stix_schema_spy 1.0

data/config/1.1/stix/cybox/objects/URI_Object.xsd

@@ -0,0 +1,62 @@
+<?xml version='1.0' encoding='UTF-8'?>
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:URIObj="http://cybox.mitre.org/objects#URIObject-2" xmlns:cyboxCommon="http://cybox.mitre.org/common-2" targetNamespace="http://cybox.mitre.org/objects#URIObject-2" elementFormDefault="qualified" attributeFormDefault="unqualified" version="2.1">
+	<xs:annotation>
+		<xs:documentation>This schema was originally developed by The MITRE Corporation. The CybOX XML Schema implementation is maintained by The MITRE Corporation and developed by the open CybOX Community. For more information, including how to get involved in the effort and how to submit change requests, please visit the CybOX website at http://cybox.mitre.org.</xs:documentation>
+		<xs:appinfo>
+			<schema>URI_Object</schema>
+			<version>2.1</version>
+			<date>01/22/2014</date>			
+			<short_description>The following specifies the fields and types that compose this defined CybOX Object type. Each defined object is an extension of the abstract ObjectPropertiesType, defined in CybOX Common. For more information on this extension mechanism, please see the CybOX Specification. This document is intended for developers and assumes some familiarity with XML. </short_description>
+			<terms_of_use>Copyright (c) 2012-2014, The MITRE Corporation. All rights reserved. The contents of this file are subject to the terms of the CybOX License located at http://cybox.mitre.org/about/termsofuse.html. See the CybOX License for the specific language governing permissions and limitations for use of this schema. When distributing copies of the CybOX Schema, this license header must be included.</terms_of_use>
+		</xs:appinfo>
+	</xs:annotation>
+	<xs:import namespace="http://cybox.mitre.org/common-2" schemaLocation="../cybox_common.xsd"/>
+	<xs:element name="URI" type="URIObj:URIObjectType">
+		<xs:annotation>
+			<xs:documentation>The URI object is intended to characterize Uniform Resource Identifiers (URI's).</xs:documentation>
+		</xs:annotation>
+	</xs:element>
+	<xs:complexType name="URIObjectType">
+		<xs:annotation>
+			<xs:documentation>The URIObjectType type is intended to characterize Uniform Resource Identifiers (URI's).</xs:documentation>
+		</xs:annotation>
+		<xs:complexContent>
+			<xs:extension base="cyboxCommon:ObjectPropertiesType">
+				<xs:sequence>
+					<xs:element name="Value" type="cyboxCommon:AnyURIObjectPropertyType" minOccurs="0">
+						<xs:annotation>
+							<xs:documentation>The Value field specifies the value of the URI.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+				</xs:sequence>
+				<xs:attribute name="type" type="URIObj:URITypeEnum">
+					<xs:annotation>
+						<xs:documentation>The type field specifies the type of URI that is being defined.</xs:documentation>
+					</xs:annotation>
+				</xs:attribute>
+			</xs:extension>
+		</xs:complexContent>
+	</xs:complexType>
+	<xs:simpleType name="URITypeEnum">
+		<xs:annotation>
+			<xs:documentation>The URITypeEnum is an enumeration of types of URIs.</xs:documentation>
+		</xs:annotation>
+		<xs:restriction base="xs:string">
+			<xs:enumeration value="URL">
+				<xs:annotation>
+					<xs:documentation>Specifies a URL type of URI.</xs:documentation>
+				</xs:annotation>
+			</xs:enumeration>
+			<xs:enumeration value="General URN">
+				<xs:annotation>
+					<xs:documentation>Specifies a General URN type of URI.</xs:documentation>
+				</xs:annotation>
+			</xs:enumeration>
+			<xs:enumeration value="Domain Name">
+				<xs:annotation>
+					<xs:documentation>Specifies a Domain Name type of URI.</xs:documentation>
+				</xs:annotation>
+			</xs:enumeration>
+		</xs:restriction>
+	</xs:simpleType>
+</xs:schema>

data/config/1.1/stix/cybox/objects/URL_History_Object.xsd

@@ -0,0 +1,104 @@
+<?xml version='1.0' encoding='UTF-8'?>
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:HostnameObj="http://cybox.mitre.org/objects#HostnameObject-1" xmlns:URIObj="http://cybox.mitre.org/objects#URIObject-2" xmlns:URLHistoryObj="http://cybox.mitre.org/objects#URLHistoryObject-1" xmlns:cyboxCommon="http://cybox.mitre.org/common-2" targetNamespace="http://cybox.mitre.org/objects#URLHistoryObject-1" elementFormDefault="qualified" attributeFormDefault="unqualified" version="1.0">
+	<xs:annotation>
