Showing:

Annotations
Attributes
Diagrams
Facets
Source
Used by
Imported schema course_of_action.xsd
Namespace http://stix.mitre.org/CourseOfAction-1
Annotations
 
This schema was originally developed by The MITRE Corporation. The STIX XML Schema implementation is maintained by The MITRE Corporation and developed by the open STIX Community. For more information, including how to get involved in the effort and how to submit change requests, please visit the STIX website at http://stix.mitre.org.
Element coa:Course_Of_Action
Namespace http://stix.mitre.org/CourseOfAction-1
Annotations
 
The CourseOfAction field characterizes a Course of Action to be taken in regards to one of more cyber threats. NOTE: This construct is still in its early stages of maturity and will require a good deal of review and refinement.
Diagram
Diagram stix_common_xsd.tmp#CourseOfActionBaseType_id stix_common_xsd.tmp#CourseOfActionBaseType_idref stix_common_xsd.tmp#CourseOfActionBaseType course_of_action_xsd.tmp#CourseOfActionType_version course_of_action_xsd.tmp#CourseOfActionType_Title course_of_action_xsd.tmp#CourseOfActionType_Stage course_of_action_xsd.tmp#CourseOfActionType_Type course_of_action_xsd.tmp#CourseOfActionType_Description course_of_action_xsd.tmp#CourseOfActionType_Objective course_of_action_xsd.tmp#CourseOfActionType_Structured_COA course_of_action_xsd.tmp#CourseOfActionType_Impact course_of_action_xsd.tmp#CourseOfActionType_Cost course_of_action_xsd.tmp#CourseOfActionType_Efficacy course_of_action_xsd.tmp#CourseOfActionType_Handling course_of_action_xsd.tmp#CourseOfActionType
Type coa:CourseOfActionType
Type hierarchy
Children coa:Cost, coa:Description, coa:Efficacy, coa:Handling, coa:Impact, coa:Objective, coa:Stage, coa:Structured_COA, coa:Title, coa:Type
Attributes
QName Type Use Annotation
id xs:QName optional 
Specifies a globally unique identifier for this COA.
idref xs:QName optional 
Specifies a globally unique identifier of a COA specified elsewhere.
version coa:CourseOfActionVersionType optional 
Specifies the relevant STIX-COA schema version for this content.
Source
 
<xs:element name="Course_Of_Action" type="coa:CourseOfActionType">
  <xs:annotation>
    <xs:documentation>The CourseOfAction field characterizes a Course of Action to be taken in regards to one of more cyber threats. NOTE: This construct is still in its early stages of maturity and will require a good deal of review and refinement.</xs:documentation>
  </xs:annotation>
</xs:element>
Element coa:CourseOfActionType / coa:Title
Namespace http://stix.mitre.org/CourseOfAction-1
Annotations
 
The Title field provides a simple title for this CourseOfAction.
Diagram
Diagram
Type xs:string
Source
 
<xs:element name="Title" type="xs:string" minOccurs="0">
  <xs:annotation>
    <xs:documentation>The Title field provides a simple title for this CourseOfAction.</xs:documentation>
  </xs:annotation>
</xs:element>
Element coa:CourseOfActionType / coa:Stage
Namespace http://stix.mitre.org/CourseOfAction-1
Annotations
 
The Stage field specifies what stage in the cyber threat management lifecycle this CourseOfAction is relevant to (e.g. Remedy or Reponse).

This field is implemented through the xsi:type controlled vocabulary extension mechanism. The default vocabulary type is COAStageVocab-1.0 in the http://stix.mitre.org/default_vocabularies-1 namespace. This type is defined in the stix_default_vocabularies.xsd file or at the URL http://stix.mitre.org/XMLSchema/default_vocabularies/1.0.1/stix_default_vocabularies.xsd .

Users may also define their own vocabulary using the type extension mechanism, specify a vocabulary name and reference using the attributes, or simply use this as a string field.
Diagram
Diagram stix_common_xsd.tmp#ControlledVocabularyStringType_vocab_name stix_common_xsd.tmp#ControlledVocabularyStringType_vocab_reference stix_common_xsd.tmp#ControlledVocabularyStringType
Type stixCommon:ControlledVocabularyStringType
Attributes
QName Type Use Annotation
vocab_name xs:string optional 
The vocab_name field specifies the name of the controlled vocabulary.
vocab_reference xs:anyURI optional 
The vocab_reference field specifies the URI to the location of where the controlled vocabulary is defined, e.g., in an externally located XML schema file.
Source
 
