-
Notifications
You must be signed in to change notification settings - Fork 17
/
common.xsd
2706 lines (2706 loc) · 157 KB
/
common.xsd
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
<?xml version='1.0' encoding='UTF-8'?>
<xs:schema xmlns:cyboxCommon="http://docs.oasis-open.org/cti/ns/cybox/common-2" xmlns:xs="http://www.w3.org/2001/XMLSchema" targetNamespace="http://docs.oasis-open.org/cti/ns/cybox/common-2" elementFormDefault="qualified" attributeFormDefault="unqualified" version="2.1.1">
<xs:annotation>
<xs:documentation> CybOX[TM] Version 2.1.1. Committee Specification Draft 01 / Public Review Draft 01</xs:documentation>
<xs:appinfo>
<schema>CybOX Common</schema>
<version>2.1.1</version>
<date>01/22/2014</date>
<short_description>The following specifies the fields and types that compose this defined CybOX Common Types.</short_description>
<terms_of_use>Copyright (c) OASIS Open 2016. All Rights Reserved.
Distributed under the terms of the OASIS IPR Policy, [http://www.oasis-open.org/policies-guidelines/ipr], AS-IS, WITHOUT ANY IMPLIED OR EXPRESS WARRANTY; there is no warranty of MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE or NONINFRINGEMENT of the rights of others.</terms_of_use>
<terms_of_use> Portions copyright (c) United States Government 2012-2016. All Rights Reserved.
Source: http://docs.oasis-open.org/cti/cybox/v2.1.1/csprd01/schemas/
Latest version of the specification: REPLACE_WITH_SPECIFICATION_URL
TC IPR Statement: https://www.oasis-open.org/committees/cti/ipr.php
</terms_of_use>
</xs:appinfo>
</xs:annotation>
<xs:complexType name="MeasureSourceType">
<xs:annotation>
<xs:documentation>The MeasureSourceType is a type representing a description of a single cyber observation source.</xs:documentation>
</xs:annotation>
<xs:sequence>
<xs:element name="Information_Source_Type" type="cyboxCommon:ControlledVocabularyStringType" minOccurs="0">
<xs:annotation>
<xs:documentation>The Information_Source_Type field is optional and utilizes a standardized controlled vocabulary to identify the type of information source leveraged for this cyber observation source.</xs:documentation>
<xs:documentation>This field is implemented through the xsi:type controlled vocabulary extension mechanism. The default vocabulary type is InformationSourceTypeVocab in the http://docs.oasis-open.org/cti/ns/cybox/vocabularies-2 namespace. This type is defined in the default_vocabularies.xsd file or at the URL http://docs.oasis-open.org/cti/cybox-2.1.1-xml-binding/v1.0/csd01/schemas/default_vocabularies.xsd.</xs:documentation>
<xs:documentation>Users may also define their own vocabulary using the type extension mechanism (by specifying a vocabulary name and/or reference using the vocab_name and vocab_reference attributes, respectively) or simply use this as a string field.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Tool_Type" type="cyboxCommon:ControlledVocabularyStringType" minOccurs="0">
<xs:annotation>
<xs:documentation>The Tool_Type field is optional and (when tools are used) enables identification of the type of tool leveraged as part of this cyber observation source, via a standardized controlled vocabulary.</xs:documentation>
<xs:documentation>This field is implemented through the xsi:type controlled vocabulary extension mechanism. The default vocabulary type is ToolTypeVocab in the http://docs.oasis-open.org/cti/ns/cybox/vocabularies-2 namespace. This type is defined in the default_vocabularies.xsd file or at the URL http://docs.oasis-open.org/cti/cybox-2.1.1-xml-binding/v1.0/csd01/schemas/default_vocabularies.xsd.</xs:documentation>
<xs:documentation>Users may also define their own vocabulary using the type extension mechanism (by specifying a vocabulary name and/or reference using the vocab_name and vocab_reference attributes, respectively) or simply use this as a string field.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Description" type="cyboxCommon:StructuredTextType" minOccurs="0">
<xs:annotation>
<xs:documentation>The Description field is optional and enables a generalized but structured description of this syber observation source.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Contributors" type="cyboxCommon:PersonnelType" minOccurs="0">
<xs:annotation>
<xs:documentation>The Contributors field is optional and enables description of the individual contributors involved in this cyber observation source.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Time" type="cyboxCommon:TimeType" minOccurs="0">
<xs:annotation>
<xs:documentation>The Time field is optional and enables description of various time-related properties for this cyber observation source instance.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Observation_Location" type="cyboxCommon:LocationType" minOccurs="0">
<xs:annotation>
<xs:documentation>The Observation_Location field specifies a relevant physical location for the observation measurement of the associated Observable.</xs:documentation>
<xs:documentation>This field is implemented through the xsi:type extension mechanism. The default type is CIQAddressInstanceType in the http://docs.oasis-open.org/cti/ns/cybox/address/ciq-address-3.0-1 namespace. This type is defined in the extensions/location/ciq_address_3.0.xsd file or at the URL http://docs.oasis-open.org/cti/cybox-2.1.1-xml-binding/v1.0/csd01/schemas/ciq_address_3.0.xsd.</xs:documentation>
<xs:documentation>Those who wish to express a simple name may also do so by not specifying an xsi:type and using the Name field.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Tools" type="cyboxCommon:ToolsInformationType" minOccurs="0">
<xs:annotation>
<xs:documentation>The Tools field is optional and enables description of the tools utilized for this cyber observation source.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Platform" type="cyboxCommon:PlatformSpecificationType" minOccurs="0">
<xs:annotation>
<xs:documentation>The Platform field is optional and enables a formal, standardized specification of the platform for this cyber observation source.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="System" type="cyboxCommon:ObjectPropertiesType" minOccurs="0">
<xs:annotation>
<xs:documentation>The System field is optional and enables characterization of the system on which the mechanism of cyber observation executed. System should be an object of type SystemObj:SystemObjectType.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Instance" type="cyboxCommon:ObjectPropertiesType" minOccurs="0">
<xs:annotation>
<xs:documentation>The Instance field is optional and enables characterization of the process instance in which the mechanism of cyber observation executed. Instance should be of type ProcessObj:ProcessObjectType.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Observable_Location" type="cyboxCommon:LocationType" minOccurs="0">