+		<xs:documentation>This schema was originally developed by The MITRE Corporation. The CybOX XML Schema implementation is maintained by The MITRE Corporation and developed by the open CybOX Community. For more information, including how to get involved in the effort and how to submit change requests, please visit the CybOX website at http://cybox.mitre.org. </xs:documentation>
+		<xs:appinfo>
+			<schema>URL_History_Object</schema>
+			<version>1.0</version>
+			<date>01/22/2014</date>
+			<short_description>The following specifies the fields and types that compose this defined CybOX Object type. Each defined object is an extension of the abstract ObjectPropertiesType, defined in CybOX Common. For more information on this extension mechanism, please see the CybOX Specification. This document is intended for developers and assumes some familiarity with XML. </short_description>
+			<terms_of_use>Copyright (c) 2012-2014, The MITRE Corporation. All rights reserved. The contents of this file are subject to the terms of the CybOX License located at http://cybox.mitre.org/about/termsofuse.html. See the CybOX License for the specific language governing permissions and limitations for use of this schema. When distributing copies of the CybOX Schema, this license header must be included.</terms_of_use>
+		</xs:appinfo>
+	</xs:annotation>
+	<xs:import namespace="http://cybox.mitre.org/common-2" schemaLocation="../cybox_common.xsd"/>
+	<xs:import namespace="http://cybox.mitre.org/objects#URIObject-2" schemaLocation="URI_Object.xsd"/>
+	<xs:import namespace="http://cybox.mitre.org/objects#HostnameObject-1" schemaLocation="Hostname_Object.xsd"/>
+	<xs:element name="URL_History" type="URLHistoryObj:URLHistoryObjectType">
+		<xs:annotation>
+			<xs:documentation>The URL_History object is intended to characterize the stored URL history of a particular web browser.</xs:documentation>
+		</xs:annotation>
+	</xs:element>
+	<xs:complexType name="URLHistoryObjectType" mixed="false">
+		<xs:annotation>
+			<xs:documentation>The URLHistoryObject type is intended to characterize the stored URL history for a particular web browser.</xs:documentation>
+		</xs:annotation>
+		<xs:complexContent>
+			<xs:extension base="cyboxCommon:ObjectPropertiesType">
+				<xs:sequence>
+					<xs:element minOccurs="0" name="Browser_Information" type="cyboxCommon:ToolInformationType">
+						<xs:annotation>
+							<xs:documentation>The Browser_Information field captures information about the particular Web Browser whose URL history is being captured. It uses the ToolInformationType from the imported CybOX Common schema.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element maxOccurs="unbounded" minOccurs="0" name="URL_History_Entry" type="URLHistoryObj:URLHistoryEntryType">
+						<xs:annotation>
+							<xs:documentation>The URL_History_Entry field specifies a single URL history entry stored in the browser's history.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+				</xs:sequence>
+			</xs:extension>
+		</xs:complexContent>
+	</xs:complexType>
+	<xs:complexType name="URLHistoryEntryType">
+		<xs:annotation>
+			<xs:documentation>The URLHistoryEntryType captures the properties of a URL history entry for a particular browser.</xs:documentation>
+		</xs:annotation>
+		<xs:sequence>
+			<xs:element minOccurs="0" name="URL" type="URIObj:URIObjectType">
+				<xs:annotation>
+					<xs:documentation>The URL field specifies the URL that the URL history entry points to. It uses the URIObjectType from the imported CybOX URI Object.</xs:documentation>
+				</xs:annotation>
+			</xs:element>
+			<xs:element minOccurs="0" name="Hostname" type="HostnameObj:HostnameObjectType">
+				<xs:annotation>
+					<xs:documentation>The Hostname field specifies the hostname portion of the URL that the URL history entry points to (captured in the URL field).</xs:documentation>
+				</xs:annotation>
+			</xs:element>
+			<xs:element minOccurs="0" name="Referrer_URL" type="URIObj:URIObjectType">
+				<xs:annotation>
+					<xs:documentation>The Referrer field specifies the origination point (i.e., URL) of the URL captured in the URL history entry, if applicable. It uses the URIObjectType from the imported CybOX URI Object.</xs:documentation>
+				</xs:annotation>
+			</xs:element>
+			<xs:element minOccurs="0" name="Page_Title" type="cyboxCommon:StringObjectPropertyType">
+				<xs:annotation>
+					<xs:documentation>The Page_Title field specifies the title of the web page referred to by the URL captured in the URL field.</xs:documentation>
+				</xs:annotation>
+			</xs:element>
+			<xs:element minOccurs="0" name="User_Profile_Name" type="cyboxCommon:StringObjectPropertyType">
+				<xs:annotation>