<xs:element name="Stage" type="stixCommon:ControlledVocabularyStringType" minOccurs="0">
  <xs:annotation>
    <xs:documentation>The Stage field specifies what stage in the cyber threat management lifecycle this CourseOfAction is relevant to (e.g. Remedy or Reponse). This field is implemented through the xsi:type controlled vocabulary extension mechanism. The default vocabulary type is COAStageVocab-1.0 in the http://stix.mitre.org/default_vocabularies-1 namespace. This type is defined in the stix_default_vocabularies.xsd file or at the URL http://stix.mitre.org/XMLSchema/default_vocabularies/1.0.1/stix_default_vocabularies.xsd . Users may also define their own vocabulary using the type extension mechanism, specify a vocabulary name and reference using the attributes, or simply use this as a string field.</xs:documentation>
  </xs:annotation>
</xs:element>
Element coa:CourseOfActionType / coa:Type
Namespace http://stix.mitre.org/CourseOfAction-1
Annotations
 
The Type field specifies the type of this CourseOfAction.

	This field is implemented through the xsi:type controlled vocabulary extension mechanism. No default vocabulary type has been defined for STIX 1.0. Users may either define their own vocabulary using the type extension mechanism, specify a vocabulary name and reference using the attributes, or simply use this as a free string field.
Diagram
Diagram stix_common_xsd.tmp#ControlledVocabularyStringType_vocab_name stix_common_xsd.tmp#ControlledVocabularyStringType_vocab_reference stix_common_xsd.tmp#ControlledVocabularyStringType
Type stixCommon:ControlledVocabularyStringType
Attributes
QName Type Use Annotation
vocab_name xs:string optional 
The vocab_name field specifies the name of the controlled vocabulary.
vocab_reference xs:anyURI optional 
The vocab_reference field specifies the URI to the location of where the controlled vocabulary is defined, e.g., in an externally located XML schema file.
Source
 
<xs:element name="Type" type="stixCommon:ControlledVocabularyStringType" minOccurs="0">
  <xs:annotation>
    <xs:documentation>The Type field specifies the type of this CourseOfAction. This field is implemented through the xsi:type controlled vocabulary extension mechanism. No default vocabulary type has been defined for STIX 1.0. Users may either define their own vocabulary using the type extension mechanism, specify a vocabulary name and reference using the attributes, or simply use this as a free string field.</xs:documentation>
  </xs:annotation>
</xs:element>
Element coa:CourseOfActionType / coa:Description
Namespace http://stix.mitre.org/CourseOfAction-1
Annotations
 
The Description element is optional and enables a generalized but structured description of this CourseOfAction.
Diagram
Diagram stix_common_xsd.tmp#StructuredTextType_structuring_format stix_common_xsd.tmp#StructuredTextType
Type stixCommon:StructuredTextType
Attributes
QName Type Use Annotation
structuring_format xs:string optional 
Used to indicate a particular structuring format (e.g., HTML5) used within an instance of StructuredTextType. Note that if the markup tags used by this format would be interpreted as XML information (such as the bracket-based tags of HTML) the text area should be enclosed in a CDATA section to prevent the markup from interferring with XML validation of the CybOX document. If this attribute is absent, the implication is that no markup is being used.
Source
 
<xs:element name="Description" type="stixCommon:StructuredTextType" minOccurs="0">
  <xs:annotation>
    <xs:documentation>The Description element is optional and enables a generalized but structured description of this CourseOfAction.</xs:documentation>
  </xs:annotation>
</xs:element>
Element coa:CourseOfActionType / coa:Objective
Namespace http://stix.mitre.org/CourseOfAction-1
Annotations
 
The Objective field characterizes the objective of this CourseOfAction.
Diagram
Diagram course_of_action_xsd.tmp#ObjectiveType_Description course_of_action_xsd.tmp#ObjectiveType_Applicability_Confidence course_of_action_xsd.tmp#ObjectiveType
Type coa:ObjectiveType
Children coa:Applicability_Confidence, coa:Description
Source
 
<xs:element name="Objective" type="coa:ObjectiveType" minOccurs="0">
  <xs:annotation>
    <xs:documentation>The Objective field characterizes the objective of this CourseOfAction.</xs:documentation>
  </xs:annotation>
</xs:element>
Element coa:ObjectiveType / coa:Description
Namespace http://stix.mitre.org/CourseOfAction-1
Annotations
 
