This package contains an initial version of an extension to STIX data markings that support representing data markings as full EDH headers via the IC-TDF (Trusted Data Format) implementation. IC-TDF was was downloaded from the U.S. Director of National Intelligence website as published on this: http://www.dni.gov/index.php/about/organization/chief-information-officer/trusted-data-format.

The ZIP file contains the following:

IC-TDF Folder
------------------------
This is the full folder structure for the Trusted Data Format (IC-TDF) model including all of the schema files. It is included here so that the EDH data marking extension types can reference the appropriate IC-TDF types which they extend. 

edh_marking.xsd
------------------------
Schema file defining the EDH marking modeling utilizing EDHType and SecurityType from the IC-TDF data model. This file uses offline schema locations to point to the EDH schemas and online schema locations to point to the STIX schemas.

STIX_IP_Watchlist_With_EDH_Markings.xml
------------------------
A sample STIX package containing an IP watchlist indicator with a simplified (and potentially unrealistic) set of EDH data marking extension data. These markings are applied to the entire document via the STIX marking extension.