Showing:

Attributes
Diagrams
Facets
Source
Used by
Imported schema ioc.xsd
Namespace http://schemas.mandiant.com/2010/ioc
Element tns:IndicatorOfCompromise / tns:short_description
Namespace http://schemas.mandiant.com/2010/ioc
Diagram
Diagram
Type xs:string
Source
 
<xs:element minOccurs="0" maxOccurs="1" name="short_description" type="xs:string"/>
Element tns:IndicatorOfCompromise / tns:description
Namespace http://schemas.mandiant.com/2010/ioc
Diagram
Diagram
Type xs:string
Source
 
<xs:element minOccurs="0" maxOccurs="1" name="description" type="xs:string"/>
Element tns:IndicatorOfCompromise / tns:keywords
Namespace http://schemas.mandiant.com/2010/ioc
Diagram
Diagram
Type xs:string
Source
 
<xs:element minOccurs="0" maxOccurs="1" name="keywords" type="xs:string"/>
Element tns:IndicatorOfCompromise / tns:authored_by
Namespace http://schemas.mandiant.com/2010/ioc
Diagram
Diagram
Type xs:string
Source
 
<xs:element minOccurs="0" maxOccurs="1" name="authored_by" type="xs:string"/>
Element tns:IndicatorOfCompromise / tns:authored_date
Namespace http://schemas.mandiant.com/2010/ioc
Diagram
Diagram
Type xs:dateTime
Source
 
<xs:element minOccurs="1" maxOccurs="1" name="authored_date" nillable="true" type="xs:dateTime"/>
Element tns:IndicatorOfCompromise / tns:links
Namespace http://schemas.mandiant.com/2010/ioc
Diagram
Type tns:ArrayOfLink
Children tns:link
Source
Element tns:ArrayOfLink / tns:link
Namespace http://schemas.mandiant.com/2010/ioc
Diagram
Type tns:Link
Type hierarchy
Attributes
Source
Element tns:IndicatorOfCompromise / tns:definition
Namespace http://schemas.mandiant.com/2010/ioc
Diagram
Diagram ioc_xsd.tmp#ArrayOfIocIndicator_Indicator ioc_xsd.tmp#ArrayOfIocIndicator
Type tns:ArrayOfIocIndicator
Children tns:Indicator
Source
 
<xs:element minOccurs="0" maxOccurs="1" name="definition" type="tns:ArrayOfIocIndicator"/>
Element tns:ArrayOfIocIndicator / tns:Indicator
Namespace http://schemas.mandiant.com/2010/ioc
Diagram
Diagram ioc_xsd.tmp#IocIndicator_operator ioc_xsd.tmp#IocIndicator_id ioc_xsd.tmp#IocIndicator_IndicatorItem ioc_xsd.tmp#IocIndicator_Indicator ioc_xsd.tmp#IocIndicator
Type tns:IocIndicator
Children param, tns:Indicator, tns:IndicatorItem
Attributes
QName Type Fixed Default Use Annotation
id xs:string optional
operator tns:IocOperator required
Source
 
<xs:element minOccurs="0" maxOccurs="unbounded" name="Indicator" nillable="true" type="tns:IocIndicator"/>
Element tns:IocIndicator / tns:IndicatorItem
Namespace http://schemas.mandiant.com/2010/ioc
Diagram
Diagram ioc_xsd.tmp#IndicatorItem_id ioc_xsd.tmp#IndicatorItem_condition ioc_xsd.tmp#IndicatorItem_Context ioc_xsd.tmp#IndicatorItem_Content ioc_xsd.tmp#IndicatorItem_Comment ioc_xsd.tmp#IndicatorItem
Type tns:IndicatorItem
Children param, tns:Comment, tns:Content, tns:Context
Attributes
QName Type Fixed Default Use Annotation
condition xs:string optional
id xs:string optional
Source
 