The Description element is optional and enables a generalized description of the objective of this CourseOfAction.
Diagram
Diagram stix_common_xsd.tmp#StructuredTextType_structuring_format stix_common_xsd.tmp#StructuredTextType
Type stixCommon:StructuredTextType
Attributes
QName Type Use Annotation
structuring_format xs:string optional 
Used to indicate a particular structuring format (e.g., HTML5) used within an instance of StructuredTextType. Note that if the markup tags used by this format would be interpreted as XML information (such as the bracket-based tags of HTML) the text area should be enclosed in a CDATA section to prevent the markup from interferring with XML validation of the CybOX document. If this attribute is absent, the implication is that no markup is being used.
Source
 
<xs:element name="Description" type="stixCommon:StructuredTextType" minOccurs="0">
  <xs:annotation>
    <xs:documentation>The Description element is optional and enables a generalized description of the objective of this CourseOfAction.</xs:documentation>
  </xs:annotation>
</xs:element>
Element coa:ObjectiveType / coa:Applicability_Confidence
Namespace http://stix.mitre.org/CourseOfAction-1
Annotations
 
The Applicability_Confidence field characterizes the level of confidence held in the applicability of this suggested COA for its targeted Objective.
Diagram
Diagram stix_common_xsd.tmp#ConfidenceType_timestamp stix_common_xsd.tmp#ConfidenceType_Value stix_common_xsd.tmp#ConfidenceType_Description stix_common_xsd.tmp#ConfidenceType_Source stix_common_xsd.tmp#ConfidenceType_Confidence_Assertion_Chain stix_common_xsd.tmp#ConfidenceType
Type stixCommon:ConfidenceType
Children stixCommon:Confidence_Assertion_Chain, stixCommon:Description, stixCommon:Source, stixCommon:Value
Attributes
QName Type Use Annotation
timestamp xs:dateTime optional 
Specifies the time of this Confidence assertion.
Source
 
<xs:element name="Applicability_Confidence" type="stixCommon:ConfidenceType" minOccurs="0">
  <xs:annotation>
    <xs:documentation>The Applicability_Confidence field characterizes the level of confidence held in the applicability of this suggested COA for its targeted Objective.</xs:documentation>
  </xs:annotation>
</xs:element>
Element coa:CourseOfActionType / coa:Structured_COA
Namespace http://stix.mitre.org/CourseOfAction-1
Annotations
 
The Structured_COA field enables the specification of an actionable structured representation for the CourseOfAction potentially for automated consumption and implementation.

This field is implemented through the xsi:type extension mechanism. While STIX has not defined a default type, it has provided support for passing proprietary or externally defined structured courses of action using the Generic Structured COA extension. The Generic Structured COA extension is captured in the GenericStructuredCOAType in the http://stix.mitre.org/extensions/StructuredCOA#Generic-1 namespace. This type is defined in the extensions/structured_coa/generic.xsd file or at the URL http://stix.mitre.org/XMLSchema/extensions/structured_coa/generic/1.0/generic.xsd.
Diagram
Diagram course_of_action_xsd.tmp#StructuredCOAType_id course_of_action_xsd.tmp#StructuredCOAType_idref course_of_action_xsd.tmp#StructuredCOAType
Type coa:StructuredCOAType
Attributes
QName Type Use Annotation
id xs:QName optional 
Specifies a unique ID for this StructuredCOA.
idref xs:QName optional 
Specifies a reference to the ID for this StructuredCOA specified elsewhere.
Source
 
<xs:element name="Structured_COA" type="coa:StructuredCOAType" minOccurs="0">
  <xs:annotation>
    <xs:documentation>The Structured_COA field enables the specification of an actionable structured representation for the CourseOfAction potentially for automated consumption and implementation. This field is implemented through the xsi:type extension mechanism. While STIX has not defined a default type, it has provided support for passing proprietary or externally defined structured courses of action using the Generic Structured COA extension. The Generic Structured COA extension is captured in the GenericStructuredCOAType in the http://stix.mitre.org/extensions/StructuredCOA#Generic-1 namespace. This type is defined in the extensions/structured_coa/generic.xsd file or at the URL http://stix.mitre.org/XMLSchema/extensions/structured_coa/generic/1.0/generic.xsd.</xs:documentation>
  </xs:annotation>
</xs:element>
Element coa:CourseOfActionType / coa:Impact
Namespace http://stix.mitre.org/CourseOfAction-1
Annotations
 
The Impact field characterizes the estimated impact of applying this CourseOfAction.