<xs:annotation>
<xs:documentation>The Observable_Location field specifies a relevant physical location for the associated Observable.</xs:documentation>
<xs:documentation>This field is implemented through the xsi:type extension mechanism. The default type is CIQAddressInstanceType in the http://docs.oasis-open.org/cti/ns/cybox/address/ciq-address-3.0-1 namespace. This type is defined in the extensions/location/ciq_address_3.0.xsd file or at the URL http://docs.oasis-open.org/cti/cybox-2.1.1-xml-binding/v1.0/csd01/schemas/ciq_address_3.0.xsd.</xs:documentation>
<xs:documentation>Those who wish to express a simple name may also do so by not specifying an xsi:type and using the Name field.</xs:documentation>
</xs:annotation>
</xs:element>
</xs:sequence>
<xs:attribute name="class" type="cyboxCommon:SourceClassTypeEnum">
<xs:annotation>
<xs:documentation>The class field is optional and enables identification of the high-level class of this cyber observation source.</xs:documentation>
</xs:annotation>
</xs:attribute>
<xs:attribute name="source_type" type="cyboxCommon:SourceTypeEnum">
<xs:annotation>
<xs:documentation>The source_type field is optional and enables identification of the broad type of this cyber observation source.</xs:documentation>
</xs:annotation>
</xs:attribute>
<xs:attribute name="name" type="xs:string">
<xs:annotation>
<xs:documentation>The name field is optional and enables the assignment of a relevant name to this Discovery Method.</xs:documentation>
</xs:annotation>
</xs:attribute>
<xs:attribute name="sighting_count" type="xs:positiveInteger">
<xs:annotation>
<xs:documentation>The sighting_count field specifies how many different identical instances of a given Observable may have been seen/sighted by the observation source.</xs:documentation>
</xs:annotation>
</xs:attribute>
</xs:complexType>
<xs:simpleType name="SourceClassTypeEnum">
<xs:annotation>
<xs:documentation>The SourceClassTypeEnum is a (non-exhaustive) enumeration of cyber observation source classes.</xs:documentation>
</xs:annotation>
<xs:restriction base="xs:string">
<xs:enumeration value="Network">
<xs:annotation>
<xs:documentation>Describes a Network-based cyber observation.</xs:documentation>
</xs:annotation>
</xs:enumeration>
<xs:enumeration value="System">
<xs:annotation>
<xs:documentation>Describes a System-based cyber observation.</xs:documentation>
</xs:annotation>
</xs:enumeration>
<xs:enumeration value="Software">
<xs:annotation>
<xs:documentation>Describes a Software-based cyber observation.</xs:documentation>
</xs:annotation>
</xs:enumeration>
</xs:restriction>
</xs:simpleType>
<xs:simpleType name="SourceTypeEnum">
<xs:annotation>
<xs:documentation>The SourceTypeEnum is a (non-exhaustive) enumeration of cyber observation source types.</xs:documentation>
</xs:annotation>
<xs:restriction base="xs:string">
<xs:enumeration value="Tool">
<xs:annotation>
<xs:documentation>Describes a cyber observation made using various tools, such as scanners, firewalls, gateways, protection systems, and detection systems. See ToolTypeEnum for a more complete list of tools that CybOX supports.</xs:documentation>
</xs:annotation>
</xs:enumeration>
<xs:enumeration value="Analysis">
<xs:annotation>
<xs:documentation>Describes a cyber observation made from analysis methods, such as Static and Dynamic methods. See AnalysisMethodTypeEnum for a more complete list of methods that CybOX supports.</xs:documentation>
</xs:annotation>
</xs:enumeration>
<xs:enumeration value="Information Source">
<xs:annotation>
<xs:documentation>Describes a cyber observation made using other information sources, such as logs, Device Driver APIs, and TPM output data. See InformationSourceTypeEnum for a more complete list of information sources that CybOX supports.</xs:documentation>
</xs:annotation>
</xs:enumeration>
</xs:restriction>
</xs:simpleType>
<xs:complexType name="ContributorType">
<xs:annotation>
<xs:documentation>The ContributorType represents a description of an individual who contributed as a source of cyber observation data.</xs:documentation>
</xs:annotation>
<xs:sequence>
<xs:element name="Role" type="xs:string" minOccurs="0">
<xs:annotation>
<xs:documentation>This field describes the role played by this contributor.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Name" type="xs:string" minOccurs="0">
<xs:annotation>
<xs:documentation>This field contains the name of this contributor.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Email" type="xs:string" minOccurs="0">
<xs:annotation>
<xs:documentation>This field contains the email of this contributor.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Phone" type="xs:string" minOccurs="0">
<xs:annotation>
<xs:documentation>This field contains a telephone number of this contributor.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Organization" type="xs:string" minOccurs="0">
<xs:annotation>
<xs:documentation>This field contains the organization name of this contributor.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Date" type="cyboxCommon:DateRangeType" minOccurs="0">
<xs:annotation>
<xs:documentation>This field contains a description (bounding) of the timing of this contributor's involvement.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Contribution_Location" type="xs:string" minOccurs="0">
<xs:annotation>
<xs:documentation>This field contains information describing the location at which the contributory activity occured.</xs:documentation>
</xs:annotation>
</xs:element>
</xs:sequence>
</xs:complexType>
<xs:complexType name="DateRangeType">
<xs:annotation>
<xs:documentation>The DateRangeType specifies a range of dates.</xs:documentation>
</xs:annotation>
<xs:sequence>
<xs:element name="Start_Date" type="cyboxCommon:DateWithPrecisionType" minOccurs="0">
<xs:annotation>
<xs:documentation>This field contains the start date for this contributor's involvement. In order to avoid ambiguity, it is strongly suggest that all timestamps in this field include a specification of the timezone if it is known.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="End_Date" type="cyboxCommon:DateWithPrecisionType" minOccurs="0">
<xs:annotation>
<xs:documentation>This field contains the end date for this contributor's involvement. In order to avoid ambiguity, it is strongly suggest that all timestamps in this field include a specification of the timezone if it is known.</xs:documentation>
</xs:annotation>
</xs:element>
</xs:sequence>
</xs:complexType>
<xs:complexType name="PersonnelType">
<xs:annotation>
<xs:documentation>The PersonnelType is an abstracted data type to standardize the description of sets of personnel.</xs:documentation>
</xs:annotation>
<xs:sequence>
<xs:element name="Contributor" type="cyboxCommon:ContributorType" maxOccurs="unbounded">