<xs:element minOccurs="0" maxOccurs="unbounded" name="IndicatorItem" type="tns:IndicatorItem"/>
Element tns:IndicatorItem / tns:Context
Namespace http://schemas.mandiant.com/2010/ioc
Diagram
Diagram ioc_xsd.tmp#IndicatorItemContext_document ioc_xsd.tmp#IndicatorItemContext_search ioc_xsd.tmp#IndicatorItemContext_type ioc_xsd.tmp#IndicatorItemContext
Type tns:IndicatorItemContext
Attributes
QName Type Fixed Default Use Annotation
document xs:string optional
search xs:string optional
type xs:string optional
Source
 
<xs:element minOccurs="0" maxOccurs="1" name="Context" type="tns:IndicatorItemContext"/>
Element tns:IndicatorItem / tns:Content
Namespace http://schemas.mandiant.com/2010/ioc
Diagram
Diagram ioc_xsd.tmp#IndicatorItemContent_type ioc_xsd.tmp#IndicatorItemContent
Type tns:IndicatorItemContent
Attributes
QName Type Fixed Default Use Annotation
type xs:string optional
Source
 
<xs:element minOccurs="0" maxOccurs="1" name="Content" type="tns:IndicatorItemContent"/>
Element tns:IndicatorItem / tns:Comment
Namespace http://schemas.mandiant.com/2010/ioc
Diagram
Diagram
Type xs:string
Source
 
<xs:element minOccurs="0" maxOccurs="1" name="Comment" type="xs:string"/>
Element tns:IocIndicator / tns:Indicator
Namespace http://schemas.mandiant.com/2010/ioc
Diagram
Diagram ioc_xsd.tmp#IocIndicator_operator ioc_xsd.tmp#IocIndicator_id ioc_xsd.tmp#IocIndicator_IndicatorItem ioc_xsd.tmp#IocIndicator_Indicator ioc_xsd.tmp#IocIndicator
Type tns:IocIndicator
Children param, tns:Indicator, tns:IndicatorItem
Attributes
QName Type Fixed Default Use Annotation
id xs:string optional
operator tns:IocOperator required
Source
 
<xs:element minOccurs="0" maxOccurs="unbounded" name="Indicator" type="tns:IocIndicator"/>
Element tns:ioctermlist
Namespace http://schemas.mandiant.com/2010/ioc
Diagram
Diagram ioc_xsd.tmp#IocTermList_last-modified ioc_xsd.tmp#IocTermList_iocterm ioc_xsd.tmp#IocTermList
Type tns:IocTermList
Children tns:iocterm
Attributes
QName Type Fixed Default Use Annotation
last-modified xs:dateTime required
Source
 
<xs:element name="ioctermlist" nillable="true" type="tns:IocTermList"/>
Element tns:IocTermList / tns:iocterm
Namespace http://schemas.mandiant.com/2010/ioc
Diagram
Diagram ioc_xsd.tmp#IocTerm_title ioc_xsd.tmp#IocTerm_text ioc_xsd.tmp#IocTerm_processor-type ioc_xsd.tmp#IocTerm_display-type ioc_xsd.tmp#IocTerm_data-type ioc_xsd.tmp#IocTerm
Type tns:IocTerm
Attributes
QName Type Fixed Default Use Annotation
data-type xs:string optional
display-type xs:string optional
processor-type xs:string optional
text xs:string optional
title xs:string optional
Source
 
<xs:element minOccurs="0" maxOccurs="unbounded" name="iocterm" type="tns:IocTerm"/>
Element tns:metrics
Namespace http://schemas.mandiant.com/2010/ioc
Diagram
Diagram ioc_xsd.tmp#MetricList_metric ioc_xsd.tmp#MetricList
Type tns:MetricList
Children tns:metric
Source
 
<xs:element name="metrics" nillable="true" type="tns:MetricList"/>
Element tns:MetricList / tns:metric
Namespace http://schemas.mandiant.com/2010/ioc
Diagram
Diagram ioc_xsd.tmp#Metric_src ioc_xsd.tmp#Metric_name ioc_xsd.tmp#Metric_value ioc_xsd.tmp#Metric
Type tns:Metric
Attributes
QName Type Fixed Default Use Annotation
name xs:string optional
src xs:string optional
value xs:float required
Source
 