It is implemented through the StatementType, which allows for the expression of a statement in a vocabulary (Value), a description of the statement (Description), a confidence in the statement (Confidence), and the source of the statement (Source). The default vocabulary type for the Value is HighMediumLowVocab-1.0 in the http://stix.mitre.org/default_vocabularies-1 namespace. This type is defined in the stix_default_vocabularies.xsd file or at the URL http://stix.mitre.org/XMLSchema/default_vocabularies/1.0.1/stix_default_vocabularies.xsd .

Users may also define their own vocabulary using the type extension mechanism, specify a vocabulary name and reference using the attributes, or simply use this as a string field.
Diagram
Diagram stix_common_xsd.tmp#StatementType_timestamp stix_common_xsd.tmp#StatementType_Value stix_common_xsd.tmp#StatementType_Description stix_common_xsd.tmp#StatementType_Source stix_common_xsd.tmp#StatementType_Confidence stix_common_xsd.tmp#StatementType
Type stixCommon:StatementType
Children stixCommon:Confidence, stixCommon:Description, stixCommon:Source, stixCommon:Value
Attributes
QName Type Use Annotation
timestamp xs:dateTime optional 
Specifies the time this statement was asserted.
Source
 
<xs:element name="Impact" type="stixCommon:StatementType" minOccurs="0">
  <xs:annotation>
    <xs:documentation>The Impact field characterizes the estimated impact of applying this CourseOfAction. It is implemented through the StatementType, which allows for the expression of a statement in a vocabulary (Value), a description of the statement (Description), a confidence in the statement (Confidence), and the source of the statement (Source). The default vocabulary type for the Value is HighMediumLowVocab-1.0 in the http://stix.mitre.org/default_vocabularies-1 namespace. This type is defined in the stix_default_vocabularies.xsd file or at the URL http://stix.mitre.org/XMLSchema/default_vocabularies/1.0.1/stix_default_vocabularies.xsd . Users may also define their own vocabulary using the type extension mechanism, specify a vocabulary name and reference using the attributes, or simply use this as a string field.</xs:documentation>
  </xs:annotation>
</xs:element>
Element coa:CourseOfActionType / coa:Cost
Namespace http://stix.mitre.org/CourseOfAction-1
Annotations
 
The Cost field characterizes the estimated cost for applying this CourseOfAction.

It is implemented through the StatementType, which allows for the expression of a statement in a vocabulary (Value), a description of the statement (Description), a confidence in the statement (Confidence), and the source of the statement (Source). The default vocabulary type for the Value is HighMediumLowVocab-1.0 in the http://stix.mitre.org/default_vocabularies-1 namespace. This type is defined in the stix_default_vocabularies.xsd file or at the URL http://stix.mitre.org/XMLSchema/default_vocabularies/1.0.1/stix_default_vocabularies.xsd .

Users may also define their own vocabulary using the type extension mechanism, specify a vocabulary name and reference using the attributes, or simply use this as a string field.
Diagram
Diagram stix_common_xsd.tmp#StatementType_timestamp stix_common_xsd.tmp#StatementType_Value stix_common_xsd.tmp#StatementType_Description stix_common_xsd.tmp#StatementType_Source stix_common_xsd.tmp#StatementType_Confidence stix_common_xsd.tmp#StatementType
Type stixCommon:StatementType
Children stixCommon:Confidence, stixCommon:Description, stixCommon:Source, stixCommon:Value
Attributes
QName Type Use Annotation
timestamp xs:dateTime optional 
Specifies the time this statement was asserted.
Source
 
<xs:element name="Cost" type="stixCommon:StatementType" minOccurs="0">
  <xs:annotation>
    <xs:documentation>The Cost field characterizes the estimated cost for applying this CourseOfAction. It is implemented through the StatementType, which allows for the expression of a statement in a vocabulary (Value), a description of the statement (Description), a confidence in the statement (Confidence), and the source of the statement (Source). The default vocabulary type for the Value is HighMediumLowVocab-1.0 in the http://stix.mitre.org/default_vocabularies-1 namespace. This type is defined in the stix_default_vocabularies.xsd file or at the URL http://stix.mitre.org/XMLSchema/default_vocabularies/1.0.1/stix_default_vocabularies.xsd . Users may also define their own vocabulary using the type extension mechanism, specify a vocabulary name and reference using the attributes, or simply use this as a string field.</xs:documentation>
  </xs:annotation>
</xs:element>
Element coa:CourseOfActionType / coa:Efficacy
Namespace http://stix.mitre.org/CourseOfAction-1
Annotations
 
The Efficacy field characterizes the effectiveness of this CourseOfAction in achieving its targeted Objective.