<xs:annotation>
<xs:documentation>This field contains information describing the identify, resources and timing of involvement for a single contributor.</xs:documentation>
</xs:annotation>
</xs:element>
</xs:sequence>
</xs:complexType>
<xs:complexType name="TimeType">
<xs:annotation>
<xs:documentation>The TimeType specifies various time properties for this construct.</xs:documentation>
</xs:annotation>
<xs:sequence>
<xs:element name="Start_Time" type="cyboxCommon:DateTimeWithPrecisionType" minOccurs="0">
<xs:annotation>
<xs:documentation>The Start_Time field is optional and describes the starting time for this construct. In order to avoid ambiguity, it is strongly suggest that all timestamps in this field include a specification of the timezone if it is known.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="End_Time" type="cyboxCommon:DateTimeWithPrecisionType" minOccurs="0">
<xs:annotation>
<xs:documentation>The End_Time field is optional and describes the ending time for this construct. In order to avoid ambiguity, it is strongly suggest that all timestamps in this field include a specification of the timezone if it is known.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Produced_Time" type="cyboxCommon:DateTimeWithPrecisionType" minOccurs="0">
<xs:annotation>
<xs:documentation>The Produced_Time field is optional and describes the time that this construct was produced. In order to avoid ambiguity, it is strongly suggest that all timestamps in this field include a specification of the timezone if it is known.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Received_Time" type="cyboxCommon:DateTimeWithPrecisionType" minOccurs="0">
<xs:annotation>
<xs:documentation>The Received_Time field is optional and describes the time that this construct was received. In order to avoid ambiguity, it is strongly suggest that all timestamps in this field include a specification of the timezone if it is known.</xs:documentation>
</xs:annotation>
</xs:element>
</xs:sequence>
</xs:complexType>
<xs:complexType name="ToolSpecificDataType" abstract="true">
<xs:annotation>
<xs:documentation>The ToolSpecificDataType is an Abstract type placeholder within the CybOX schema enabling the inclusion of metadata for a specific type of tool through the use of a custom type defined as an extension of this base Abstract type.</xs:documentation>
</xs:annotation>
</xs:complexType>
<xs:complexType name="ToolsInformationType">
<xs:annotation>
<xs:documentation>The ToolsInformationType represents a description of a set of automated tools.</xs:documentation>
</xs:annotation>
<xs:sequence>
<xs:element name="Tool" type="cyboxCommon:ToolInformationType" maxOccurs="unbounded">
<xs:annotation>
<xs:documentation>The Tool field is optional and enables description of a single tool utilized for this cyber observation source.</xs:documentation>
</xs:annotation>
</xs:element>
</xs:sequence>
</xs:complexType>
<xs:complexType name="ToolInformationType">
<xs:annotation>
<xs:documentation>The ToolInformationType is intended to characterize the properties of a hardware or software tool, including those related to instances of its use.</xs:documentation>
</xs:annotation>
<xs:sequence>
<xs:element name="Name" type="xs:string" minOccurs="0">
<xs:annotation>
<xs:documentation>This field contains the name of the tool leveraged.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Type" type="cyboxCommon:ControlledVocabularyStringType" minOccurs="0" maxOccurs="unbounded">
<xs:annotation>
<xs:documentation>This field contains the type of the tool leveraged.</xs:documentation>
<xs:documentation>This field is implemented through the xsi:type controlled vocabulary extension mechanism. No default vocabulary type has been defined for CybOX 2.0. Users may either define their own vocabulary using the type extension mechanism (by specifying a vocabulary name and/or reference using the vocab_name and vocab_reference attributes, respectively) or simply use this as a free string field. Additionally, locations where the ToolInformationType is used may define default vocabularies for this field.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Description" type="cyboxCommon:StructuredTextType" minOccurs="0">
<xs:annotation>
<xs:documentation>This field contains general descriptive information for this tool.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="References" type="cyboxCommon:ToolReferencesType" minOccurs="0">
<xs:annotation>
<xs:documentation>This field contains references to instances or additional information for this tool.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Vendor" type="xs:string" minOccurs="0">
<xs:annotation>
<xs:documentation>This field contains information identifying the vendor organization for this tool.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Version" type="xs:string" minOccurs="0">
<xs:annotation>
<xs:documentation>This field contains an appropriate version descriptor of this tool.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Service_Pack" type="xs:string" minOccurs="0">
<xs:annotation>
<xs:documentation>This field contains an appropriate service pack descriptor for this tool.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Tool_Specific_Data" type="cyboxCommon:ToolSpecificDataType" minOccurs="0">
<xs:annotation>
<xs:documentation>This is an abstract type provided to a flexible mechanism for enabling tool-specific data to be included.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Tool_Hashes" type="cyboxCommon:HashListType" minOccurs="0">
<xs:annotation>
<xs:documentation>This field contains a hash value computed on the tool file content in order to verify its integrity.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Tool_Configuration" type="cyboxCommon:ToolConfigurationType" minOccurs="0">
<xs:annotation>
<xs:documentation>This field contains information describing the configuration and usage of the tool.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Execution_Environment" type="cyboxCommon:ExecutionEnvironmentType" minOccurs="0">
<xs:annotation>
<xs:documentation>This field contains information describing the execution environment of the tool.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Errors" type="cyboxCommon:ErrorsType" minOccurs="0">
<xs:annotation>
<xs:documentation>This field captures any errors generated during the run of the tool.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Metadata" type="cyboxCommon:MetadataType" minOccurs="0" maxOccurs="unbounded">
<xs:annotation>
<xs:documentation>This field captures other relevant metadata including tool-specific fields.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Compensation_Model" type="cyboxCommon:CompensationModelType" minOccurs="0">
<xs:annotation>
