionaryType">
  <xs:annotation>
    <xs:documentation>The Encrypt field captures the PDF document's encryption dictionary, either through an indirect reference or embedded set of key/value pairs.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFDictionaryType / PDFFileObj:Object_Reference
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Object_Reference field captures a reference to an indirect PDF object that contains the dictionary, via its object and generation numbers.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFIndirectObjectIDType_Object_Number PDF_File_Object_xsd.tmp#PDFIndirectObjectIDType_Generation_Number PDF_File_Object_xsd.tmp#PDFIndirectObjectIDType
Type PDFFileObj:PDFIndirectObjectIDType
Children PDFFileObj:Generation_Number, PDFFileObj:Object_Number
Source
 
<xs:element minOccurs="1" name="Object_Reference" type="PDFFileObj:PDFIndirectObjectIDType">
  <xs:annotation>
    <xs:documentation>The Object_Reference field captures a reference to an indirect PDF object that contains the dictionary, via its object and generation numbers.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFDictionaryType / PDFFileObj:Raw_Contents
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Raw_Contents field captures the contents of the dictionary as a string enclosed in an XML CDATA section.
Diagram
Diagram
Type StringObjectPropertyType
Source
 
<xs:element name="Raw_Contents" type="cyboxCommon:StringObjectPropertyType">
  <xs:annotation>
    <xs:documentation>The Raw_Contents field captures the contents of the dictionary as a string enclosed in an XML CDATA section.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFTrailerType / PDFFileObj:Info
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Info field captures an indirect object reference that points to the document information dictionary.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFIndirectObjectIDType_Object_Number PDF_File_Object_xsd.tmp#PDFIndirectObjectIDType_Generation_Number PDF_File_Object_xsd.tmp#PDFIndirectObjectIDType
Type PDFFileObj:PDFIndirectObjectIDType
Children PDFFileObj:Generation_Number, PDFFileObj:Object_Number
Source
 
<xs:element minOccurs="0" name="Info" type="PDFFileObj:PDFIndirectObjectIDType">
  <xs:annotation>
    <xs:documentation>The Info field captures an indirect object reference that points to the document information dictionary.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFTrailerType / PDFFileObj:ID
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The ID field captures an array of two strings that constitutes a file identifier.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFFileIDType_ID_String PDF_File_Object_xsd.tmp#PDFFileIDType
Type PDFFileObj:PDFFileIDType
Children PDFFileObj:ID_String
Source
 
<xs:element minOccurs="0" name="ID" type="PDFFileObj:PDFFileIDType">
  <xs:annotation>
    <xs:documentation>The ID field captures an array of two strings that constitutes a file identifier.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFFileIDType / PDFFileObj:ID_String
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The ID_String field captures one of the two strings that constitutes the file identifier.
Diagram
Diagram
Type StringObjectPropertyType
Source
 
<xs:element maxOccurs="2" name="ID_String" type="cyboxCommon:StringObjectPropertyType">
  <xs:annotation>
    <xs:documentation>The ID_String field captures one of the two strings that constitutes the file identifier.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFTrailerType / PDFFileObj:Last_Cross_Reference_Offset
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Last_Cross_Reference_Offset field captures the byte offset, relative to the beginning of the file, of the last cross-reference table contained in the file.
Diagram
Diagram
Type PositiveIntegerObjectPropertyType
Source
 
<xs:element minOccurs="0" name="Last_Cross_Reference_Offset" type="cyboxCommon:PositiveIntegerObjectPropertyType">
  <xs:annotation>
    <xs:documentation>The Last_Cross_Reference_Offset field captures the byte offset, relative to the beginning of the file, of the last cross-reference table contained in the file.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFTrailerType / PDFFileObj:Offset
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Offset field specifies the offset of the trailer from the beginning of the file, in bytes.
Diagram
Diagram
Type PositiveIntegerObjectPropertyType
Source
 
<xs:element minOccurs="0" name="Offset" type="cyboxCommon:PositiveIntegerObjectPropertyType">
  <xs:annotation>
    <xs:documentation>The Offset field specifies the offset of the trailer from the beginning of the file, in bytes.</xs:documentation>
  </xs:annotation>
</xs:element>
Element PDFFileObj:PDFTrailerType / PDFFileObj:Hashes
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The Hashes field captures any hashes that were computed for the trailer.
Diagram
Diagram
Type HashListType
Source
 
<xs:element minOccurs="0" name="Hashes" type="cyboxCommon:HashListType">
  <xs:annotation>
    <xs:documentation>The Hashes field captures any hashes that were computed for the trailer.</xs:documentation>
  </xs:annotation>
</xs:element>
Complex Type PDFFileObj:PDFFileObjectType
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The PDFFileObjectType type is intended to characterize the structural makeup of PDF files.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFFileObjectType_Metadata PDF_File_Object_xsd.tmp#PDFFileObjectType_Version PDF_File_Object_xsd.tmp#PDFFileObjectType_Indirect_Objects PDF_File_Object_xsd.tmp#PDFFileObjectType_Cross_Reference_Tables PDF_File_Object_xsd.tmp#PDFFileObjectType_Trailers
Type extension of FileObjectType
Type hierarchy
Used by
Children PDFFileObj:Cross_Reference_Tables, PDFFileObj:Indirect_Objects, PDFFileObj:Metadata, PDFFileObj:Trailers, PDFFileObj:Version
Source
 