+					<xs:documentation>The User_Profile_Name captures the name of the web browser user profile for which the URL history entry was created. </xs:documentation>
+				</xs:annotation>
+			</xs:element>
+			<xs:element minOccurs="0" name="Visit_Count" type="cyboxCommon:NonNegativeIntegerObjectPropertyType">
+				<xs:annotation>
+					<xs:documentation>The Visit_Count field specifies the number of times the URL referred to by the URL field has been visited.</xs:documentation>
+				</xs:annotation>
+			</xs:element>
+			<xs:element minOccurs="0" name="Manually_Entered_Count" type="cyboxCommon:NonNegativeIntegerObjectPropertyType">
+				<xs:annotation>
+					<xs:documentation>The Manually_Entered_Count field specifies the number of times the URL referred to by the URL field was manually entered into the browser's address field by the user. This field is only applicable for URL history entries generated by Google's Chrome browser.</xs:documentation>
+				</xs:annotation>
+			</xs:element>
+			<xs:element minOccurs="0" name="Modification_DateTime" type="cyboxCommon:DateTimeObjectPropertyType">
+				<xs:annotation>
+					<xs:documentation>The Modification_DateTime field specifies the date/time that the URL history entry was last modified.</xs:documentation>
+				</xs:annotation>
+			</xs:element>
+			<xs:element minOccurs="0" name="Expiration_DateTime" type="cyboxCommon:DateTimeObjectPropertyType">
+				<xs:annotation>
+					<xs:documentation>The Expiration_DateTime field specifies the date/time that the URL history entry expires.</xs:documentation>
+				</xs:annotation>
+			</xs:element>
+			<xs:element minOccurs="0" name="First_Visit_DateTime" type="cyboxCommon:DateTimeObjectPropertyType">
+				<xs:annotation>
+					<xs:documentation>The First_Visit_DateTime field specifies the date/time that the URL referred to by the URL field was first visited.</xs:documentation>
+				</xs:annotation>
+			</xs:element>
+			<xs:element minOccurs="0" name="Last_Visit_DateTime" type="cyboxCommon:DateTimeObjectPropertyType">
+				<xs:annotation>
+					<xs:documentation>The Last_Visit_DateTime field specifies the date/time that the URL referred to by the URL field was last visited.</xs:documentation>
+				</xs:annotation>
+			</xs:element>
+		</xs:sequence>
+	</xs:complexType>
+</xs:schema>

data/config/1.1/stix/cybox/objects/Unix_File_Object.xsd

@@ -0,0 +1,164 @@
+<?xml version='1.0' encoding='UTF-8'?>
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:UnixFileObj="http://cybox.mitre.org/objects#UnixFileObject-2" xmlns:cyboxCommon="http://cybox.mitre.org/common-2" xmlns:FileObj="http://cybox.mitre.org/objects#FileObject-2" targetNamespace="http://cybox.mitre.org/objects#UnixFileObject-2" elementFormDefault="qualified" attributeFormDefault="unqualified" version="2.1">
+	<xs:annotation>
+		<xs:documentation>This schema was originally developed by The MITRE Corporation. The CybOX XML Schema implementation is maintained by The MITRE Corporation and developed by the open CybOX Community. For more information, including how to get involved in the effort and how to submit change requests, please visit the CybOX website at http://cybox.mitre.org.</xs:documentation>
+		<xs:appinfo>
+			<schema>Unix_File_Object</schema>
+			<version>2.1</version>
+			<date>01/22/2014</date>			
+			<short_description>The following specifies the fields and types that compose this defined CybOX Object type. Each defined object is an extension of the abstract ObjectPropertiesType, defined in CybOX Common. For more information on this extension mechanism, please see the CybOX Specification. This document is intended for developers and assumes some familiarity with XML. </short_description>
+			<terms_of_use>Copyright (c) 2012-2014, The MITRE Corporation. All rights reserved. The contents of this file are subject to the terms of the CybOX License located at http://cybox.mitre.org/about/termsofuse.html. See the CybOX License for the specific language governing permissions and limitations for use of this schema. When distributing copies of the CybOX Schema, this license header must be included.</terms_of_use>
+		</xs:appinfo>
+	</xs:annotation>
+	<xs:import namespace="http://cybox.mitre.org/common-2" schemaLocation="../cybox_common.xsd"/>
+	<xs:import namespace="http://cybox.mitre.org/objects#FileObject-2" schemaLocation="File_Object.xsd"/>
+	<xs:element name="Unix_File" type="UnixFileObj:UnixFileObjectType">
+		<xs:annotation>
+			<xs:documentation>The Unix_File object is intended to characterize Unix files.</xs:documentation>