It is implemented through the StatementType, which allows for the expression of a statement in a vocabulary (Value), a description of the statement (Description), a confidence in the statement (Confidence), and the source of the statement (Source). The default vocabulary type for the Value is HighMediumLowVocab-1.0 in the http://stix.mitre.org/default_vocabularies-1 namespace. This type is defined in the stix_default_vocabularies.xsd file or at the URL http://stix.mitre.org/XMLSchema/default_vocabularies/1.0.1/stix_default_vocabularies.xsd .

Users may also define their own vocabulary using the type extension mechanism, specify a vocabulary name and reference using the attributes, or simply use this as a string field.
Diagram
Diagram stix_common_xsd.tmp#StatementType_timestamp stix_common_xsd.tmp#StatementType_Value stix_common_xsd.tmp#StatementType_Description stix_common_xsd.tmp#StatementType_Source stix_common_xsd.tmp#StatementType_Confidence stix_common_xsd.tmp#StatementType
Type stixCommon:StatementType
Children stixCommon:Confidence, stixCommon:Description, stixCommon:Source, stixCommon:Value
Attributes
QName Type Use Annotation
timestamp xs:dateTime optional 
Specifies the time this statement was asserted.
Source
 
<xs:element name="Efficacy" type="stixCommon:StatementType" minOccurs="0">
  <xs:annotation>
    <xs:documentation>The Efficacy field characterizes the effectiveness of this CourseOfAction in achieving its targeted Objective. It is implemented through the StatementType, which allows for the expression of a statement in a vocabulary (Value), a description of the statement (Description), a confidence in the statement (Confidence), and the source of the statement (Source). The default vocabulary type for the Value is HighMediumLowVocab-1.0 in the http://stix.mitre.org/default_vocabularies-1 namespace. This type is defined in the stix_default_vocabularies.xsd file or at the URL http://stix.mitre.org/XMLSchema/default_vocabularies/1.0.1/stix_default_vocabularies.xsd . Users may also define their own vocabulary using the type extension mechanism, specify a vocabulary name and reference using the attributes, or simply use this as a string field.</xs:documentation>
  </xs:annotation>
</xs:element>
Element coa:CourseOfActionType / coa:Handling
Namespace http://stix.mitre.org/CourseOfAction-1
Annotations
 
The Handling field specifies the appropriate data handling markings for the elements of this COA. The valid marking scope is the nearest CourseOfActionBaseType ancestor of this Handling element and all its descendants.
Diagram
Diagram data_marking_xsd.tmp#MarkingType_Marking data_marking_xsd.tmp#MarkingType
Type marking:MarkingType
Children marking:Marking
Source
 
<xs:element name="Handling" type="marking:MarkingType" minOccurs="0">
  <xs:annotation>
    <xs:documentation>The Handling field specifies the appropriate data handling markings for the elements of this COA. The valid marking scope is the nearest CourseOfActionBaseType ancestor of this Handling element and all its descendants.</xs:documentation>
  </xs:annotation>
</xs:element>
Complex Type coa:StructuredCOAType
Namespace http://stix.mitre.org/CourseOfAction-1
Annotations
 
The StructuredCOAType enables the specification of an actionable structured representation for the CourseOfAction potentially for automated consumption and implementation. 

This type is defined as an abstract type and is intended to be extended using the XML Schema extension mechanism to allow for the expression of a variety of structured COA types. Instance documents representing structured COAs use the xsi:type attribute to specify which implementation of this type they wish to use.

STIX has provided one implementation to allow for the passing of proprietary or externally defined structured courses of action in a CDATA block. This implementation is captured in the Generic Structured COA extension, which provides the GenericStructuredCOAType in the http://stix.mitre.org/extensions/StructuredCOA#Generic-1 namespace. The extension is defined in the extensions/structured_coa/generic.xsd file or at the URL http://stix.mitre.org/XMLSchema/extensions/structured_coa/generic/1.0/generic.xsd.
Diagram
Diagram course_of_action_xsd.tmp#StructuredCOAType_id course_of_action_xsd.tmp#StructuredCOAType_idref
Used by
Attributes
QName Type Use Annotation
id xs:QName optional 
Specifies a unique ID for this StructuredCOA.
idref xs:QName optional 
Specifies a reference to the ID for this StructuredCOA specified elsewhere.
Source
 