<xs:complexType name="PDFFileObjectType" mixed="false">
  <xs:annotation>
    <xs:documentation>The PDFFileObjectType type is intended to characterize the structural makeup of PDF files.</xs:documentation>
  </xs:annotation>
  <xs:complexContent>
    <xs:extension base="FileObj:FileObjectType">
      <xs:sequence minOccurs="1">
        <xs:element minOccurs="0" name="Metadata" type="PDFFileObj:PDFFileMetadataType">
          <xs:annotation>
            <xs:documentation>The Metadata field captures some useful metadata associated with the PDF file.</xs:documentation>
          </xs:annotation>
        </xs:element>
        <xs:element minOccurs="0" name="Version" type="cyboxCommon:DoubleObjectPropertyType">
          <xs:annotation>
            <xs:documentation>The Version field specifies the decimal version number portion of the string from the PDF Header that specifies the version of the PDF specification to which the PDF file conforms, e.g. '1.4'.</xs:documentation>
          </xs:annotation>
        </xs:element>
        <xs:element minOccurs="0" name="Indirect_Objects" type="PDFFileObj:PDFIndirectObjectListType">
          <xs:annotation>
            <xs:documentation>The Indirect_Objects field captures the indirect objects included in the PDF file, representing the contents of a document.</xs:documentation>
          </xs:annotation>
        </xs:element>
        <xs:element minOccurs="0" name="Cross_Reference_Tables" type="PDFFileObj:PDFXRefTableListType">
          <xs:annotation>
            <xs:documentation>The Cross_Reference_Tables field captures the cross-reference tables included in the PDF file, used for facilitating random access of indirect PDF objects.</xs:documentation>
          </xs:annotation>
        </xs:element>
        <xs:element minOccurs="0" name="Trailers" type="PDFFileObj:PDFTrailerListType">
          <xs:annotation>
            <xs:documentation>The Trailers field captures the trailers included in the PDF file, used for capturing offsets to the cross-reference table and important objects.</xs:documentation>
          </xs:annotation>
        </xs:element>
      </xs:sequence>
    </xs:extension>
  </xs:complexContent>
</xs:complexType>
Complex Type PDFFileObj:PDFFileMetadataType
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The PDFFileMetadaType captures some metadata regarding the PDF file object.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFFileMetadataType_encrypted PDF_File_Object_xsd.tmp#PDFFileMetadataType_optimized PDF_File_Object_xsd.tmp#PDFFileMetadataType_Document_Information_Dictionary PDF_File_Object_xsd.tmp#PDFFileMetadataType_Number_Of_Indirect_Objects PDF_File_Object_xsd.tmp#PDFFileMetadataType_Number_Of_Trailers PDF_File_Object_xsd.tmp#PDFFileMetadataType_Number_Of_Cross_Reference_Tables PDF_File_Object_xsd.tmp#PDFFileMetadataType_Keyword_Counts
Used by
Children PDFFileObj:Document_Information_Dictionary, PDFFileObj:Keyword_Counts, PDFFileObj:Number_Of_Cross_Reference_Tables, PDFFileObj:Number_Of_Indirect_Objects, PDFFileObj:Number_Of_Trailers
Attributes
QName Type Use Annotation
encrypted xs:boolean optional 
The encrypted field specifies whether the PDF file is encrypted.
optimized xs:boolean optional 
The optimized field specifies whether the PDF file has been optimized.
Source
 
<xs:complexType name="PDFFileMetadataType">
  <xs:annotation>
    <xs:documentation>The PDFFileMetadaType captures some metadata regarding the PDF file object.</xs:documentation>
  </xs:annotation>
  <xs:sequence>
    <xs:element minOccurs="0" name="Document_Information_Dictionary" type="PDFFileObj:PDFDocumentInformationDictionaryType">
      <xs:annotation>
        <xs:documentation>The Document_Information_Dictionary field captures the details of the PDF Document Information Dicitonary, which includes properties like the document creation date and producer, if present in the PDF document.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="Number_Of_Indirect_Objects" type="cyboxCommon:PositiveIntegerObjectPropertyType">
      <xs:annotation>
        <xs:documentation>The Number_Of_Indirect_Objects field captures the number of indirect PDF objects contained in the file.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element maxOccurs="1" minOccurs="0" name="Number_Of_Trailers" type="cyboxCommon:PositiveIntegerObjectPropertyType">
      <xs:annotation>
        <xs:documentation>The Number_Of_Trailers field captures the number of trailers contained in the file.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="Number_Of_Cross_Reference_Tables" type="cyboxCommon:PositiveIntegerObjectPropertyType">
      <xs:annotation>
        <xs:documentation>The Number_Of_Cross_Reference_Tables field captures the number of cross-reference tables contained in the file.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="Keyword_Counts" type="PDFFileObj:PDFKeywordCountsType">
      <xs:annotation>
        <xs:documentation>The Keyword_Counts field captures the counts of various PDF keyword names in the file.</xs:documentation>
      </xs:annotation>
    </xs:element>
  </xs:sequence>
  <xs:attribute name="encrypted" type="xs:boolean">
    <xs:annotation>
      <xs:documentation>The encrypted field specifies whether the PDF file is encrypted.</xs:documentation>
    </xs:annotation>
  </xs:attribute>
  <xs:attribute name="optimized" type="xs:boolean">
    <xs:annotation>
      <xs:documentation>The optimized field specifies whether the PDF file has been optimized.</xs:documentation>
    </xs:annotation>
  </xs:attribute>
</xs:complexType>
Complex Type PDFFileObj:PDFDocumentInformationDictionaryType
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The PDFDocumentInformationDictionaryType captures details of the PDF Document Information Dictionary, used for storing metadata associated with the PDF document.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFDocumentInformationDictionaryType_Title PDF_File_Object_xsd.tmp#PDFDocumentInformationDictionaryType_Author PDF_File_Object_xsd.tmp#PDFDocumentInformationDictionaryType_Subject PDF_File_Object_xsd.tmp#PDFDocumentInformationDictionaryType_Keywords PDF_File_Object_xsd.tmp#PDFDocumentInformationDictionaryType_Creator PDF_File_Object_xsd.tmp#PDFDocumentInformationDictionaryType_Producer PDF_File_Object_xsd.tmp#PDFDocumentInformationDictionaryType_CreationDate PDF_File_Object_xsd.tmp#PDFDocumentInformationDictionaryType_ModDate PDF_File_Object_xsd.tmp#PDFDocumentInformationDictionaryType_Trapped
Used by
Children PDFFileObj:Author, PDFFileObj:CreationDate, PDFFileObj:Creator, PDFFileObj:Keywords, PDFFileObj:ModDate, PDFFileObj:Producer, PDFFileObj:Subject, PDFFileObj:Title, PDFFileObj:Trapped
Source
 