<xs:documentation>This field contains the name of the compensation model used for the tool.</xs:documentation>
</xs:annotation>
</xs:element>
</xs:sequence>
<xs:attribute name="id" type="xs:QName">
<xs:annotation>
<xs:documentation>The id field specifies a unique ID for this Tool.</xs:documentation>
</xs:annotation>
</xs:attribute>
<xs:attribute name="idref" type="xs:QName">
<xs:annotation>
<xs:documentation>The idref field specifies reference to a unique ID for this Tool.</xs:documentation>
<xs:documentation>When idref is specified, the id attribute must not be specified, and any instance of this type should not hold content unless an extension of the type allows it.</xs:documentation>
</xs:annotation>
</xs:attribute>
</xs:complexType>
<xs:complexType name="CompensationModelType">
<xs:annotation>
<xs:documentation>The CompensationModelType characterizes the compensation model for a tool.</xs:documentation>
</xs:annotation>
<xs:simpleContent>
<xs:restriction base="cyboxCommon:BaseObjectPropertyType">
<xs:simpleType>
<xs:union memberTypes="cyboxCommon:CompensationModelEnum xs:string"/>
</xs:simpleType>
<xs:attribute name="datatype" type="cyboxCommon:DatatypeEnum" fixed="string">
<xs:annotation>
<xs:documentation>This attribute is optional and specifies the expected type for the value of the specified property.</xs:documentation>
</xs:annotation>
</xs:attribute>
</xs:restriction>
</xs:simpleContent>
</xs:complexType>
<xs:simpleType name="CompensationModelEnum">
<xs:annotation>
<xs:documentation>The CompensationModelEnum is a (non-exhaustive) enumeration of compensation models for tools.</xs:documentation>
</xs:annotation>
<xs:restriction base="xs:string">
<xs:enumeration value="Freeware">
<xs:annotation>
<xs:documentation>Specifies that the tool is available for use at no monetary cost as the compensation model.</xs:documentation>
</xs:annotation>
</xs:enumeration>
<xs:enumeration value="Shareware">
<xs:annotation>
<xs:documentation>Specifies that the tool is proprietary and offers a limited use license as the compensation model.</xs:documentation>
</xs:annotation>
</xs:enumeration>
<xs:enumeration value="Commercial">
<xs:annotation>
<xs:documentation>Specifies that the tool is produced for sale or serves commercial purposes as the compensation model.</xs:documentation>
</xs:annotation>
</xs:enumeration>
<xs:enumeration value="Adware">
<xs:annotation>
<xs:documentation>Specifies that the tool uses automatically rendered advertisements as the compensation model.</xs:documentation>
</xs:annotation>
</xs:enumeration>
</xs:restriction>
</xs:simpleType>
<xs:complexType name="ToolReferencesType">
<xs:annotation>
<xs:documentation>Used to indicate one or more references to tool instances and information.</xs:documentation>
</xs:annotation>
<xs:sequence>
<xs:element name="Reference" type="cyboxCommon:ToolReferenceType" maxOccurs="unbounded">
<xs:annotation>
<xs:documentation>Contains one reference to information or instances of a given tool.</xs:documentation>
</xs:annotation>
</xs:element>
</xs:sequence>
</xs:complexType>
<xs:complexType name="ToolReferenceType">
<xs:annotation>
<xs:documentation>Contains one reference to information or instances of a given tool.</xs:documentation>
</xs:annotation>
<xs:simpleContent>
<xs:extension base="xs:anyURI">
<xs:attribute name="reference_type" type="cyboxCommon:ToolReferenceTypeEnum">
<xs:annotation>
<xs:documentation>Indicates the nature of the referenced material (documentation, source, executable, etc.).</xs:documentation>
</xs:annotation>
</xs:attribute>
</xs:extension>
</xs:simpleContent>
</xs:complexType>
<xs:simpleType name="ToolReferenceTypeEnum">
<xs:annotation>
<xs:documentation>The nature of referenced material regarding a tool.</xs:documentation>
</xs:annotation>
<xs:restriction base="xs:string">
<xs:enumeration value="Documentation">
<xs:annotation>
<xs:documentation>The reference is to documentation about the identified tool.</xs:documentation>
</xs:annotation>
</xs:enumeration>
<xs:enumeration value="Source">
<xs:annotation>
<xs:documentation>The reference is to source code for the identified tool.</xs:documentation>
</xs:annotation>
</xs:enumeration>
<xs:enumeration value="Download">
<xs:annotation>
<xs:documentation>The reference is to where an executable version of the tool can be downloaded.</xs:documentation>
</xs:annotation>
</xs:enumeration>
<xs:enumeration value="Execute">
<xs:annotation>
<xs:documentation>The reference is to the tool implemented as an online service.</xs:documentation>
</xs:annotation>
</xs:enumeration>
<xs:enumeration value="Other">
<xs:annotation>
<xs:documentation>The reference is to material about the tool not covered by other values in this enumeration.</xs:documentation>
</xs:annotation>
</xs:enumeration>
</xs:restriction>
</xs:simpleType>
<xs:complexType name="ToolConfigurationType">
<xs:annotation>
<xs:documentation>The ToolConfigurationType characterizes the configuration for a tool used as a cyber observation source.</xs:documentation>
</xs:annotation>
<xs:sequence>
<xs:element name="Configuration_Settings" type="cyboxCommon:ConfigurationSettingsType" minOccurs="0">
<xs:annotation>
<xs:documentation>This field describes the configuration settings of this tool instance.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Dependencies" type="cyboxCommon:DependenciesType" minOccurs="0">
<xs:annotation>
<xs:documentation>This field contains information describing the relevant dependencies for this tool.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Usage_Context_Assumptions" type="cyboxCommon:UsageContextAssumptionsType" minOccurs="0">
<xs:annotation>
<xs:documentation>This field contains descriptions of the various relevant usage context assumptions for this tool .</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Internationalization_Settings" type="cyboxCommon:InternationalizationSettingsType" minOccurs="0">
<xs:annotation>
<xs:documentation>This field contains information describing relevant internationalization setting for this tool .</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Build_Information" type="cyboxCommon:BuildInformationType" minOccurs="0">
<xs:annotation>
<xs:documentation>This field contains information describing how this tool was built.</xs:documentation>
</xs:annotation>
</xs:element>
</xs:sequence>
</xs:complexType>
<xs:complexType name="ConfigurationSettingsType">
<xs:annotation>
<xs:documentation>The ConfigurationSettingsType is a modularized data type used to provide a consistent approach to describing configuration settings for a tool, application or other cyber object.</xs:documentation>
</xs:annotation>
<xs:sequence minOccurs="0">
<xs:element name="Configuration_Setting" type="cyboxCommon:ConfigurationSettingType" maxOccurs="unbounded">
<xs:annotation>