<xs:element minOccurs="0" maxOccurs="unbounded" name="metric" type="tns:Metric"/>
Element tns:ioc
Namespace http://schemas.mandiant.com/2010/ioc
Diagram
Diagram ioc_xsd.tmp#IndicatorOfCompromise_id ioc_xsd.tmp#IndicatorOfCompromise_last-modified ioc_xsd.tmp#IndicatorOfCompromise_short_description ioc_xsd.tmp#IndicatorOfCompromise_description ioc_xsd.tmp#IndicatorOfCompromise_keywords ioc_xsd.tmp#IndicatorOfCompromise_authored_by ioc_xsd.tmp#IndicatorOfCompromise_authored_date ioc_xsd.tmp#IndicatorOfCompromise_links ioc_xsd.tmp#IndicatorOfCompromise_definition ioc_xsd.tmp#IndicatorOfCompromise
Type tns:IndicatorOfCompromise
Children tns:authored_by, tns:authored_date, tns:definition, tns:description, tns:keywords, tns:links, tns:short_description
Attributes
QName Type Fixed Default Use Annotation
id xs:string optional
last-modified xs:dateTime required
Source
 
<xs:element name="ioc" nillable="true" type="tns:IndicatorOfCompromise"/>
Complex Type tns:IndicatorOfCompromise
Namespace http://schemas.mandiant.com/2010/ioc
Diagram
Diagram ioc_xsd.tmp#IndicatorOfCompromise_id ioc_xsd.tmp#IndicatorOfCompromise_last-modified ioc_xsd.tmp#IndicatorOfCompromise_short_description ioc_xsd.tmp#IndicatorOfCompromise_description ioc_xsd.tmp#IndicatorOfCompromise_keywords ioc_xsd.tmp#IndicatorOfCompromise_authored_by ioc_xsd.tmp#IndicatorOfCompromise_authored_date ioc_xsd.tmp#IndicatorOfCompromise_links ioc_xsd.tmp#IndicatorOfCompromise_definition
Used by
Children tns:authored_by, tns:authored_date, tns:definition, tns:description, tns:keywords, tns:links, tns:short_description
Attributes
QName Type Fixed Default Use Annotation
id xs:string optional
last-modified xs:dateTime required
Source
 
<xs:complexType name="IndicatorOfCompromise">
  <xs:sequence>
    <xs:element minOccurs="0" maxOccurs="1" name="short_description" type="xs:string"/>
    <xs:element minOccurs="0" maxOccurs="1" name="description" type="xs:string"/>
    <xs:element minOccurs="0" maxOccurs="1" name="keywords" type="xs:string"/>
    <xs:element minOccurs="0" maxOccurs="1" name="authored_by" type="xs:string"/>
    <xs:element minOccurs="1" maxOccurs="1" name="authored_date" nillable="true" type="xs:dateTime"/>
    <xs:element minOccurs="0" maxOccurs="1" name="links" type="tns:ArrayOfLink"/>
    <xs:element minOccurs="0" maxOccurs="1" name="definition" type="tns:ArrayOfIocIndicator"/>
  </xs:sequence>
  <xs:attribute name="id" type="xs:string"/>
  <xs:attribute name="last-modified" type="xs:dateTime" use="required"/>
</xs:complexType>
Complex Type tns:ArrayOfLink
Namespace http://schemas.mandiant.com/2010/ioc
Diagram
Used by
Children tns:link
Source
Complex Type tns:Link
Namespace http://schemas.mandiant.com/2010/ioc
Diagram
Type extension of tns:Identity
Type hierarchy
Used by
Attributes
Source
Complex Type tns:Identity
Namespace http://schemas.mandiant.com/2010/ioc
Diagram
Diagram ioc_xsd.tmp#Identity_href
Used by
Complex Type tns:Link
Attributes
QName Type Fixed Default Use Annotation
href xs:string optional
Source
 