<xs:complexType name="PDFDocumentInformationDictionaryType">
  <xs:annotation>
    <xs:documentation>The PDFDocumentInformationDictionaryType captures details of the PDF Document Information Dictionary, used for storing metadata associated with the PDF document.</xs:documentation>
  </xs:annotation>
  <xs:sequence>
    <xs:element minOccurs="0" name="Title" type="cyboxCommon:StringObjectPropertyType">
      <xs:annotation>
        <xs:documentation>The Title field captures the title of the PDF document.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="Author" type="cyboxCommon:StringObjectPropertyType">
      <xs:annotation>
        <xs:documentation>The Author field captures the name of the person who created the PDF document.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="Subject" type="cyboxCommon:StringObjectPropertyType">
      <xs:annotation>
        <xs:documentation>The Subject field captures the subject of the PDF document.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="Keywords" type="cyboxCommon:StringObjectPropertyType">
      <xs:annotation>
        <xs:documentation>The Keywords field captures the keywords associated with the PDF document.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="Creator" type="cyboxCommon:StringObjectPropertyType">
      <xs:annotation>
        <xs:documentation>The Creator field captures the name of the application that created the original document, for cases where the original document was then converted to PDF.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element maxOccurs="1" minOccurs="0" name="Producer" type="cyboxCommon:StringObjectPropertyType">
      <xs:annotation>
        <xs:documentation>The Producer field captures the name of the application that converted the document to PDF, for cases where the original document was then converted to PDF.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="CreationDate" type="cyboxCommon:DateTimeObjectPropertyType">
      <xs:annotation>
        <xs:documentation>The CreationDate field captures the date and time that the document was created.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="ModDate" type="cyboxCommon:DateTimeObjectPropertyType">
      <xs:annotation>
        <xs:documentation>The ModDate field captures the date and time that the document was most recently modified.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="Trapped" type="cyboxCommon:StringObjectPropertyType">
      <xs:annotation>
        <xs:documentation>The Trapped field captures a name object indicating whether the document has been modified to included trapping information.</xs:documentation>
      </xs:annotation>
    </xs:element>
  </xs:sequence>
</xs:complexType>
Complex Type PDFFileObj:PDFKeywordCountsType
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The PDFKeywordCountsType captures the occurrences of various keywords in a PDF file.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFKeywordCountsType_Page_Count PDF_File_Object_xsd.tmp#PDFKeywordCountsType_Encrypt_Count PDF_File_Object_xsd.tmp#PDFKeywordCountsType_ObjStm_Count PDF_File_Object_xsd.tmp#PDFKeywordCountsType_JS_Count PDF_File_Object_xsd.tmp#PDFKeywordCountsType_JavaScript_Count PDF_File_Object_xsd.tmp#PDFKeywordCountsType_AA_Count PDF_File_Object_xsd.tmp#PDFKeywordCountsType_OpenAction_Count PDF_File_Object_xsd.tmp#PDFKeywordCountsType_ASCIIHexDecode_Count PDF_File_Object_xsd.tmp#PDFKeywordCountsType_ASCII85Decode_Count PDF_File_Object_xsd.tmp#PDFKeywordCountsType_LZWDecode_Count PDF_File_Object_xsd.tmp#PDFKeywordCountsType_FlateDecode_Count PDF_File_Object_xsd.tmp#PDFKeywordCountsType_RunLengthDecode_Count PDF_File_Object_xsd.tmp#PDFKeywordCountsType_JBIG2Decode_Count PDF_File_Object_xsd.tmp#PDFKeywordCountsType_DCTDecode_Count PDF_File_Object_xsd.tmp#PDFKeywordCountsType_RichMedia_Count PDF_File_Object_xsd.tmp#PDFKeywordCountsType_CCITTFaxDecode_Count PDF_File_Object_xsd.tmp#PDFKeywordCountsType_Launch_Count PDF_File_Object_xsd.tmp#PDFKeywordCountsType_XFA_Count
Used by
Children PDFFileObj:AA_Count, PDFFileObj:ASCII85Decode_Count, PDFFileObj:ASCIIHexDecode_Count, PDFFileObj:CCITTFaxDecode_Count, PDFFileObj:DCTDecode_Count, PDFFileObj:Encrypt_Count, PDFFileObj:FlateDecode_Count, PDFFileObj:JBIG2Decode_Count, PDFFileObj:JS_Count, PDFFileObj:JavaScript_Count, PDFFileObj:LZWDecode_Count, PDFFileObj:Launch_Count, PDFFileObj:ObjStm_Count, PDFFileObj:OpenAction_Count, PDFFileObj:Page_Count, PDFFileObj:RichMedia_Count, PDFFileObj:RunLengthDecode_Count, PDFFileObj:XFA_Count
Source
 