<xs:documentation>This field contains a single configuration setting instance.</xs:documentation>
</xs:annotation>
</xs:element>
</xs:sequence>
</xs:complexType>
<xs:complexType name="ConfigurationSettingType">
<xs:annotation>
<xs:documentation>The ConfigurationSettingType is a modularized data type used to provide a consistent approach to describing a particular configuration setting for a tool, application or other cyber object.</xs:documentation>
</xs:annotation>
<xs:sequence>
<xs:element name="Item_Name" type="xs:string">
<xs:annotation>
<xs:documentation>This field contains the name of the configuration item referenced by this configuration setting instance.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Item_Value" type="xs:string">
<xs:annotation>
<xs:documentation>This field contains the value of this configuration setting instance.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Item_Type" type="xs:string" minOccurs="0">
<xs:annotation>
<xs:documentation>This field contains the type of the configuration item referenced in this configuration setting instance.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Item_Description" type="xs:string" minOccurs="0">
<xs:annotation>
<xs:documentation>This field contains a description of the configuration item referenced in this configuration setting instance.</xs:documentation>
</xs:annotation>
</xs:element>
</xs:sequence>
</xs:complexType>
<xs:complexType name="DependenciesType">
<xs:annotation>
<xs:documentation>The DependenciesType contains information describing a set of dependencies for this tool.</xs:documentation>
</xs:annotation>
<xs:sequence>
<xs:element name="Dependency" type="cyboxCommon:DependencyType" maxOccurs="unbounded">
<xs:annotation>
<xs:documentation>This field contains information describing a single dependency for this tool.</xs:documentation>
</xs:annotation>
</xs:element>
</xs:sequence>
</xs:complexType>
<xs:complexType name="DependencyType">
<xs:annotation>
<xs:documentation>The DependencyType contains information describing a single dependency for this tool.</xs:documentation>
</xs:annotation>
<xs:sequence>
<xs:element name="Dependency_Type" type="xs:string" minOccurs="0">
<xs:annotation>
<xs:documentation>This field describes the type of this dependency instance.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Dependency_Description" type="cyboxCommon:StructuredTextType">
<xs:annotation>
<xs:documentation>This field contains a description of this dependency instance.</xs:documentation>
</xs:annotation>
</xs:element>
</xs:sequence>
</xs:complexType>
<xs:complexType name="UsageContextAssumptionsType">
<xs:annotation>
<xs:documentation>The UsageContextAssumptionsType contains descriptions of the various relevant usage context assumptions for this tool.</xs:documentation>
</xs:annotation>
<xs:sequence>
<xs:element name="Usage_Context_Assumption" type="cyboxCommon:StructuredTextType" maxOccurs="unbounded">
<xs:annotation>
<xs:documentation>This field contains a single usage context assumption for this tool.</xs:documentation>
</xs:annotation>
</xs:element>
</xs:sequence>
</xs:complexType>
<xs:complexType name="InternationalizationSettingsType">
<xs:annotation>
<xs:documentation>The InternationalizationSettingsType contains information describing relevant internationalization setting for this tool.</xs:documentation>
</xs:annotation>
<xs:sequence>
<xs:element name="Internal_Strings" type="cyboxCommon:InternalStringsType" maxOccurs="unbounded">
<xs:annotation>
<xs:documentation>This field contains a single internal string instance for this internationalization setting instance.</xs:documentation>
</xs:annotation>
</xs:element>
</xs:sequence>
</xs:complexType>
<xs:complexType name="InternalStringsType">
<xs:annotation>
<xs:documentation>The InternalStringsType contains a single internal string instance for this internationalization setting instance.</xs:documentation>
</xs:annotation>
<xs:sequence>
<xs:element name="Key" type="xs:string">
<xs:annotation>
<xs:documentation>This field contains the actual key of this internal string instance.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Content" type="xs:string">
<xs:annotation>
<xs:documentation>This field contains the actual content of this internal string instance.</xs:documentation>
</xs:annotation>
</xs:element>
</xs:sequence>
</xs:complexType>
<xs:complexType name="BuildInformationType">
<xs:annotation>
<xs:documentation>The BuildInformationType contains information describing how this tool was built.</xs:documentation>
</xs:annotation>
<xs:sequence>
<xs:element name="Build_ID" type="xs:string" minOccurs="0">
<xs:annotation>
<xs:documentation>This field contains an externally defined unique identifier of this build of this application instance.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Build_Project" type="xs:string" minOccurs="0">
<xs:annotation>
<xs:documentation>This field contains the project name of this build of this application instance.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Build_Utility" type="cyboxCommon:BuildUtilityType" minOccurs="0">
<xs:annotation>
<xs:documentation>This field contains information identifying the utility used to build this application.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Build_Version" type="xs:string" minOccurs="0">
<xs:annotation>
<xs:documentation>This field contains the appropriate version descriptor of this build of this application instance.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Build_Label" type="xs:string" minOccurs="0">
<xs:annotation>
<xs:documentation>This field contains any relevant label for this build of this application instance.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Compilers" type="cyboxCommon:CompilersType" minOccurs="0">
<xs:annotation>
<xs:documentation>This field describes the compilers utilized during this build of this application.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Compilation_Date" type="cyboxCommon:DateTimeWithPrecisionType" minOccurs="0">
<xs:annotation>
<xs:documentation>This field identifies the compilation date for the build of the tool. In order to avoid ambiguity, it is strongly suggest that all timestamps in this field include a specification of the timezone if it is known.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Build_Configuration" type="cyboxCommon:BuildConfigurationType" minOccurs="0">
<xs:annotation>
<xs:documentation>This field describes how the build utility was configured for this build of this application.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Build_Script" type="xs:string" minOccurs="0">
<xs:annotation>
<xs:documentation>This field contains the actual build script for this build of this application instance.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Libraries" type="cyboxCommon:LibrariesType" minOccurs="0">