<xs:complexType name="Identity">
  <xs:attribute name="href" type="xs:string"/>
</xs:complexType>
Complex Type tns:ArrayOfIocIndicator
Namespace http://schemas.mandiant.com/2010/ioc
Diagram
Diagram ioc_xsd.tmp#ArrayOfIocIndicator_Indicator
Used by
Children tns:Indicator
Source
 
<xs:complexType name="ArrayOfIocIndicator">
  <xs:sequence>
    <xs:element minOccurs="0" maxOccurs="unbounded" name="Indicator" nillable="true" type="tns:IocIndicator"/>
  </xs:sequence>
</xs:complexType>
Complex Type tns:IocIndicator
Namespace http://schemas.mandiant.com/2010/ioc
Diagram
Diagram ioc_xsd.tmp#IocIndicator_operator ioc_xsd.tmp#IocIndicator_id ioc_xsd.tmp#IocIndicator_IndicatorItem ioc_xsd.tmp#IocIndicator_Indicator
Used by
Children param, tns:Indicator, tns:IndicatorItem
Attributes
QName Type Fixed Default Use Annotation
id xs:string optional
operator tns:IocOperator required
Source
 
<xs:complexType name="IocIndicator">
  <xs:sequence>
    <xs:element minOccurs="0" maxOccurs="unbounded" name="IndicatorItem" type="tns:IndicatorItem"/>
    <xs:element minOccurs="0" maxOccurs="unbounded" name="Indicator" type="tns:IocIndicator"/>
    <xs:element minOccurs="0" maxOccurs="unbounded" xmlns:q1="http://schemas.mandiant.com/2010/ioc/TR/" ref="q1:param"/>
  </xs:sequence>
  <xs:attribute name="operator" type="tns:IocOperator" use="required"/>
  <xs:attribute name="id" type="xs:string"/>
</xs:complexType>
Complex Type tns:IndicatorItem
Namespace http://schemas.mandiant.com/2010/ioc
Diagram
Diagram ioc_xsd.tmp#IndicatorItem_id ioc_xsd.tmp#IndicatorItem_condition ioc_xsd.tmp#IndicatorItem_Context ioc_xsd.tmp#IndicatorItem_Content ioc_xsd.tmp#IndicatorItem_Comment
Used by
Children param, tns:Comment, tns:Content, tns:Context
Attributes
QName Type Fixed Default Use Annotation
condition xs:string optional
id xs:string optional
Source
 
<xs:complexType name="IndicatorItem">
  <xs:sequence>
    <xs:element minOccurs="0" maxOccurs="1" name="Context" type="tns:IndicatorItemContext"/>
    <xs:element minOccurs="0" maxOccurs="1" name="Content" type="tns:IndicatorItemContent"/>
    <xs:element minOccurs="0" maxOccurs="1" name="Comment" type="xs:string"/>
    <xs:element minOccurs="0" maxOccurs="unbounded" xmlns:q2="http://schemas.mandiant.com/2010/ioc/TR/" ref="q2:param"/>
  </xs:sequence>
  <xs:attribute name="id" type="xs:string"/>
  <xs:attribute name="condition" type="xs:string"/>
</xs:complexType>
Complex Type tns:IndicatorItemContext
Namespace http://schemas.mandiant.com/2010/ioc
Diagram
Diagram ioc_xsd.tmp#IndicatorItemContext_document ioc_xsd.tmp#IndicatorItemContext_search ioc_xsd.tmp#IndicatorItemContext_type
Used by
Attributes
QName Type Fixed Default Use Annotation
document xs:string optional
search xs:string optional
type xs:string optional
Source
 