+		</xs:annotation>
+	</xs:element>
+	<xs:complexType name="UnixFileObjectType" mixed="false">
+		<xs:annotation>
+			<xs:documentation>The UnixFileObjectType type is intended to characterize Unix files.</xs:documentation>
+		</xs:annotation>
+		<xs:complexContent>
+			<xs:extension base="FileObj:FileObjectType">
+				<xs:sequence minOccurs="1">
+					<xs:element name="Group_Owner" type="cyboxCommon:StringObjectPropertyType" minOccurs="0">
+						<xs:annotation>
+							<xs:documentation>The Group_Owner field specifies the name of the group which owns the file.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element name="INode" type="cyboxCommon:UnsignedLongObjectPropertyType" minOccurs="0" maxOccurs="1">
+						<xs:annotation>
+							<xs:documentation>The INode field specifies the inode, or index node, value of the file.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element name="Type" type="UnixFileObj:UnixFileType" minOccurs="0">
+						<xs:annotation>
+							<xs:documentation>Specifies file type using the UnixFileTypeEnum enumeration.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+				</xs:sequence>
+			</xs:extension>
+		</xs:complexContent>
+	</xs:complexType>
+	<xs:complexType name="UnixFilePermissionsType">
+		<xs:annotation>
+			<xs:documentation>The UnixFilePermissionsType type specifies the specific permissions used by the Unix family of operating systems.</xs:documentation>
+		</xs:annotation>
+		<xs:complexContent>
+			<xs:extension base="FileObj:FilePermissionsType">
+				<xs:attribute name="suid" type="xs:boolean">
+					<xs:annotation>
+						<xs:documentation>The suid field specifies whether or not the file may be exectued with the privileges of the file's owner.</xs:documentation>
+					</xs:annotation>
+				</xs:attribute>
+				<xs:attribute name="sgid" type="xs:boolean">
+					<xs:annotation>
+						<xs:documentation>The sgid field specifies whether or not the file may be executed with the privileges of the file's group owner.</xs:documentation>
+					</xs:annotation>
+				</xs:attribute>
+				<xs:attribute name="uread" type="xs:boolean">
+					<xs:annotation>
+						<xs:documentation>The uread field specifies whether or not the owner of the file can read its contents.</xs:documentation>
+					</xs:annotation>
+				</xs:attribute>
+				<xs:attribute name="uwrite" type="xs:boolean">
+					<xs:annotation>
+						<xs:documentation>The uwrite field specifies whether or not the owner of the file can write to it.</xs:documentation>
+					</xs:annotation>
+				</xs:attribute>
+				<xs:attribute name="uexec" type="xs:boolean">
+					<xs:annotation>
+						<xs:documentation>The uexec field specifies whether or not the owner of the file can execute it.</xs:documentation>
+					</xs:annotation>
+				</xs:attribute>
+				<xs:attribute name="gread" type="xs:boolean">
+					<xs:annotation>
+						<xs:documentation>The gread field specifies whether or not the group owner of the file can read its contents.</xs:documentation>
+					</xs:annotation>
+				</xs:attribute>
+				<xs:attribute name="gwrite" type="xs:boolean">
+					<xs:annotation>
+						<xs:documentation>The gwrite field specifies whether or not the group owner of the file can write to it.</xs:documentation>
+					</xs:annotation>
+				</xs:attribute>
+				<xs:attribute name="gexec" type="xs:boolean">
+					<xs:annotation>
+						<xs:documentation>The gexec field specifies whether or not the group owner of the file can execute it.</xs:documentation>
+					</xs:annotation>
+				</xs:attribute>
+				<xs:attribute name="oread" type="xs:boolean">
+					<xs:annotation>
+						<xs:documentation>The oread field specifies whether or not all other users can read the contents of the file.</xs:documentation>
+					</xs:annotation>
+				</xs:attribute>
+				<xs:attribute name="owrite" type="xs:boolean">
+					<xs:annotation>
+						<xs:documentation>The owrite field specifies whether or not all other users can write to the file.</xs:documentation>
+					</xs:annotation>
+				</xs:attribute>
+				<xs:attribute name="oexec" type="xs:boolean">
+					<xs:annotation>
+						<xs:documentation>The oexec field specifies whether or not all other users can execute the file.</xs:documentation>
+					</xs:annotation>
+				</xs:attribute>
+			</xs:extension>
+		</xs:complexContent>
+	</xs:complexType>
+	<xs:complexType name="UnixFileType">
+		<xs:annotation>