<xs:complexType name="PDFKeywordCountsType">
  <xs:annotation>
    <xs:documentation>The PDFKeywordCountsType captures the occurrences of various keywords in a PDF file.</xs:documentation>
  </xs:annotation>
  <xs:sequence>
    <xs:element minOccurs="0" name="Page_Count" type="PDFFileObj:PDFKeywordCountType">
      <xs:annotation>
        <xs:documentation>The Page_Count field captures the number of occurrences of the '/Page' keyword in the PDF file, which provides an indication of the number of pages in the PDF document.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="Encrypt_Count" type="PDFFileObj:PDFKeywordCountType">
      <xs:annotation>
        <xs:documentation>The Encrypt_Count field captures the number of occurrences of the '/Encrypt' keyword in the PDF file, which indicates that the PDF uses encryption.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="ObjStm_Count" type="PDFFileObj:PDFKeywordCountType">
      <xs:annotation>
        <xs:documentation>The ObjStm_Count field captures the number of occurrences of the '/ObjStm' keyword in the PDF file.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="JS_Count" type="PDFFileObj:PDFKeywordCountType">
      <xs:annotation>
        <xs:documentation>The JS_Count field captures the number of occurrences of the '/JS' keyword in the PDF file.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="JavaScript_Count" type="PDFFileObj:PDFKeywordCountType">
      <xs:annotation>
        <xs:documentation>The JavaScript_Count field captures the number of occurrences of the '/JavaScript' keyword in the PDF file.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="AA_Count" type="PDFFileObj:PDFKeywordCountType">
      <xs:annotation>
        <xs:documentation>The AA_Count field captures the number of occurrences of the '/AA' keyword in the PDF file.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="OpenAction_Count" type="PDFFileObj:PDFKeywordCountType">
      <xs:annotation>
        <xs:documentation>The OpenAction_Count field captures the number of occurrences of the '/OpenAction' keyword in the PDF file.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="ASCIIHexDecode_Count" type="PDFFileObj:PDFKeywordCountType">
      <xs:annotation>
        <xs:documentation>The ASCIIHexDecode_Count field captures the number of occurrences of the '/ASCIIHexDecode' keyword in the PDF file.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="ASCII85Decode_Count" type="PDFFileObj:PDFKeywordCountType">
      <xs:annotation>
        <xs:documentation>The ASCII85Decode_Count field captures the number of occurrences of the '/ASCII85Decode' keyword in the PDF file.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="LZWDecode_Count" type="PDFFileObj:PDFKeywordCountType">
      <xs:annotation>
        <xs:documentation>The LZWDecode_Count field captures the number of occurrences of the '/LZWDecode' keyword in the PDF file.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="FlateDecode_Count" type="PDFFileObj:PDFKeywordCountType">
      <xs:annotation>
        <xs:documentation>The FlateDecode_Count field captures the number of occurrences of the '/FlateDecode' keyword in the PDF file.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="RunLengthDecode_Count" type="PDFFileObj:PDFKeywordCountType">
      <xs:annotation>
        <xs:documentation>The RunLengthDecode_Count field captures the number of occurrences of the '/RunLengthDecode' keyword in the PDF file.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="JBIG2Decode_Count" type="PDFFileObj:PDFKeywordCountType">
      <xs:annotation>
        <xs:documentation>The JBIG2Decode_Count field captures the number of occurrences of the '/JBIG2Decode' keyword in the PDF file.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="DCTDecode_Count" type="PDFFileObj:PDFKeywordCountType">
      <xs:annotation>
        <xs:documentation>The DCTDecode_Count field captures the number of occurrences of the '/DCTDecode' keyword in the PDF file.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="RichMedia_Count" type="PDFFileObj:PDFKeywordCountType">
      <xs:annotation>
        <xs:documentation>The RichMedia_Count field captures the number of occurrences of the '/RichMedia' keyword in the PDF file.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="CCITTFaxDecode_Count" type="PDFFileObj:PDFKeywordCountType">
      <xs:annotation>
        <xs:documentation>The CCITTFaxDecode_Count field captures the number of occurrences of the '/CCITTFaxDecode' keyword in the PDF file.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="Launch_Count" type="PDFFileObj:PDFKeywordCountType">
      <xs:annotation>
        <xs:documentation>The Launch_Count field captures the number of occurrences of the '/Launch' keyword in the PDF file.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="XFA_Count" type="PDFFileObj:PDFKeywordCountType">
      <xs:annotation>
        <xs:documentation>The XFA_Count field captures the number of occurrences of the '/XFA' keyword in the PDF file.</xs:documentation>
      </xs:annotation>
    </xs:element>
  </xs:sequence>
</xs:complexType>
Complex Type PDFFileObj:PDFKeywordCountType
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The PDFKeywordCountType captures the obfuscated and non-obfuscated occurrences of a keyword.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFKeywordCountType_Non_Obfuscated_Count PDF_File_Object_xsd.tmp#PDFKeywordCountType_Obfuscated_Count
Used by
Children PDFFileObj:Non_Obfuscated_Count, PDFFileObj:Obfuscated_Count
Source
 
<xs:complexType name="PDFKeywordCountType">
  <xs:annotation>
    <xs:documentation>The PDFKeywordCountType captures the obfuscated and non-obfuscated occurrences of a keyword.</xs:documentation>
  </xs:annotation>
  <xs:sequence>
    <xs:element minOccurs="0" name="Non_Obfuscated_Count" type="cyboxCommon:NonNegativeIntegerObjectPropertyType">
      <xs:annotation>
        <xs:documentation>The Non_Obfuscated_Count field captures the number of times the keyword occurred in the PDF file without any obfuscation.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="Obfuscated_Count" type="cyboxCommon:NonNegativeIntegerObjectPropertyType">
      <xs:annotation>
        <xs:documentation>The Obfuscated_Count field captures the number of times the keyword occurred in the PDF file with some form of obfuscation, such as with hexcodes.</xs:documentation>
      </xs:annotation>
    </xs:element>
  </xs:sequence>
</xs:complexType>
Complex Type PDFFileObj:PDFIndirectObjectListType
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The PDFIndirectObjectListType captures a list of PDF indirect objects.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFIndirectObjectListType_Indirect_Object
Used by
Children PDFFileObj:Indirect_Object
Source
 
<xs:complexType name="PDFIndirectObjectListType">
  <xs:annotation>
    <xs:documentation>The PDFIndirectObjectListType captures a list of PDF indirect objects.</xs:documentation>
  </xs:annotation>
  <xs:sequence>
    <xs:element maxOccurs="unbounded" name="Indirect_Object" type="PDFFileObj:PDFIndirectObjectType" form="qualified">
      <xs:annotation>
        <xs:documentation>The Indirect_Object field captures a single PDF indirect object contained in the file.</xs:documentation>
      </xs:annotation>
    </xs:element>
  </xs:sequence>
</xs:complexType>
Complex Type PDFFileObj:PDFIndirectObjectType
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The PDFObjectType captures the details of a PDF document indirect object, used in constructing and storing data associated with the PDF document.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFIndirectObjectType_type PDF_File_Object_xsd.tmp#PDFIndirectObjectType_ID PDF_File_Object_xsd.tmp#PDFIndirectObjectType_Contents PDF_File_Object_xsd.tmp#PDFIndirectObjectType_Offset PDF_File_Object_xsd.tmp#PDFIndirectObjectType_Hashes
Used by
Children PDFFileObj:Contents, PDFFileObj:Hashes, PDFFileObj:ID, PDFFileObj:Offset
Attributes
QName Type Use Annotation
type PDFFileObj:PDFObjectTypeEnum optional 
The type field specifies the basic type of the PDF indirect object.
Source
 
