STIX

Structured Threat Information eXpression

A Structured Language for Cyber Threat Intelligence Information

STIX Language — Version 1.2
Home > STIX Language > Version 1.1 (Archive)

Version 1.1 (Archive)

This page provides information this release of the STIX Language. All information about the version is included in this centralized location. Join the STIX Community to participate in the next version of STIX.

Downloads

Core and Components
File Name Version Schema Documentation
All Files 1.1 ZIP
All Files (offline) 1.1 ZIP
Campaign 1.1 XSD HTML
Course Of Action 1.1 XSD HTML
Data Marking 1.1 XSD HTML
Exploit Target 1.1 XSD HTML
Incident 1.1 XSD HTML
Indicator 2.1 XSD HTML
Common 1.1 XSD HTML
Core 1.1 XSD HTML
Default Vocabularies 1.1.0 XSD HTML
Threat Actor 1.1 XSD HTML
TTP 1.1 XSD HTML
Extensions
Extension Name Extension Point Version Schema Documentation
CIQ 3.0 Address Address 1.1 XSD HTML
CAPEC 2.7 Attack Pattern Attack Pattern 1.0 XSD HTML
CIQ 3.0 Identity Identity 1.1 XSD HTML
MAEC 4.1 Malware Malware 1.0 XSD HTML
Simple Marking Marking Marking 1.1 XSD HTML
Terms of Use Marking Marking 1.0 XSD HTML
TLP Marking Marking 1.1 XSD HTML
Generic Structured COA Structured COA 1.1 XSD HTML
Generic Test Mechanism Test Mechanism 1.1 XSD HTML
OpenIOC (release 2010) Test Mechanism Test Mechanism 1.1 XSD HTML
OVAL 5.10 Test Mechanism Test Mechanism 1.1 XSD HTML
Snort Test Mechanism Test Mechanism 1.1 XSD HTML
YARA Test Mechanism Test Mechanism 1.1 XSD HTML
CVRF Vulnerability Vulnerability 1.1 XSD HTML
Data Dictionaries
Dictionary Name Download
Core, Common, Vocabularies, and Components XLSX
Extensions XLSX
OASIS CIQ (External) XLSX
Profiles
Profile Name Download
Profile Template XLSX
CybOX Objects Profile Templates XLSX
Other Downloads
File Name Download
EDH Data Marking Extension (with examples) ZIP
Lockheed Martin Kill Chain Definition XML
STIX 1.1 Template Document XML

Release Notes

The major highlights of Version 1.1 are:

  • Upgraded to Cyber Observables eXpression (CybOX™) Version 2.1.
  • Added a mechanism for versioning STIX content.
  • Increased the flexibility available in packaging STIX reports.
  • Numerous other minor changes.

There are also full release notes available.

Samples

Sample content for STIX 1.1 is available on the STIX Samples page. You can also download a ZIP of all sample content for version 1.1.

Timeline

PLANNING DRAFT-1 DRAFT-2 RELEASE CANDIDATE OFFICIAL
08 April 2013 16 January 2014 3 February 2014 13 February 2014 20 February 2014

Status Reports

Status updates are included below. You may also review the STIX Community Discussion Archives for discussions about Version 1.1.

[2014-02-20]
Version 1.1 of the STIX Language is now available. This release includes a number of improvements, as listed in the Release Notes section above. Please send any comments or concerns about this release to the STIX Community Discussion List, or directly to stix@mitre.org.
[2014-02-13]
A Release Candidate of Version 1.1 of the STIX Language is now available. Please send any comments or concerns about this release to the STIX Community Discussion List, or directly to stix@mitre.org.
[2014-02-07]
Draft-2 of Version 1.1 of the STIX Language is now available. Please send any comments or concerns about this release to the STIX Community Discussion List, or directly to stix@mitre.org.
[2014-01-16]
Draft-1 of Version 1.1 of the STIX Language is now available. Please send any comments or concerns about this release to the STIX Community Discussion List, or directly to stix@mitre.org.
[2013-04-09]
Version 1.1 of the STIX Language is in the planning stage. If you have any suggestions for changes that should be included, please send them to the STIX Community Discussion List, or directly to stix@mitre.org.
Page Last Updated: May 08, 2014