<xs:annotation>
<xs:documentation>This field identifies the libraries incorporated into the build of the tool.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Build_Output_Log" type="xs:string" minOccurs="0">
<xs:annotation>
<xs:documentation>This field contains a capture of the output log of the build process.</xs:documentation>
</xs:annotation>
</xs:element>
</xs:sequence>
</xs:complexType>
<xs:complexType name="BuildUtilityType">
<xs:annotation>
<xs:documentation>The BuildUtilityType contains information identifying the utility used to build this application.</xs:documentation>
</xs:annotation>
<xs:sequence>
<xs:element name="Build_Utility_Name" type="xs:string">
<xs:annotation>
<xs:documentation>This field contains the informally defined name of the utility used to build this application instance.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Build_Utility_Platform_Specification" type="cyboxCommon:PlatformSpecificationType">
<xs:annotation>
<xs:documentation>This field identifies the build utility used to build this application.</xs:documentation>
</xs:annotation>
</xs:element>
</xs:sequence>
</xs:complexType>
<xs:complexType name="CompilersType">
<xs:annotation>
<xs:documentation>The CompilersType describes the compilers utilized during this build of this application.</xs:documentation>
</xs:annotation>
<xs:sequence>
<xs:element name="Compiler" type="cyboxCommon:CompilerType" maxOccurs="unbounded">
<xs:annotation>
<xs:documentation>This field describes a single compiler utilized during this build of this application.</xs:documentation>
</xs:annotation>
</xs:element>
</xs:sequence>
</xs:complexType>
<xs:complexType name="CompilerType">
<xs:annotation>
<xs:documentation>The CompilerType describes a single compiler utilized during this build of this application.</xs:documentation>
</xs:annotation>
<xs:sequence>
<xs:element name="Compiler_Informal_Description" type="cyboxCommon:CompilerInformalDescriptionType" minOccurs="0">
<xs:annotation>
<xs:documentation>This field contains the informal description of this compiler instance.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Compiler_Platform_Specification" type="cyboxCommon:PlatformSpecificationType" minOccurs="0">
<xs:annotation>
<xs:documentation>This field identifies this compiler instance.</xs:documentation>
</xs:annotation>
</xs:element>
</xs:sequence>
</xs:complexType>
<xs:complexType name="CompilerInformalDescriptionType">
<xs:annotation>
<xs:documentation>The CompilerInformalDescriptionType contains the informal description of this compiler instance.</xs:documentation>
</xs:annotation>
<xs:sequence>
<xs:element name="Compiler_Name" type="xs:string">
<xs:annotation>
<xs:documentation>This field contains the name of the compiler.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Compiler_Version" type="xs:string" minOccurs="0">
<xs:annotation>
<xs:documentation>This field contains the version of the compiler.</xs:documentation>
</xs:annotation>
</xs:element>
</xs:sequence>
</xs:complexType>
<xs:complexType name="BuildConfigurationType">
<xs:annotation>
<xs:documentation>The BuildConfigurationType describes how the build utility was configured for this build of this application.</xs:documentation>
</xs:annotation>
<xs:sequence>
<xs:element name="Configuration_Setting_Description" type="xs:string" minOccurs="0">
<xs:annotation>
<xs:documentation>This field contains the description of the configuration settings for this build of this application instance.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Configuration_Settings" type="cyboxCommon:ConfigurationSettingsType">
<xs:annotation>
<xs:documentation>This field contains the configuration settings for this build of this application instance.</xs:documentation>
</xs:annotation>
</xs:element>
</xs:sequence>
</xs:complexType>
<xs:complexType name="LibrariesType">
<xs:annotation>
<xs:documentation>The LibrariesType identifies the libraries incorporated into the build of the tool.</xs:documentation>
</xs:annotation>
<xs:sequence>
<xs:element name="Library" type="cyboxCommon:LibraryType" minOccurs="0">
<xs:annotation>
<xs:documentation>This field identifies a library incorporated into the build of the tool.</xs:documentation>
</xs:annotation>
</xs:element>
</xs:sequence>
</xs:complexType>
<xs:complexType name="LibraryType">
<xs:annotation>
<xs:documentation>The LibraryType identifies a single library incorporated into the build of the tool.</xs:documentation>
</xs:annotation>
<xs:attribute name="name" type="xs:string">
<xs:annotation>
<xs:documentation>This field identifies the name of the library.</xs:documentation>
</xs:annotation>
</xs:attribute>
<xs:attribute name="version" type="xs:string">
<xs:annotation>
<xs:documentation>This field identifies the version of the library.</xs:documentation>
</xs:annotation>
</xs:attribute>
</xs:complexType>
<xs:complexType name="ExecutionEnvironmentType">
<xs:annotation>
<xs:documentation>The ExecutionEnvironmentType contains information describing the execution environment of the tool.</xs:documentation>
</xs:annotation>
<xs:sequence>
<xs:element name="System" type="cyboxCommon:ObjectPropertiesType" minOccurs="0">
<xs:annotation>
<xs:documentation>This field contains information describing the system on which the tool was executed. System should be of type SystemObj:SystemObjectType.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="User_Account_Info" type="cyboxCommon:ObjectPropertiesType" minOccurs="0">
<xs:annotation>
<xs:documentation>This field contains information describing the user account that executed the tool. User_Account_Info should be of type UserAccountObj:UserAccountObjectType.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Command_Line" type="xs:string" minOccurs="0">
<xs:annotation>
<xs:documentation>This field specifies the command line string used to run the tool.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Start_Time" type="cyboxCommon:DateTimeWithPrecisionType" minOccurs="0">
<xs:annotation>
<xs:documentation>This field specifies when the tool was run. In order to avoid ambiguity, it is strongly suggest that all timestamps in this field include a specification of the timezone if it is known.</xs:documentation>
</xs:annotation>
</xs:element>
</xs:sequence>
</xs:complexType>
<xs:complexType name="ErrorsType">
<xs:annotation>
<xs:documentation>The ErrorsType captures any errors generated during the run of the tool.</xs:documentation>
</xs:annotation>
<xs:sequence>
<xs:element name="Error" type="cyboxCommon:ErrorType" maxOccurs="unbounded">
<xs:annotation>
<xs:documentation>This field captures a single type of error generated during the run of the tool.</xs:documentation>
</xs:annotation>
</xs:element>
</xs:sequence>
</xs:complexType>