<xs:complexType name="PDFIndirectObjectType">
  <xs:annotation>
    <xs:documentation>The PDFObjectType captures the details of a PDF document indirect object, used in constructing and storing data associated with the PDF document.</xs:documentation>
  </xs:annotation>
  <xs:sequence>
    <xs:element minOccurs="0" name="ID" type="PDFFileObj:PDFIndirectObjectIDType">
      <xs:annotation>
        <xs:documentation>The ID field specifies the identifier of the PDF indirect object, consisting of an object number and generation number.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="Contents" type="PDFFileObj:PDFIndirectObjectContentsType">
      <xs:annotation>
        <xs:documentation>The Contents field captures the contents of the PDF indirect object, including non-stream and stream data.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="Offset" type="cyboxCommon:PositiveIntegerObjectPropertyType">
      <xs:annotation>
        <xs:documentation>The Offset field specifies the offset of the PDF indirect object from the beginning of the file, in bytes.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="Hashes" type="cyboxCommon:HashListType">
      <xs:annotation>
        <xs:documentation>The Hashes field captures any hashes that were computed for the PDF indirect object.</xs:documentation>
      </xs:annotation>
    </xs:element>
  </xs:sequence>
  <xs:attribute name="type" type="PDFFileObj:PDFObjectTypeEnum">
    <xs:annotation>
      <xs:documentation>The type field specifies the basic type of the PDF indirect object.</xs:documentation>
    </xs:annotation>
  </xs:attribute>
</xs:complexType>
Complex Type PDFFileObj:PDFIndirectObjectIDType
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The PDFIndirectObjectIDType captures the details of PDF indirect object IDs.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFIndirectObjectIDType_Object_Number PDF_File_Object_xsd.tmp#PDFIndirectObjectIDType_Generation_Number
Used by
Children PDFFileObj:Generation_Number, PDFFileObj:Object_Number
Source
 
<xs:complexType name="PDFIndirectObjectIDType">
  <xs:annotation>
    <xs:documentation>The PDFIndirectObjectIDType captures the details of PDF indirect object IDs.</xs:documentation>
  </xs:annotation>
  <xs:sequence>
    <xs:element minOccurs="0" name="Object_Number" type="cyboxCommon:PositiveIntegerObjectPropertyType">
      <xs:annotation>
        <xs:documentation>The Object_Number field captures the number portion of the indirect object ID.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="Generation_Number" type="cyboxCommon:NonNegativeIntegerObjectPropertyType">
      <xs:annotation>
        <xs:documentation>The Generation_Number field captures the generation number portion of the indirect object ID.</xs:documentation>
      </xs:annotation>
    </xs:element>
  </xs:sequence>
</xs:complexType>
Complex Type PDFFileObj:PDFIndirectObjectContentsType
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The PDFIndirectObjectContentsType captures the contents of a PDF indirect object, including both stream and non-stream portions.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFIndirectObjectContentsType_Non_Stream_Contents PDF_File_Object_xsd.tmp#PDFIndirectObjectContentsType_Stream_Contents
Used by
Children PDFFileObj:Non_Stream_Contents, PDFFileObj:Stream_Contents
Source
 
<xs:complexType name="PDFIndirectObjectContentsType">
  <xs:annotation>
    <xs:documentation>The PDFIndirectObjectContentsType captures the contents of a PDF indirect object, including both stream and non-stream portions.</xs:documentation>
  </xs:annotation>
  <xs:sequence>
    <xs:element minOccurs="0" name="Non_Stream_Contents" type="cyboxCommon:StringObjectPropertyType">
      <xs:annotation>
        <xs:documentation>The Non_Stream_Contents field captures the raw contents of the PDF indirect object excluding any stream data (i.e. everything after the 'obj' keyword and before the 'endobj' keyword up to but not including anything between the 'stream' and 'endstream' keywords) as a string enclosed in an XML CDATA section.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="Stream_Contents" type="PDFFileObj:PDFStreamType">
      <xs:annotation>
        <xs:documentation>The Stream_Contents field captures the stream contained within in the PDF indirect object, if applicable.</xs:documentation>
      </xs:annotation>
    </xs:element>
  </xs:sequence>
</xs:complexType>
Complex Type PDFFileObj:PDFStreamType
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The PDFStreamType element captures details of PDF document stream objects, which represent arbitrary sequences of bytes.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFStreamType_Raw_Stream PDF_File_Object_xsd.tmp#PDFStreamType_Raw_Stream_Hashes PDF_File_Object_xsd.tmp#PDFStreamType_Decoded_Stream PDF_File_Object_xsd.tmp#PDFStreamType_Decoded_Stream_Hashes
Used by
Children PDFFileObj:Decoded_Stream, PDFFileObj:Decoded_Stream_Hashes, PDFFileObj:Raw_Stream, PDFFileObj:Raw_Stream_Hashes
Source
 
<xs:complexType name="PDFStreamType">
  <xs:annotation>
    <xs:documentation>The PDFStreamType element captures details of PDF document stream objects, which represent arbitrary sequences of bytes.</xs:documentation>
  </xs:annotation>
  <xs:sequence>
    <xs:element minOccurs="0" name="Raw_Stream" type="cyboxCommon:StringObjectPropertyType">
      <xs:annotation>
        <xs:documentation>The Raw_Stream element captures the raw, undecoded stream (i.e., everything between the 'stream' and 'endstream' keywords), as a hex string.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="Raw_Stream_Hashes" type="cyboxCommon:HashListType">
      <xs:annotation>
        <xs:documentation>The Raw_Stream_Hashes field captures any hashes of the raw, undecoded stream.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="Decoded_Stream" type="cyboxCommon:HexBinaryObjectPropertyType">
      <xs:annotation>
        <xs:documentation>The Decoded_Stream field captures the decoded stream (i.e., after undoing the specified filters in the correct order) as a hex string.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="Decoded_Stream_Hashes" type="cyboxCommon:HashListType">
      <xs:annotation>
        <xs:documentation>The Decoded_Stream_Hashes field captures any hashes of the decoded stream.</xs:documentation>
      </xs:annotation>
    </xs:element>
  </xs:sequence>
</xs:complexType>
Simple Type PDFFileObj:PDFObjectTypeEnum
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The PDFObjectTypeEnum is an enumeration of basic PDF document object types.
Diagram
Diagram
Type restriction of xs:string
Facets
enumeration Boolean
enumeration Integer
enumeration String
enumeration Name
enumeration Array
enumeration Dictionary
enumeration Stream
enumeration Null
Used by
Source
 