+			<xs:documentation>UnixFileType specifies Unix file types, via a union of the UnixFileTypeEnum type and the atomic xs:string type. Its base type is the CybOX Core BaseObjectPropertyType, for permitting complex (i.e. regular-expression based) specifications.</xs:documentation>
+		</xs:annotation>
+		<xs:simpleContent>
+			<xs:restriction base="cyboxCommon:BaseObjectPropertyType">
+				<xs:simpleType>
+					<xs:union memberTypes="UnixFileObj:UnixFileTypeEnum xs:string"/>
+				</xs:simpleType>
+				<xs:attribute name="datatype" type="cyboxCommon:DatatypeEnum" fixed="string">
+					<xs:annotation>
+						<xs:documentation>This attribute is optional and specifies the expected type for the value of the specified property.</xs:documentation>
+					</xs:annotation>
+				</xs:attribute>
+			</xs:restriction>
+		</xs:simpleContent>
+	</xs:complexType>
+	<xs:simpleType name="UnixFileTypeEnum">
+		<xs:annotation>
+			<xs:documentation>The UnixFileTypeEnum type is an enumeration of file types used by the Unix family of operating systems. These file types can be determined via the output of the ls and stat commands.</xs:documentation>
+		</xs:annotation>
+		<xs:restriction base="xs:string">
+			<xs:enumeration value="regularfile">
+				<xs:annotation>
+					<xs:documentation>Specifies a regular file, denoted in UNIX by the first dash (-) in a file with permissions -rw-r--r--.</xs:documentation>
+				</xs:annotation>
+			</xs:enumeration>
+			<xs:enumeration value="directory">
+				<xs:annotation>
+					<xs:documentation>Specifies a directory, denoted in UNIX by the d in a file with permissions drw-r--r--.</xs:documentation>
+				</xs:annotation>
+			</xs:enumeration>
+			<xs:enumeration value="socket">
+				<xs:annotation>
+					<xs:documentation>Specifies a socket, denoted in UNIX by the s in a file with permissions srw-r--r--.</xs:documentation>
+				</xs:annotation>
+			</xs:enumeration>
+			<xs:enumeration value="symboliclink">
+				<xs:annotation>
+					<xs:documentation>Specifies a symbolic link, denoted in UNIX by the l in a file with permissions lrw-r--r--.</xs:documentation>
+				</xs:annotation>
+			</xs:enumeration>
+			<xs:enumeration value="blockspecialfile">
+				<xs:annotation>
+					<xs:documentation>Specifies a block device, such as /dev/sda, denoted in UNIX by the b in a file with permissions brw-rw----.</xs:documentation>
+				</xs:annotation>
+			</xs:enumeration>
+			<xs:enumeration value="characterspecialfile">
+				<xs:annotation>
+					<xs:documentation>Specifies a character device, such as /dev/null, denoted in UNIX by the c in a file with permissions crw-------.</xs:documentation>
+				</xs:annotation>
+			</xs:enumeration>
+		</xs:restriction>
+	</xs:simpleType>
+</xs:schema>

data/config/1.1/stix/cybox/objects/Unix_Network_Route_Entry_Object.xsd

@@ -0,0 +1,56 @@
+<?xml version='1.0' encoding='UTF-8'?>
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:cyboxCommon="http://cybox.mitre.org/common-2" xmlns:NetworkRouteEntryObj="http://cybox.mitre.org/objects#NetworkRouteEntryObject-2" xmlns:UnixNetworkRouteEntryObj="http://cybox.mitre.org/objects#UnixNetworkRouteEntryObject-2" targetNamespace="http://cybox.mitre.org/objects#UnixNetworkRouteEntryObject-2" elementFormDefault="qualified" attributeFormDefault="unqualified" version="2.1">
+	<xs:annotation>
+		<xs:documentation>This schema was originally developed by The MITRE Corporation. The CybOX XML Schema implementation is maintained by The MITRE Corporation and developed by the open CybOX Community. For more information, including how to get involved in the effort and how to submit change requests, please visit the CybOX website at http://cybox.mitre.org.</xs:documentation>
+		<xs:appinfo>
+			<schema>Unix_Network_Route_Entry_Object</schema>
+			<version>2.1</version>
+			<date>01/22/2014</date>			
+			<short_description>The following specifies the fields and types that compose this defined CybOX Object type. Each defined object is an extension of the abstract ObjectPropertiesType, defined in CybOX Common. For more information on this extension mechanism, please see the CybOX Specification. This document is intended for developers and assumes some familiarity with XML. </short_description>
+			<terms_of_use>Copyright (c) 2012-2014, The MITRE Corporation. All rights reserved. The contents of this file are subject to the terms of the CybOX License located at http://cybox.mitre.org/about/termsofuse.html. See the CybOX License for the specific language governing permissions and limitations for use of this schema. When distributing copies of the CybOX Schema, this license header must be included.</terms_of_use>
+		</xs:appinfo>