<xs:complexType name="IndicatorItemContext">
  <xs:attribute name="document" type="xs:string"/>
  <xs:attribute name="search" type="xs:string"/>
  <xs:attribute name="type" type="xs:string"/>
</xs:complexType>
Complex Type tns:IndicatorItemContent
Namespace http://schemas.mandiant.com/2010/ioc
Diagram
Diagram ioc_xsd.tmp#IndicatorItemContent_type
Type extension of xs:string
Used by
Attributes
QName Type Fixed Default Use Annotation
type xs:string optional
Source
 
<xs:complexType name="IndicatorItemContent">
  <xs:simpleContent>
    <xs:extension base="xs:string">
      <xs:attribute name="type" type="xs:string"/>
    </xs:extension>
  </xs:simpleContent>
</xs:complexType>
Simple Type tns:IocOperator
Namespace http://schemas.mandiant.com/2010/ioc
Diagram
Diagram
Type restriction of xs:string
Facets
enumeration OR
enumeration AND
Used by
Source
 
<xs:simpleType name="IocOperator">
  <xs:restriction base="xs:string">
    <xs:enumeration value="OR"/>
    <xs:enumeration value="AND"/>
  </xs:restriction>
</xs:simpleType>
Complex Type tns:IocTermList
Namespace http://schemas.mandiant.com/2010/ioc
Diagram
Diagram ioc_xsd.tmp#IocTermList_last-modified ioc_xsd.tmp#IocTermList_iocterm
Used by
Element tns:ioctermlist
Children tns:iocterm
Attributes
QName Type Fixed Default Use Annotation
last-modified xs:dateTime required
Source
 
<xs:complexType name="IocTermList">
  <xs:sequence>
    <xs:element minOccurs="0" maxOccurs="unbounded" name="iocterm" type="tns:IocTerm"/>
  </xs:sequence>
  <xs:attribute name="last-modified" type="xs:dateTime" use="required"/>
</xs:complexType>
Complex Type tns:IocTerm
Namespace http://schemas.mandiant.com/2010/ioc
Diagram
Diagram ioc_xsd.tmp#IocTerm_title ioc_xsd.tmp#IocTerm_text ioc_xsd.tmp#IocTerm_processor-type ioc_xsd.tmp#IocTerm_display-type ioc_xsd.tmp#IocTerm_data-type
Used by
Attributes
QName Type Fixed Default Use Annotation
data-type xs:string optional
display-type xs:string optional
processor-type xs:string optional
text xs:string optional
title xs:string optional
Source
 
<xs:complexType name="IocTerm">
  <xs:sequence>
    <xs:any minOccurs="0" maxOccurs="1"/>
  </xs:sequence>
  <xs:attribute name="title" type="xs:string"/>
  <xs:attribute name="text" type="xs:string"/>
  <xs:attribute name="processor-type" type="xs:string"/>
  <xs:attribute name="display-type" type="xs:string"/>
  <xs:attribute name="data-type" type="xs:string"/>
</xs:complexType>
Complex Type tns:MetricList
Namespace http://schemas.mandiant.com/2010/ioc
Diagram
Diagram ioc_xsd.tmp#MetricList_metric
Used by
Element tns:metrics
Children tns:metric
Source
 
<xs:complexType name="MetricList">
  <xs:sequence>
    <xs:element minOccurs="0" maxOccurs="unbounded" name="metric" type="tns:Metric"/>
  </xs:sequence>
</xs:complexType>
Complex Type tns:Metric
Namespace http://schemas.mandiant.com/2010/ioc
Diagram
Diagram ioc_xsd.tmp#Metric_src ioc_xsd.tmp#Metric_name ioc_xsd.tmp#Metric_value
Used by
Attributes
QName Type Fixed Default Use Annotation
name xs:string optional
src xs:string optional
value xs:float required
Source
 
<xs:complexType name="Metric">
  <xs:attribute name="src" type="xs:string"/>
  <xs:attribute name="name" type="xs:string"/>
  <xs:attribute name="value" type="xs:float" use="required"/>
</xs:complexType>
Attribute tns:Identity / @href
Namespace No namespace
Type xs:string
Used by
Complex Type tns:Identity
Source
 