<xs:complexType name="StructuredCOAType" abstract="true">
  <xs:annotation>
    <xs:documentation>The StructuredCOAType enables the specification of an actionable structured representation for the CourseOfAction potentially for automated consumption and implementation. This type is defined as an abstract type and is intended to be extended using the XML Schema extension mechanism to allow for the expression of a variety of structured COA types. Instance documents representing structured COAs use the xsi:type attribute to specify which implementation of this type they wish to use. STIX has provided one implementation to allow for the passing of proprietary or externally defined structured courses of action in a CDATA block. This implementation is captured in the Generic Structured COA extension, which provides the GenericStructuredCOAType in the http://stix.mitre.org/extensions/StructuredCOA#Generic-1 namespace. The extension is defined in the extensions/structured_coa/generic.xsd file or at the URL http://stix.mitre.org/XMLSchema/extensions/structured_coa/generic/1.0/generic.xsd.</xs:documentation>
  </xs:annotation>
  <xs:attribute name="id" type="xs:QName">
    <xs:annotation>
      <xs:documentation>Specifies a unique ID for this StructuredCOA.</xs:documentation>
    </xs:annotation>
  </xs:attribute>
  <xs:attribute name="idref" type="xs:QName">
    <xs:annotation>
      <xs:documentation>Specifies a reference to the ID for this StructuredCOA specified elsewhere.</xs:documentation>
    </xs:annotation>
  </xs:attribute>
</xs:complexType>
Complex Type coa:CourseOfActionType
Namespace http://stix.mitre.org/CourseOfAction-1
Annotations
 
The CourseOfActionType characterizes a Course of Action to be taken in regards to one of more cyber threats. NOTE: This construct is still in its early stages of maturity and will require a good deal of review and refinement.
Diagram
Diagram stix_common_xsd.tmp#CourseOfActionBaseType_id stix_common_xsd.tmp#CourseOfActionBaseType_idref stix_common_xsd.tmp#CourseOfActionBaseType course_of_action_xsd.tmp#CourseOfActionType_version course_of_action_xsd.tmp#CourseOfActionType_Title course_of_action_xsd.tmp#CourseOfActionType_Stage course_of_action_xsd.tmp#CourseOfActionType_Type course_of_action_xsd.tmp#CourseOfActionType_Description course_of_action_xsd.tmp#CourseOfActionType_Objective course_of_action_xsd.tmp#CourseOfActionType_Structured_COA course_of_action_xsd.tmp#CourseOfActionType_Impact course_of_action_xsd.tmp#CourseOfActionType_Cost course_of_action_xsd.tmp#CourseOfActionType_Efficacy course_of_action_xsd.tmp#CourseOfActionType_Handling
Type extension of stixCommon:CourseOfActionBaseType
Type hierarchy
Used by
Children coa:Cost, coa:Description, coa:Efficacy, coa:Handling, coa:Impact, coa:Objective, coa:Stage, coa:Structured_COA, coa:Title, coa:Type
Attributes
QName Type Use Annotation
id xs:QName optional 
Specifies a globally unique identifier for this COA.
idref xs:QName optional 
Specifies a globally unique identifier of a COA specified elsewhere.
version coa:CourseOfActionVersionType optional 
Specifies the relevant STIX-COA schema version for this content.
Source
 