+	</xs:annotation>
+	<xs:import namespace="http://cybox.mitre.org/common-2" schemaLocation="../cybox_common.xsd"/>
+	<xs:import namespace="http://cybox.mitre.org/objects#NetworkRouteEntryObject-2" schemaLocation="Network_Route_Entry_Object.xsd"/>
+	<xs:element name="Unix_Network_Route_Entry" type="UnixNetworkRouteEntryObj:UnixNetworkRouteEntryObjectType">
+		<xs:annotation>
+			<xs:documentation>The Unix_Network_Route_Entry object is intended to characterize entries in the network routing table of a Unix system.</xs:documentation>
+		</xs:annotation>
+	</xs:element>
+	<xs:complexType name="UnixNetworkRouteEntryObjectType" mixed="false">
+		<xs:annotation>
+			<xs:documentation>The UnixNetworkRouteEntryObjectType type is intended to characterize entries in the network routing table of a Unix system.</xs:documentation>
+		</xs:annotation>
+		<xs:complexContent>
+			<xs:extension base="NetworkRouteEntryObj:NetworkRouteEntryObjectType">
+				<xs:sequence>
+					<xs:element name="Flags" type="cyboxCommon:StringObjectPropertyType" minOccurs="0">
+						<xs:annotation>
+							<xs:documentation>The Flags field specifies any flags used for the network route, such as G (use gateway).</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element name="MSS" type="cyboxCommon:UnsignedIntegerObjectPropertyType" minOccurs="0">
+						<xs:annotation>
+							<xs:documentation>The MSS field specifies the maximum segment size for TCP connections over this network route, in bytes.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element name="Ref" type="cyboxCommon:UnsignedLongObjectPropertyType" minOccurs="0">
+						<xs:annotation>
+							<xs:documentation>The Ref field specifies the number of references to this network route.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element name="Use" type="cyboxCommon:UnsignedLongObjectPropertyType" minOccurs="0">
+						<xs:annotation>
+							<xs:documentation>The Use field specifies the number of lookups that were performed for this network route.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element name="Window" type="cyboxCommon:UnsignedIntegerObjectPropertyType" minOccurs="0">
+						<xs:annotation>
+							<xs:documentation>The Window field specifies the default window size for TCP connections over this network route, in bytes.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+				</xs:sequence>
+			</xs:extension>
+		</xs:complexContent>
+	</xs:complexType>
+</xs:schema>

data/config/1.1/stix/cybox/objects/Unix_Pipe_Object.xsd

@@ -0,0 +1,36 @@
+<?xml version='1.0' encoding='UTF-8'?>
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:UnixPipeObj="http://cybox.mitre.org/objects#UnixPipeObject-2" xmlns:cyboxCommon="http://cybox.mitre.org/common-2" xmlns:PipeObj="http://cybox.mitre.org/objects#PipeObject-2" targetNamespace="http://cybox.mitre.org/objects#UnixPipeObject-2" elementFormDefault="qualified" attributeFormDefault="unqualified" version="2.1">
+	<xs:annotation>
+		<xs:documentation>This schema was originally developed by The MITRE Corporation. The CybOX XML Schema implementation is maintained by The MITRE Corporation and developed by the open CybOX Community. For more information, including how to get involved in the effort and how to submit change requests, please visit the CybOX website at http://cybox.mitre.org.</xs:documentation>
+		<xs:appinfo>
+			<schema>Unix_Pipe_Object</schema>
+			<version>2.1</version>
+			<date>01/22/2014</date>			
+			<short_description>The following specifies the fields and types that compose this defined CybOX Object type. Each defined object is an extension of the abstract ObjectPropertiesType, defined in CybOX Common. For more information on this extension mechanism, please see the CybOX Specification. This document is intended for developers and assumes some familiarity with XML. </short_description>
+			<terms_of_use>Copyright (c) 2012-2014, The MITRE Corporation. All rights reserved. The contents of this file are subject to the terms of the CybOX License located at http://cybox.mitre.org/about/termsofuse.html. See the CybOX License for the specific language governing permissions and limitations for use of this schema. When distributing copies of the CybOX Schema, this license header must be included.</terms_of_use>
+		</xs:appinfo>
+	</xs:annotation>
+	<xs:import namespace="http://cybox.mitre.org/objects#PipeObject-2" schemaLocation="Pipe_Object.xsd"/>
+	<xs:import namespace="http://cybox.mitre.org/common-2" schemaLocation="../cybox_common.xsd"/>