<xs:simpleType name="PDFObjectTypeEnum">
  <xs:annotation>
    <xs:documentation>The PDFObjectTypeEnum is an enumeration of basic PDF document object types.</xs:documentation>
  </xs:annotation>
  <xs:restriction base="xs:string">
    <xs:enumeration value="Boolean"/>
    <xs:enumeration value="Integer"/>
    <xs:enumeration value="String"/>
    <xs:enumeration value="Name"/>
    <xs:enumeration value="Array"/>
    <xs:enumeration value="Dictionary"/>
    <xs:enumeration value="Stream"/>
    <xs:enumeration value="Null"/>
  </xs:restriction>
</xs:simpleType>
Complex Type PDFFileObj:PDFXRefTableListType
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The PDFXrefTableListType captures a list of PDF cross-reference tables.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFXRefTableListType_Cross_Reference_Table
Used by
Children PDFFileObj:Cross_Reference_Table
Source
 
<xs:complexType name="PDFXRefTableListType">
  <xs:annotation>
    <xs:documentation>The PDFXrefTableListType captures a list of PDF cross-reference tables.</xs:documentation>
  </xs:annotation>
  <xs:sequence>
    <xs:element maxOccurs="unbounded" minOccurs="1" name="Cross_Reference_Table" type="PDFFileObj:PDFXRefTableType">
      <xs:annotation>
        <xs:documentation>The Cross_Reference_Table field captures the cross-reference table contained in the PDF file, for the random access of indirect objects contained in the file.</xs:documentation>
      </xs:annotation>
    </xs:element>
  </xs:sequence>
</xs:complexType>
Complex Type PDFFileObj:PDFXRefTableType
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The PDFXRefTableType captures the details of a PDF cross-reference table, which provides a capability for the random access of indirect objects contained in the file.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFXRefTableType_Subsections PDF_File_Object_xsd.tmp#PDFXRefTableType_Offset PDF_File_Object_xsd.tmp#PDFXRefTableType_Hashes
Used by
Children PDFFileObj:Hashes, PDFFileObj:Offset, PDFFileObj:Subsections
Source
 
<xs:complexType name="PDFXRefTableType">
  <xs:annotation>
    <xs:documentation>The PDFXRefTableType captures the details of a PDF cross-reference table, which provides a capability for the random access of indirect objects contained in the file.</xs:documentation>
  </xs:annotation>
  <xs:sequence>
    <xs:element minOccurs="0" name="Subsections" type="PDFFileObj:PDFXrefTableSubsectionListType">
      <xs:annotation>
        <xs:documentation>The Subsections field captures the subsections contained in the cross-reference table.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="Offset" type="cyboxCommon:PositiveIntegerObjectPropertyType">
      <xs:annotation>
        <xs:documentation>The Offset field specifies the offset of the cross-reference from the beginning of the file, in bytes.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="Hashes" type="cyboxCommon:HashListType">
      <xs:annotation>
        <xs:documentation>The Hashes field captures any hashes that were computed for the cross-reference table.</xs:documentation>
      </xs:annotation>
    </xs:element>
  </xs:sequence>
</xs:complexType>
Complex Type PDFFileObj:PDFXrefTableSubsectionListType
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The PDFXrefTableSubsectionListType captures a list of cross-reference table subsections.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFXrefTableSubsectionListType_Subsection
Used by
Children PDFFileObj:Subsection
Source
 
<xs:complexType name="PDFXrefTableSubsectionListType">
  <xs:annotation>
    <xs:documentation>The PDFXrefTableSubsectionListType captures a list of cross-reference table subsections.</xs:documentation>
  </xs:annotation>
  <xs:sequence>
    <xs:element maxOccurs="unbounded" name="Subsection" type="PDFFileObj:PDFXrefTableSubsectionType">
      <xs:annotation>
        <xs:documentation>The Subsection field captures a single cross-reference table subsection in the list.</xs:documentation>
      </xs:annotation>
    </xs:element>
  </xs:sequence>
</xs:complexType>
Complex Type PDFFileObj:PDFXrefTableSubsectionType
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The PDFXrefTableSubsectionType captures details of subsections contained within a PDF cross-reference table.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFXrefTableSubsectionType_First_Object_Number PDF_File_Object_xsd.tmp#PDFXrefTableSubsectionType_Number_Of_Objects PDF_File_Object_xsd.tmp#PDFXrefTableSubsectionType_Cross_Reference_Entries
Used by
Children PDFFileObj:Cross_Reference_Entries, PDFFileObj:First_Object_Number, PDFFileObj:Number_Of_Objects
Source
 
<xs:complexType name="PDFXrefTableSubsectionType">
  <xs:annotation>
    <xs:documentation>The PDFXrefTableSubsectionType captures details of subsections contained within a PDF cross-reference table.</xs:documentation>
  </xs:annotation>
  <xs:sequence>
    <xs:element minOccurs="0" name="First_Object_Number" type="cyboxCommon:NonNegativeIntegerObjectPropertyType">
      <xs:annotation>
        <xs:documentation>The First_Object_Number field captures the object number of the first object for which there is a corresponding entry in this cross-reference subsection.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="Number_Of_Objects" type="cyboxCommon:NonNegativeIntegerObjectPropertyType">
      <xs:annotation>
        <xs:documentation>The Number_Of_Objects field captures the number of objects for which there are corresponding entries in this cross-reference subsection.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="Cross_Reference_Entries" type="PDFFileObj:PDFXrefEntryListType">
      <xs:annotation>
        <xs:documentation>The Cross_Reference_Entries field specifies the cross-reference entries contained in this cross-reference subsection.</xs:documentation>
      </xs:annotation>
    </xs:element>
  </xs:sequence>
</xs:complexType>
Complex Type PDFFileObj:PDFXrefEntryListType
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The PDFXrefEntryListType captures a list of cross-reference table subsection entries.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFXrefEntryListType_Cross_Reference_Entry
Used by
Children PDFFileObj:Cross_Reference_Entry
Source
 