<xs:complexType name="CourseOfActionType">
  <xs:annotation>
    <xs:documentation>The CourseOfActionType characterizes a Course of Action to be taken in regards to one of more cyber threats. NOTE: This construct is still in its early stages of maturity and will require a good deal of review and refinement.</xs:documentation>
  </xs:annotation>
  <xs:complexContent>
    <xs:extension base="stixCommon:CourseOfActionBaseType">
      <xs:sequence>
        <xs:element name="Title" type="xs:string" minOccurs="0">
          <xs:annotation>
            <xs:documentation>The Title field provides a simple title for this CourseOfAction.</xs:documentation>
          </xs:annotation>
        </xs:element>
        <xs:element name="Stage" type="stixCommon:ControlledVocabularyStringType" minOccurs="0">
          <xs:annotation>
            <xs:documentation>The Stage field specifies what stage in the cyber threat management lifecycle this CourseOfAction is relevant to (e.g. Remedy or Reponse). This field is implemented through the xsi:type controlled vocabulary extension mechanism. The default vocabulary type is COAStageVocab-1.0 in the http://stix.mitre.org/default_vocabularies-1 namespace. This type is defined in the stix_default_vocabularies.xsd file or at the URL http://stix.mitre.org/XMLSchema/default_vocabularies/1.0.1/stix_default_vocabularies.xsd . Users may also define their own vocabulary using the type extension mechanism, specify a vocabulary name and reference using the attributes, or simply use this as a string field.</xs:documentation>
          </xs:annotation>
        </xs:element>
        <xs:element name="Type" type="stixCommon:ControlledVocabularyStringType" minOccurs="0">
          <xs:annotation>
            <xs:documentation>The Type field specifies the type of this CourseOfAction. This field is implemented through the xsi:type controlled vocabulary extension mechanism. No default vocabulary type has been defined for STIX 1.0. Users may either define their own vocabulary using the type extension mechanism, specify a vocabulary name and reference using the attributes, or simply use this as a free string field.</xs:documentation>
          </xs:annotation>
        </xs:element>
        <xs:element name="Description" type="stixCommon:StructuredTextType" minOccurs="0">
          <xs:annotation>
            <xs:documentation>The Description element is optional and enables a generalized but structured description of this CourseOfAction.</xs:documentation>
          </xs:annotation>
        </xs:element>
        <xs:element name="Objective" type="coa:ObjectiveType" minOccurs="0">
          <xs:annotation>
            <xs:documentation>The Objective field characterizes the objective of this CourseOfAction.</xs:documentation>
          </xs:annotation>
        </xs:element>
        <xs:element name="Structured_COA" type="coa:StructuredCOAType" minOccurs="0">
          <xs:annotation>
            <xs:documentation>The Structured_COA field enables the specification of an actionable structured representation for the CourseOfAction potentially for automated consumption and implementation. This field is implemented through the xsi:type extension mechanism. While STIX has not defined a default type, it has provided support for passing proprietary or externally defined structured courses of action using the Generic Structured COA extension. The Generic Structured COA extension is captured in the GenericStructuredCOAType in the http://stix.mitre.org/extensions/StructuredCOA#Generic-1 namespace. This type is defined in the extensions/structured_coa/generic.xsd file or at the URL http://stix.mitre.org/XMLSchema/extensions/structured_coa/generic/1.0/generic.xsd.</xs:documentation>
          </xs:annotation>
        </xs:element>
        <xs:element name="Impact" type="stixCommon:StatementType" minOccurs="0">
          <xs:annotation>
            <xs:documentation>The Impact field characterizes the estimated impact of applying this CourseOfAction. It is implemented through the StatementType, which allows for the expression of a statement in a vocabulary (Value), a description of the statement (Description), a confidence in the statement (Confidence), and the source of the statement (Source). The default vocabulary type for the Value is HighMediumLowVocab-1.0 in the http://stix.mitre.org/default_vocabularies-1 namespace. This type is defined in the stix_default_vocabularies.xsd file or at the URL http://stix.mitre.org/XMLSchema/default_vocabularies/1.0.1/stix_default_vocabularies.xsd . Users may also define their own vocabulary using the type extension mechanism, specify a vocabulary name and reference using the attributes, or simply use this as a string field.</xs:documentation>
          </xs:annotation>
        </xs:element>
        <xs:element name="Cost" type="stixCommon:StatementType" minOccurs="0">
          <xs:annotation>
            <xs:documentation>The Cost field characterizes the estimated cost for applying this CourseOfAction. It is implemented through the StatementType, which allows for the expression of a statement in a vocabulary (Value), a description of the statement (Description), a confidence in the statement (Confidence), and the source of the statement (Source). The default vocabulary type for the Value is HighMediumLowVocab-1.0 in the http://stix.mitre.org/default_vocabularies-1 namespace. This type is defined in the stix_default_vocabularies.xsd file or at the URL http://stix.mitre.org/XMLSchema/default_vocabularies/1.0.1/stix_default_vocabularies.xsd . Users may also define their own vocabulary using the type extension mechanism, specify a vocabulary name and reference using the attributes, or simply use this as a string field.</xs:documentation>
          </xs:annotation>
        </xs:element>
        <xs:element name="Efficacy" type="stixCommon:StatementType" minOccurs="0">
          <xs:annotation>
            <xs:documentation>The Efficacy field characterizes the effectiveness of this CourseOfAction in achieving its targeted Objective. It is implemented through the StatementType, which allows for the expression of a statement in a vocabulary (Value), a description of the statement (Description), a confidence in the statement (Confidence), and the source of the statement (Source). The default vocabulary type for the Value is HighMediumLowVocab-1.0 in the http://stix.mitre.org/default_vocabularies-1 namespace. This type is defined in the stix_default_vocabularies.xsd file or at the URL http://stix.mitre.org/XMLSchema/default_vocabularies/1.0.1/stix_default_vocabularies.xsd . Users may also define their own vocabulary using the type extension mechanism, specify a vocabulary name and reference using the attributes, or simply use this as a string field.</xs:documentation>
          </xs:annotation>
        </xs:element>
        <xs:element name="Handling" type="marking:MarkingType" minOccurs="0">
          <xs:annotation>
            <xs:documentation>The Handling field specifies the appropriate data handling markings for the elements of this COA. The valid marking scope is the nearest CourseOfActionBaseType ancestor of this Handling element and all its descendants.</xs:documentation>
          </xs:annotation>
        </xs:element>
      </xs:sequence>
      <xs:attribute name="version" type="coa:CourseOfActionVersionType">
        <xs:annotation>
          <xs:documentation>Specifies the relevant STIX-COA schema version for this content.</xs:documentation>
        </xs:annotation>
      </xs:attribute>
    </xs:extension>
  </xs:complexContent>
</xs:complexType>
Complex Type coa:ObjectiveType
Namespace http://stix.mitre.org/CourseOfAction-1
Annotations
 