+	<xs:element name="Unix_Pipe" type="UnixPipeObj:UnixPipeObjectType">
+		<xs:annotation>
+			<xs:documentation>The Unix_Pipe object is intended to characterize Unix pipes.</xs:documentation>
+		</xs:annotation>
+	</xs:element>
+	<xs:complexType name="UnixPipeObjectType" mixed="false">
+		<xs:annotation>
+			<xs:documentation>The UnixPipeObjectType type is intended to characterize Unix pipes.</xs:documentation>
+		</xs:annotation>
+		<xs:complexContent>
+			<xs:extension base="PipeObj:PipeObjectType">
+				<xs:sequence>
+					<xs:element name="Permission_Mode" type="cyboxCommon:StringObjectPropertyType" minOccurs="0">
+						<xs:annotation>
+							<xs:documentation>The Permission_Mode field specifies the Unix permission mode for the pipe.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+				</xs:sequence>
+			</xs:extension>
+		</xs:complexContent>
+	</xs:complexType>
+</xs:schema>

data/config/1.1/stix/cybox/objects/Unix_Process_Object.xsd

@@ -0,0 +1,143 @@
+<?xml version='1.0' encoding='UTF-8'?>
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:UnixProcessObj="http://cybox.mitre.org/objects#UnixProcessObject-2" xmlns:ProcessObj="http://cybox.mitre.org/objects#ProcessObject-2" xmlns:cyboxCommon="http://cybox.mitre.org/common-2" targetNamespace="http://cybox.mitre.org/objects#UnixProcessObject-2" elementFormDefault="qualified" attributeFormDefault="unqualified" version="2.1">
+	<xs:annotation>
+		<xs:documentation>This schema was originally developed by The MITRE Corporation. The CybOX XML Schema implementation is maintained by The MITRE Corporation and developed by the open CybOX Community. For more information, including how to get involved in the effort and how to submit change requests, please visit the CybOX website at http://cybox.mitre.org.</xs:documentation>
+		<xs:appinfo>
+			<schema>Unix_Process_Object</schema>
+			<version>2.1</version>
+			<date>01/22/2014</date>			
+			<short_description>The following specifies the fields and types that compose this defined CybOX Object type. Each defined object is an extension of the abstract ObjectPropertiesType, defined in CybOX Common. For more information on this extension mechanism, please see the CybOX Specification. This document is intended for developers and assumes some familiarity with XML. </short_description>
+			<terms_of_use>Copyright (c) 2012-2014, The MITRE Corporation. All rights reserved. The contents of this file are subject to the terms of the CybOX License located at http://cybox.mitre.org/about/termsofuse.html. See the CybOX License for the specific language governing permissions and limitations for use of this schema. When distributing copies of the CybOX Schema, this license header must be included.</terms_of_use>
+		</xs:appinfo>
+	</xs:annotation>
+	<xs:import namespace="http://cybox.mitre.org/objects#ProcessObject-2" schemaLocation="Process_Object.xsd"/>
+	<xs:import namespace="http://cybox.mitre.org/common-2" schemaLocation="../cybox_common.xsd"/>
+	<xs:element name="Unix_Process" type="UnixProcessObj:UnixProcessObjectType">
+		<xs:annotation>
+			<xs:documentation>The Unix_Process object is intended to characterize Unix processes.</xs:documentation>
+		</xs:annotation>
+	</xs:element>
+	<xs:complexType name="UnixProcessObjectType" mixed="false">
+		<xs:annotation>
+			<xs:documentation>The UnixProcessObjectType type is intended to characterize Unix processes.</xs:documentation>
+		</xs:annotation>
+		<xs:complexContent>
+			<xs:extension base="ProcessObj:ProcessObjectType">
+				<xs:sequence>
+					<xs:element name="Open_File_Descriptor_List" type="UnixProcessObj:FileDescriptorListType" minOccurs="0">
+						<xs:annotation>
+							<xs:documentation>The Open_File_Descriptor_List field specifies a listing of the current file descriptors used by the Unix process.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element name="Priority" type="cyboxCommon:NonNegativeIntegerObjectPropertyType" minOccurs="0">
+						<xs:annotation>
+							<xs:documentation>The Priority field specifies the priority of the Unix process.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element name="RUID" type="cyboxCommon:NonNegativeIntegerObjectPropertyType" minOccurs="0">
+						<xs:annotation>
+							<xs:documentation>The RUID field specifies the real user ID, which represents the Unix user who created the process.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element name="Session_ID" type="cyboxCommon:NonNegativeIntegerObjectPropertyType" minOccurs="0">
+						<xs:annotation>