<xs:complexType name="PDFXrefEntryListType">
  <xs:annotation>
    <xs:documentation>The PDFXrefEntryListType captures a list of cross-reference table subsection entries.</xs:documentation>
  </xs:annotation>
  <xs:sequence>
    <xs:element maxOccurs="unbounded" name="Cross_Reference_Entry" type="PDFFileObj:PDFXrefEntryType">
      <xs:annotation>
        <xs:documentation>The Cross_Reference_Entry field captures a single cross-reference subsection entry in the list.</xs:documentation>
      </xs:annotation>
    </xs:element>
  </xs:sequence>
</xs:complexType>
Complex Type PDFFileObj:PDFXrefEntryType
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The PDFXrefEntryType captures details of a cross-reference table subsection entry.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFXrefEntryType_type PDF_File_Object_xsd.tmp#PDFXrefEntryType_Byte_Offset PDF_File_Object_xsd.tmp#PDFXrefEntryType_Object_Number PDF_File_Object_xsd.tmp#PDFXrefEntryType_Generation_Number
Used by
Children PDFFileObj:Byte_Offset, PDFFileObj:Generation_Number, PDFFileObj:Object_Number
Attributes
QName Type Use Annotation
type PDFFileObj:PDFXrefEntryTypeEnum optional 
The type field specifies the type of the cross-reference entry.
Source
 
<xs:complexType name="PDFXrefEntryType">
  <xs:annotation>
    <xs:documentation>The PDFXrefEntryType captures details of a cross-reference table subsection entry.</xs:documentation>
  </xs:annotation>
  <xs:sequence>
    <xs:choice minOccurs="0">
      <xs:element minOccurs="1" name="Byte_Offset" type="cyboxCommon:IntegerObjectPropertyType">
        <xs:annotation>
          <xs:documentation>The Byte_Offset field captures the 10-digit number, padded with leading zeros if necessary, that specifies the number of bytes from the beginning of the file to the beginning of the object.</xs:documentation>
        </xs:annotation>
      </xs:element>
      <xs:element minOccurs="1" name="Object_Number" type="cyboxCommon:NonNegativeIntegerObjectPropertyType">
        <xs:annotation>
          <xs:documentation>The Object_Number field specifies the 10-digit object number of the next free object.</xs:documentation>
        </xs:annotation>
      </xs:element>
    </xs:choice>
    <xs:element minOccurs="0" name="Generation_Number" type="cyboxCommon:NonNegativeIntegerObjectPropertyType">
      <xs:annotation>
        <xs:documentation>The Generation_Number field specifies the 5-digit generation number to be used when an object with the same object number is created.</xs:documentation>
      </xs:annotation>
    </xs:element>
  </xs:sequence>
  <xs:attribute name="type" type="PDFFileObj:PDFXrefEntryTypeEnum">
    <xs:annotation>
      <xs:documentation>The type field specifies the type of the cross-reference entry.</xs:documentation>
    </xs:annotation>
  </xs:attribute>
</xs:complexType>
Simple Type PDFFileObj:PDFXrefEntryTypeEnum
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The PDFXrefEntryTypeEnum is an enumeration of PDF cross-reference table entry types.
Diagram
Diagram
Type restriction of xs:string
Facets
enumeration In-Use
enumeration Free
Used by
Source
 
<xs:simpleType name="PDFXrefEntryTypeEnum">
  <xs:annotation>
    <xs:documentation>The PDFXrefEntryTypeEnum is an enumeration of PDF cross-reference table entry types.</xs:documentation>
  </xs:annotation>
  <xs:restriction base="xs:string">
    <xs:enumeration value="In-Use"/>
    <xs:enumeration value="Free"/>
  </xs:restriction>
</xs:simpleType>
Complex Type PDFFileObj:PDFTrailerListType
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The PDFTrailerListType captures a list of PDF trailers.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFTrailerListType_Trailer
Used by
Children PDFFileObj:Trailer
Source
 
<xs:complexType name="PDFTrailerListType">
  <xs:annotation>
    <xs:documentation>The PDFTrailerListType captures a list of PDF trailers.</xs:documentation>
  </xs:annotation>
  <xs:sequence>
    <xs:element maxOccurs="unbounded" name="Trailer" type="PDFFileObj:PDFTrailerType">
      <xs:annotation>
        <xs:documentation>The Trailer field captures a PDF file trailer contained in the file, used by applications for quickly locating the cross-reference table and certain special objects.</xs:documentation>
      </xs:annotation>
    </xs:element>
  </xs:sequence>
</xs:complexType>
Complex Type PDFFileObj:PDFTrailerType
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The PDFTrailerType captures the details of a PDF trailer.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFTrailerType_Size PDF_File_Object_xsd.tmp#PDFTrailerType_Prev PDF_File_Object_xsd.tmp#PDFTrailerType_Root PDF_File_Object_xsd.tmp#PDFTrailerType_Encrypt PDF_File_Object_xsd.tmp#PDFTrailerType_Info PDF_File_Object_xsd.tmp#PDFTrailerType_ID PDF_File_Object_xsd.tmp#PDFTrailerType_Last_Cross_Reference_Offset PDF_File_Object_xsd.tmp#PDFTrailerType_Offset PDF_File_Object_xsd.tmp#PDFTrailerType_Hashes
Used by
Children PDFFileObj:Encrypt, PDFFileObj:Hashes, PDFFileObj:ID, PDFFileObj:Info, PDFFileObj:Last_Cross_Reference_Offset, PDFFileObj:Offset, PDFFileObj:Prev, PDFFileObj:Root, PDFFileObj:Size
Source
 