The ObjectiveType characterizes the objective of this CourseOfAction.
Diagram
Diagram course_of_action_xsd.tmp#ObjectiveType_Description course_of_action_xsd.tmp#ObjectiveType_Applicability_Confidence
Used by
Children coa:Applicability_Confidence, coa:Description
Source
 
<xs:complexType name="ObjectiveType">
  <xs:annotation>
    <xs:documentation>The ObjectiveType characterizes the objective of this CourseOfAction.</xs:documentation>
  </xs:annotation>
  <xs:sequence>
    <xs:element name="Description" type="stixCommon:StructuredTextType" minOccurs="0">
      <xs:annotation>
        <xs:documentation>The Description element is optional and enables a generalized description of the objective of this CourseOfAction.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element name="Applicability_Confidence" type="stixCommon:ConfidenceType" minOccurs="0">
      <xs:annotation>
        <xs:documentation>The Applicability_Confidence field characterizes the level of confidence held in the applicability of this suggested COA for its targeted Objective.</xs:documentation>
      </xs:annotation>
    </xs:element>
  </xs:sequence>
</xs:complexType>
Simple Type coa:CourseOfActionVersionType
Namespace http://stix.mitre.org/CourseOfAction-1
Annotations
 
An enumeration of all versions of the Course of Action type valid in the current release of STIX.
Diagram
Diagram
Type restriction of xs:string
Facets
enumeration 1.0
enumeration 1.0.1
Used by
Source
 
<xs:simpleType name="CourseOfActionVersionType">
  <xs:annotation>
    <xs:documentation>An enumeration of all versions of the Course of Action type valid in the current release of STIX.</xs:documentation>
  </xs:annotation>
  <xs:restriction base="xs:string">
    <xs:enumeration value="1.0"/>
    <xs:enumeration value="1.0.1"/>
  </xs:restriction>
</xs:simpleType>
Attribute coa:StructuredCOAType / @id
Namespace No namespace
Annotations
 
Specifies a unique ID for this StructuredCOA.
Type xs:QName
Used by
Complex Type coa:StructuredCOAType
Source
 
<xs:attribute name="id" type="xs:QName">
  <xs:annotation>
    <xs:documentation>Specifies a unique ID for this StructuredCOA.</xs:documentation>
  </xs:annotation>
</xs:attribute>
Attribute coa:StructuredCOAType / @idref
Namespace No namespace
Annotations
 
Specifies a reference to the ID for this StructuredCOA specified elsewhere.
Type xs:QName
Used by
Complex Type coa:StructuredCOAType
Source
 
<xs:attribute name="idref" type="xs:QName">
  <xs:annotation>
    <xs:documentation>Specifies a reference to the ID for this StructuredCOA specified elsewhere.</xs:documentation>
  </xs:annotation>
</xs:attribute>
Attribute coa:CourseOfActionType / @version
Namespace No namespace
Annotations
 
Specifies the relevant STIX-COA schema version for this content.
Type coa:CourseOfActionVersionType
Facets
enumeration 1.0
enumeration 1.0.1
Used by
Complex Type coa:CourseOfActionType
Source
 
<xs:attribute name="version" type="coa:CourseOfActionVersionType">
  <xs:annotation>
    <xs:documentation>Specifies the relevant STIX-COA schema version for this content.</xs:documentation>
  </xs:annotation>
</xs:attribute>
XML Schema documentation generated by ® XML Editor.