+							<xs:documentation>The Session_ID field specifies the Unix Session ID of the process.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+				</xs:sequence>
+			</xs:extension>
+		</xs:complexContent>
+	</xs:complexType>
+	<xs:complexType name="UnixProcessStatusType">
+		<xs:annotation>
+			<xs:documentation>The UnixProcessStatusType field specifies the current status of the running Unix process. It extends the abstract ProcessStatusType from the CybOX Process Object.</xs:documentation>
+		</xs:annotation>
+		<xs:complexContent>
+			<xs:extension base="ProcessObj:ProcessStatusType">
+				<xs:sequence>
+					<xs:element name="Current_Status" type="UnixProcessObj:UnixProcessStateType" minOccurs="0">
+						<xs:annotation>
+							<xs:documentation>Specifies the current state of the Unix process, using the UnixProcessStatusEnum enumeration.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element name="Timestamp" type="cyboxCommon:DateTimeObjectPropertyType" minOccurs="0">
+						<xs:annotation>
+							<xs:documentation>Specifies when the process started up.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+				</xs:sequence>
+			</xs:extension>
+		</xs:complexContent>
+	</xs:complexType>
+	<xs:complexType name="FileDescriptorListType">
+		<xs:annotation>
+			<xs:documentation>The FileDescriptorListType type specifies a list of Unix file descriptors.</xs:documentation>
+		</xs:annotation>
+		<xs:sequence>
+			<xs:element name="File_Descriptor" type="cyboxCommon:UnsignedIntegerObjectPropertyType" maxOccurs="unbounded">
+				<xs:annotation>
+					<xs:documentation>The File_Descriptor field specifies a particular Unix File Descriptor.</xs:documentation>
+				</xs:annotation>
+			</xs:element>
+		</xs:sequence>
+	</xs:complexType>
+	<xs:complexType name="UnixProcessStateType">
+		<xs:annotation>
+			<xs:documentation>UnixProcessStateType specifies Unix process states, via a union of the UnixProcessStateEnum type and the atomic xs:string type. Its base type is the CybOX Core BaseObjectPropertyType, for permitting complex (i.e. regular-expression based) specifications. See "man ps" for more information.</xs:documentation>
+		</xs:annotation>
+		<xs:simpleContent>
+			<xs:restriction base="cyboxCommon:BaseObjectPropertyType">
+				<xs:simpleType>
+					<xs:union memberTypes="UnixProcessObj:UnixProcessStateEnum xs:string"/>
+				</xs:simpleType>
+				<xs:attribute name="datatype" type="cyboxCommon:DatatypeEnum" fixed="string">
+					<xs:annotation>
+						<xs:documentation>This attribute is optional and specifies the expected type for the value of the specified property.</xs:documentation>
+					</xs:annotation>
+				</xs:attribute>
+			</xs:restriction>
+		</xs:simpleContent>
+	</xs:complexType>
+	<xs:simpleType name="UnixProcessStateEnum">
+		<xs:annotation>
+			<xs:documentation>The UnixProcessStateEnum is an enumeration of Unix process states.</xs:documentation>
+		</xs:annotation>
+		<xs:restriction base="xs:string">
+			<xs:enumeration value="Running">
+				<xs:annotation>
+					<xs:documentation>Specifies a running process or runnable [on run queue] (R).</xs:documentation>
+				</xs:annotation>
+			</xs:enumeration>
+			<xs:enumeration value="UninterruptibleSleep">
+				<xs:annotation>
+					<xs:documentation>Specifies a process in uninterruptable sleep [usually IO] (D).</xs:documentation>
+				</xs:annotation>
+			</xs:enumeration>
+			<xs:enumeration value="InterruptibleSleep">
+				<xs:annotation>
+					<xs:documentation>Specifies a process in interruptable sleep [waiting for an event to complete] (S).</xs:documentation>
+				</xs:annotation>
+			</xs:enumeration>
+			<xs:enumeration value="Stopped">
+				<xs:annotation>
+					<xs:documentation>Specifies a stopped process, either by a job control signal or because it is being traced (T).</xs:documentation>
+				</xs:annotation>
+			</xs:enumeration>
+			<xs:enumeration value="Paging">
+				<xs:annotation>
+					<xs:documentation>Specifies a paging process [not valid since the 2.6.xx kernel] (W).</xs:documentation>
+				</xs:annotation>
+			</xs:enumeration>
+			<xs:enumeration value="Dead">
+				<xs:annotation>
+					<xs:documentation>Specifies a dead process [should never be seen] (X).</xs:documentation>
+				</xs:annotation>
+			</xs:enumeration>
+			<xs:enumeration value="Zombie">
+				<xs:annotation>
+					<xs:documentation>Specifies a defunct, zombie process [terminated but not reaped by its parent] (Z).</xs:documentation>
+				</xs:annotation>
+			</xs:enumeration>
+		</xs:restriction>
+	</xs:simpleType>
+</xs:schema>