<xs:complexType name="PDFTrailerType">
  <xs:annotation>
    <xs:documentation>The PDFTrailerType captures the details of a PDF trailer.</xs:documentation>
  </xs:annotation>
  <xs:sequence>
    <xs:element minOccurs="0" name="Size" type="cyboxCommon:PositiveIntegerObjectPropertyType">
      <xs:annotation>
        <xs:documentation>The Size field captures the total number of entries in the file's cross-reference table.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="Prev" type="cyboxCommon:PositiveIntegerObjectPropertyType">
      <xs:annotation>
        <xs:documentation>The Prev field the byte offset from the beginning of the file to the beginning of the previous cross-reference table. This is only applicable for files that have more than one cross-reference table.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="Root" type="PDFFileObj:PDFIndirectObjectIDType">
      <xs:annotation>
        <xs:documentation>The Root field captures an indirect object reference that points to the catalog dictionary for the PDF document contained in the file.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="Encrypt" type="PDFFileObj:PDFDictionaryType">
      <xs:annotation>
        <xs:documentation>The Encrypt field captures the PDF document's encryption dictionary, either through an indirect reference or embedded set of key/value pairs.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="Info" type="PDFFileObj:PDFIndirectObjectIDType">
      <xs:annotation>
        <xs:documentation>The Info field captures an indirect object reference that points to the document information dictionary.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="ID" type="PDFFileObj:PDFFileIDType">
      <xs:annotation>
        <xs:documentation>The ID field captures an array of two strings that constitutes a file identifier.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="Last_Cross_Reference_Offset" type="cyboxCommon:PositiveIntegerObjectPropertyType">
      <xs:annotation>
        <xs:documentation>The Last_Cross_Reference_Offset field captures the byte offset, relative to the beginning of the file, of the last cross-reference table contained in the file.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="Offset" type="cyboxCommon:PositiveIntegerObjectPropertyType">
      <xs:annotation>
        <xs:documentation>The Offset field specifies the offset of the trailer from the beginning of the file, in bytes.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element minOccurs="0" name="Hashes" type="cyboxCommon:HashListType">
      <xs:annotation>
        <xs:documentation>The Hashes field captures any hashes that were computed for the trailer.</xs:documentation>
      </xs:annotation>
    </xs:element>
  </xs:sequence>
</xs:complexType>
Complex Type PDFFileObj:PDFDictionaryType
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The PDFDictionaryType captures a PDF dictionary as a set of key value pairs, or as a reference to an indirect object that contains.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFDictionaryType_Object_Reference PDF_File_Object_xsd.tmp#PDFDictionaryType_Raw_Contents
Used by
Children PDFFileObj:Object_Reference, PDFFileObj:Raw_Contents
Source
 
<xs:complexType name="PDFDictionaryType">
  <xs:annotation>
    <xs:documentation>The PDFDictionaryType captures a PDF dictionary as a set of key value pairs, or as a reference to an indirect object that contains.</xs:documentation>
  </xs:annotation>
  <xs:choice>
    <xs:element minOccurs="1" name="Object_Reference" type="PDFFileObj:PDFIndirectObjectIDType">
      <xs:annotation>
        <xs:documentation>The Object_Reference field captures a reference to an indirect PDF object that contains the dictionary, via its object and generation numbers.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element name="Raw_Contents" type="cyboxCommon:StringObjectPropertyType">
      <xs:annotation>
        <xs:documentation>The Raw_Contents field captures the contents of the dictionary as a string enclosed in an XML CDATA section.</xs:documentation>
      </xs:annotation>
    </xs:element>
  </xs:choice>
</xs:complexType>
Complex Type PDFFileObj:PDFFileIDType
Namespace http://cybox.mitre.org/objects#PDFFileObject-1
Annotations
 
The PDFTrailerIDType captures the details of a PDF ID value stored in a trailer.
Diagram
Diagram PDF_File_Object_xsd.tmp#PDFFileIDType_ID_String
Used by
Children PDFFileObj:ID_String
Source
 
<xs:complexType name="PDFFileIDType">
  <xs:annotation>
    <xs:documentation>The PDFTrailerIDType captures the details of a PDF ID value stored in a trailer.</xs:documentation>
  </xs:annotation>
  <xs:sequence>
    <xs:element maxOccurs="2" name="ID_String" type="cyboxCommon:StringObjectPropertyType">
      <xs:annotation>
        <xs:documentation>The ID_String field captures one of the two strings that constitutes the file identifier.</xs:documentation>
      </xs:annotation>
    </xs:element>
  </xs:sequence>
</xs:complexType>
Attribute PDFFileObj:PDFFileMetadataType / @encrypted
Namespace No namespace
Annotations
 
The encrypted field specifies whether the PDF file is encrypted.
Type xs:boolean
Used by
Source
 
<xs:attribute name="encrypted" type="xs:boolean">
  <xs:annotation>
    <xs:documentation>The encrypted field specifies whether the PDF file is encrypted.</xs:documentation>
  </xs:annotation>
</xs:attribute>
Attribute PDFFileObj:PDFFileMetadataType / @optimized
Namespace No namespace
Annotations
 
The optimized field specifies whether the PDF file has been optimized.
Type xs:boolean
Used by
Source
 
<xs:attribute name="optimized" type="xs:boolean">
  <xs:annotation>
    <xs:documentation>The optimized field specifies whether the PDF file has been optimized.</xs:documentation>
  </xs:annotation>
</xs:attribute>
Attribute PDFFileObj:PDFIndirectObjectType / @type
Namespace No namespace
Annotations
 
The type field specifies the basic type of the PDF indirect object.
Type PDFFileObj:PDFObjectTypeEnum
Facets
enumeration Boolean
enumeration Integer
enumeration String
enumeration Name
enumeration Array
enumeration Dictionary
enumeration Stream
enumeration Null
Used by
Source
 
<xs:attribute name="type" type="PDFFileObj:PDFObjectTypeEnum">
  <xs:annotation>
    <xs:documentation>The type field specifies the basic type of the PDF indirect object.</xs:documentation>
  </xs:annotation>
</xs:attribute>
Attribute PDFFileObj:PDFXrefEntryType / @type
Namespace No namespace
Annotations
 
The type field specifies the type of the cross-reference entry.
Type PDFFileObj:PDFXrefEntryTypeEnum
Facets
enumeration In-Use
enumeration Free
Used by
Source
 
<xs:attribute name="type" type="PDFFileObj:PDFXrefEntryTypeEnum">
  <xs:annotation>
    <xs:documentation>The type field specifies the type of the cross-reference entry.</xs:documentation>
  </xs:annotation>
</xs:attribute>
XML Schema documentation generated by ® XML Editor.