<xs:complexType name="ErrorType">
<xs:annotation>
<xs:documentation>The ErrorType captures a single error generated during the run of the tool.</xs:documentation>
</xs:annotation>
<xs:sequence>
<xs:element name="Error_Type" type="xs:string">
<xs:annotation>
<xs:documentation>This field specifies the type for this tool run error.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Error_Count" type="xs:integer" minOccurs="0">
<xs:annotation>
<xs:documentation>This field specifies the count of instances for this error in the tool run.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Error_Instances" type="cyboxCommon:ErrorInstancesType" minOccurs="0">
<xs:annotation>
<xs:documentation>This field captures the actual error output for each instance of this type of error.</xs:documentation>
</xs:annotation>
</xs:element>
</xs:sequence>
</xs:complexType>
<xs:complexType name="ErrorInstancesType">
<xs:annotation>
<xs:documentation>The ErrorInstancesType captures the actual error output for each instance of this type of error.</xs:documentation>
</xs:annotation>
<xs:sequence>
<xs:element name="Error_Instance" type="xs:string" maxOccurs="unbounded">
<xs:annotation>
<xs:documentation>This field captures the actual error output for a single instance of this type of error.</xs:documentation>
</xs:annotation>
</xs:element>
</xs:sequence>
</xs:complexType>
<xs:complexType name="ObjectPropertiesType" abstract="true">
<xs:annotation>
<xs:documentation>The ObjectPropertiesType is an Abstract type placeholder within the CybOX schema enabling the inclusion of contextually varying object properties descriptions. This Abstract type is leveraged as the extension base for all predefined CybOX object properties schemas. Through this extension mechanism any object instance data based on an object properties schema extended from ObjectPropertiesType (e.g. File_Object, Address_Object, etc.) can be directly integrated into any instance document where a field is defined as ObjectPropertiesType. For flexibility and extensibility purposes any user of CybOX can specify their own externally defined object properties schemas (outside of or derived from the set of predefined objects) extended from ObjectPropertiesType and utilize them as part of their CybOX content.</xs:documentation>
</xs:annotation>
<xs:sequence>
<xs:element name="Custom_Properties" type="cyboxCommon:CustomPropertiesType" minOccurs="0">
<xs:annotation>
<xs:documentation>The Custom_Properties construct is optional and enables the specification of a set of custom Object Properties that may not be defined in existing Properties schemas.</xs:documentation>
</xs:annotation>
</xs:element>
</xs:sequence>
<xs:attribute name="object_reference" type="xs:QName">
<xs:annotation>
<xs:documentation>The object_reference field specifies a unique ID reference to an Object defined elsewhere. This construct allows for the re-use of the defined Properties of one Object within another, without the need to embed the full Object in the location from which it is being referenced. Thus, this ID reference is intended to resolve to the Properties of the Object that it points to.</xs:documentation>
</xs:annotation>
</xs:attribute>
</xs:complexType>
<xs:complexType name="CustomPropertiesType">
<xs:annotation>
<xs:documentation>The CustomPropertiesType enables the specification of a set of custom Object Properties that may not be defined in existing Properties schemas.</xs:documentation>
</xs:annotation>
<xs:sequence>
<xs:element name="Property" type="cyboxCommon:PropertyType" maxOccurs="unbounded">
<xs:annotation>
<xs:documentation>The Property construct enables the specification of a single Object Property.</xs:documentation>
</xs:annotation>
</xs:element>
</xs:sequence>
</xs:complexType>
<xs:complexType name="PropertyType">
<xs:annotation>
<xs:documentation>The PropertyType is a type representing the specification of a single Object Property.</xs:documentation>
</xs:annotation>
<xs:simpleContent>
<xs:extension base="cyboxCommon:BaseObjectPropertyType">
<xs:attribute name="name" type="xs:string">
<xs:annotation>
<xs:documentation>The name field specifies a name for this property.</xs:documentation>
</xs:annotation>
</xs:attribute>
<xs:attribute name="description" type="xs:string">
<xs:annotation>
<xs:documentation>A description of what this property represents.</xs:documentation>
</xs:annotation>
</xs:attribute>
</xs:extension>
</xs:simpleContent>
</xs:complexType>
<xs:complexType name="BaseObjectPropertyType" abstract="true">
<xs:annotation>
<xs:documentation>The BaseObjectPropertyType is a type representing a common typing foundation for the specification of a single Object Property.</xs:documentation>
<xs:documentation>Properties that use this type can express multiple values by providing them using a delimiter-separated list. The default delimiter is '##comma##' (no quotes) but can be overridden through use of the delimiter field. Note that whitespace is preserved and so, when specifying a list of values, do not include a space following the delimiter in a list unless the first character of the next list item should, in fact, be a space.</xs:documentation>
</xs:annotation>
<xs:simpleContent>
<xs:extension base="xs:anySimpleType">
<xs:attributeGroup ref="cyboxCommon:BaseObjectPropertyGroup"/>
<xs:attributeGroup ref="cyboxCommon:PatternFieldGroup"/>
</xs:extension>
</xs:simpleContent>
</xs:complexType>
<xs:complexType name="IntegerObjectPropertyType">
<xs:annotation>
<xs:documentation>The IntegerObjectPropertyType is a type (extended from BaseObjectPropertyType) representing the specification of a single Object property whose core value is of type Int. This type will be assigned to any property of a CybOX object that should contain content of type Integer and enables the use of relevant metadata for the property.</xs:documentation>
<xs:documentation>Properties that use this type can express multiple values by providing them using a delimiter-separated list. The default delimiter is '##comma##' (no quotes) but can be overridden through use of the delimiter field. Note that whitespace is preserved and so, when specifying a list of values, do not include a space following the delimiter in a list unless the first character of the next list item should, in fact, be a space.</xs:documentation>
</xs:annotation>
<xs:simpleContent>
<xs:restriction base="cyboxCommon:BaseObjectPropertyType">
<xs:simpleType>
<xs:union memberTypes="xs:string"/>
</xs:simpleType>
<xs:attribute name="datatype" type="cyboxCommon:DatatypeEnum" default="int">
<xs:annotation>
<xs:documentation>This attribute is optional and specifies the type of the value of the specified property. If a type different than the default is used, it MUST be specified here.</xs:documentation>
</xs:annotation>
</xs:attribute>
</xs:restriction>