<xs:attribute name="href" type="xs:string"/>
Attribute tns:Link / @rel
Namespace No namespace
Type xs:string
Used by
Source
Attribute tns:Link / @title
Namespace No namespace
Type xs:string
Used by
Source
Attribute tns:Link / @type
Namespace No namespace
Type xs:string
Used by
Source
Attribute tns:IndicatorItemContext / @document
Namespace No namespace
Type xs:string
Used by
Source
 
<xs:attribute name="document" type="xs:string"/>
Attribute tns:IndicatorItemContext / @search
Namespace No namespace
Type xs:string
Used by
Source
Attribute tns:IndicatorItemContext / @type
Namespace No namespace
Type xs:string
Used by
Source
 
<xs:attribute name="type" type="xs:string"/>
Attribute tns:IndicatorItemContent / @type
Namespace No namespace
Type xs:string
Used by
Source
 
<xs:attribute name="type" type="xs:string"/>
Attribute tns:IndicatorItem / @id
Namespace No namespace
Type xs:string
Used by
Complex Type tns:IndicatorItem
Source
 
<xs:attribute name="id" type="xs:string"/>
Attribute tns:IndicatorItem / @condition
Namespace No namespace
Type xs:string
Used by
Complex Type tns:IndicatorItem
Source
 
<xs:attribute name="condition" type="xs:string"/>
Attribute tns:IocIndicator / @operator
Namespace No namespace
Type tns:IocOperator
Facets
enumeration OR
enumeration AND
Used by
Complex Type tns:IocIndicator
Source
 
<xs:attribute name="operator" type="tns:IocOperator" use="required"/>
Attribute tns:IocIndicator / @id
Namespace No namespace
Type xs:string
Used by
Complex Type tns:IocIndicator
Source
 
<xs:attribute name="id" type="xs:string"/>
Attribute tns:IndicatorOfCompromise / @id
Namespace No namespace
Type xs:string
Used by
Source
 
<xs:attribute name="id" type="xs:string"/>
Attribute tns:IndicatorOfCompromise / @last-modified
Namespace No namespace
Type xs:dateTime
Used by
Source
 
<xs:attribute name="last-modified" type="xs:dateTime" use="required"/>
Attribute tns:IocTerm / @title
Namespace No namespace
Type xs:string
Used by
Complex Type tns:IocTerm
Source
 
<xs:attribute name="title" type="xs:string"/>
Attribute tns:IocTerm / @text
Namespace No namespace
Type xs:string
Used by
Complex Type tns:IocTerm
Source
 
<xs:attribute name="text" type="xs:string"/>
Attribute tns:IocTerm / @processor-type
Namespace No namespace
Type xs:string
Used by
Complex Type tns:IocTerm
Source
 
<xs:attribute name="processor-type" type="xs:string"/>
Attribute tns:IocTerm / @display-type
Namespace No namespace
Type xs:string
Used by
Complex Type tns:IocTerm
Source
 
<xs:attribute name="display-type" type="xs:string"/>
Attribute tns:IocTerm / @data-type
Namespace No namespace
Type xs:string
Used by
Complex Type tns:IocTerm
Source
 
<xs:attribute name="data-type" type="xs:string"/>
Attribute tns:IocTermList / @last-modified
Namespace No namespace
Type xs:dateTime
Used by
Complex Type tns:IocTermList
Source
 
<xs:attribute name="last-modified" type="xs:dateTime" use="required"/>
Attribute tns:Metric / @src
Namespace No namespace
Type xs:string
Used by
Complex Type tns:Metric
Source
 
<xs:attribute name="src" type="xs:string"/>
Attribute tns:Metric / @name
Namespace No namespace
Type xs:string
Used by
Complex Type tns:Metric
Source
 
<xs:attribute name="name" type="xs:string"/>
Attribute tns:Metric / @value
Namespace No namespace
Type xs:float
Used by
Complex Type tns:Metric
Source
 
<xs:attribute name="value" type="xs:float" use="required"/>
XML Schema documentation generated by ® XML Editor.