</xs:simpleContent>
</xs:complexType>
<xs:complexType name="StringObjectPropertyType">
<xs:annotation>
<xs:documentation>The StringObjectPropertyType is a type (extended from BaseObjectPropertyType) representing the specification of a single Object property whose core value is of type String. This type will be assigned to any property of a CybOX object that should contain content of type String and enables the use of relevant metadata for the property.</xs:documentation>
<xs:documentation>Properties that use this type can express multiple values by providing them using a delimiter-separated list. The default delimiter is '##comma##' (no quotes) but can be overridden through use of the delimiter field. Note that whitespace is preserved and so, when specifying a list of values, do not include a space following the delimiter in a list unless the first character of the next list item should, in fact, be a space.</xs:documentation>
</xs:annotation>
<xs:simpleContent>
<xs:restriction base="cyboxCommon:BaseObjectPropertyType">
<xs:simpleType>
<xs:union memberTypes="xs:string"/>
</xs:simpleType>
<xs:attribute name="datatype" type="cyboxCommon:DatatypeEnum" default="string">
<xs:annotation>
<xs:documentation>This attribute is optional and specifies the type of the value of the specified property. If a type different than the default is used, it MUST be specified here.</xs:documentation>
</xs:annotation>
</xs:attribute>
</xs:restriction>
</xs:simpleContent>
</xs:complexType>
<xs:complexType name="NameObjectPropertyType">
<xs:annotation>
<xs:documentation>The NameObjectPropertyType is a type (extended from BaseObjectPropertyType) representing the specification of a single Object property whose core value is of type Name. This type will be assigned to any property of a CybOX object that should contain content of type Name and enables the use of relevant metadata for the property.</xs:documentation>
<xs:documentation>Properties that use this type can express multiple values by providing them using a delimiter-separated list. The default delimiter is '##comma##' (no quotes) but can be overridden through use of the delimiter field. Note that whitespace is preserved and so, when specifying a list of values, do not include a space following the delimiter in a list unless the first character of the next list item should, in fact, be a space.</xs:documentation>
</xs:annotation>
<xs:simpleContent>
<xs:restriction base="cyboxCommon:BaseObjectPropertyType">
<xs:simpleType>
<xs:union memberTypes="xs:string"/>
</xs:simpleType>
<xs:attribute name="datatype" type="cyboxCommon:DatatypeEnum" default="name">
<xs:annotation>
<xs:documentation>This attribute is optional and specifies the type of the value of the specified property. If a type different than the default is used, it MUST be specified here.</xs:documentation>
</xs:annotation>
</xs:attribute>
</xs:restriction>
</xs:simpleContent>
</xs:complexType>
<xs:complexType name="DateObjectPropertyRestrictionType">
<xs:annotation>
<xs:documentation>This type is an intermediate type to allow for the addition of the precision attribute to DateObjectPropertyType. It should not be used directly.</xs:documentation>
</xs:annotation>
<xs:simpleContent>
<xs:restriction base="cyboxCommon:BaseObjectPropertyType">
<xs:simpleType>
<xs:union memberTypes="xs:string"/>
</xs:simpleType>
<xs:attribute name="datatype" type="cyboxCommon:DatatypeEnum" default="date">
<xs:annotation>
<xs:documentation>This attribute is optional and specifies the type of the value of the specified property. If a type different than the default is used, it MUST be specified here.</xs:documentation>
</xs:annotation>
</xs:attribute>
</xs:restriction>
</xs:simpleContent>
</xs:complexType>
<xs:complexType name="DateObjectPropertyType">
<xs:annotation>
<xs:documentation>The DateObjectPropertyType is a type (extended from BaseObjectPropertyType) representing the specification of a single Object property whose core value is of type Date. This type will be assigned to any property of a CybOX object that should contain content of type Date and enables the use of relevant metadata for the property. In order to avoid ambiguity, it is strongly suggested that any date representation in this field include a timezone if it is known. As with the rest of the field, this should be formatted per the xs:date specification.</xs:documentation>
<xs:documentation>Properties that use this type can express multiple values by providing them using a delimiter-separated list. The default delimiter is '##comma##' (no quotes) but can be overridden through use of the delimiter field. Note that whitespace is preserved and so, when specifying a list of values, do not include a space following the delimiter in a list unless the first character of the next list item should, in fact, be a space.</xs:documentation>
<xs:documentation>For fields of this type using CybOX patterning, it is strongly suggested that the condition (pattern type) is limited to one of Equals, DoesNotEqual, GreaterThan, LessThan, GreaterThanOrEqual, LessThanOrEqual, ExclusiveBetween, or InclusiveBetween. The use of other conditions may lead to ambiguity or unexpected results. When evaluating data against a pattern, the evaluator should take into account the precision of the field (as given by the precision attribute) and any timezone information that is available to perform a data-aware comparison. The usage of simple string comparisons is discouraged due to ambiguities in how precision and timezone information is processed.</xs:documentation>
</xs:annotation>
<xs:simpleContent>
<xs:extension base="cyboxCommon:DateObjectPropertyRestrictionType">
<xs:attribute name="precision" type="cyboxCommon:DatePrecisionEnum" default="day">
<xs:annotation>
<xs:documentation>The precision of the associated time. If omitted, the default is "day", meaning the full field value. Digits in the date that are required by the xs:date datatype but are beyond the specified precision should be zeroed out.</xs:documentation>
<xs:documentation>When used in conjunction with CybOX patterning, the pattern should only be evaluated against the target up to the given precision.</xs:documentation>
</xs:annotation>
</xs:attribute>
</xs:extension>
</xs:simpleContent>
</xs:complexType>
<xs:complexType name="DateTimeObjectPropertyRestrictionType" abstract="true">
<xs:annotation>
<xs:documentation>This type is an intermediate type to allow for the addition of the precision attribute to DateTimeObjectPropertyType. It should not be used directly.</xs:documentation>
</xs:annotation>
<xs:simpleContent>
<xs:restriction base="cyboxCommon:BaseObjectPropertyType">
<xs:simpleType>
<xs:union memberTypes="xs:string"/>
</xs:simpleType>
<xs:attribute name="datatype" type="cyboxCommon:DatatypeEnum" default="dateTime">
<xs:annotation>