stix_schema_spy 1.0

data/config/1.1/uber_schema.xsd

@@ -0,0 +1,149 @@
+<?xml version="1.0"?>
+<schema xmlns="http://www.w3.org/2001/XMLSchema">
+  <import namespace="http://stix.mitre.org/Campaign-1" schemaLocation="stix/campaign.xsd"/>
+  <import namespace="http://stix.mitre.org/CourseOfAction-1" schemaLocation="stix/course_of_action.xsd"/>
+  <import namespace="http://data-marking.mitre.org/Marking-1" schemaLocation="stix/data_marking.xsd"/>
+  <import namespace="http://stix.mitre.org/ExploitTarget-1" schemaLocation="stix/exploit_target.xsd"/>
+  <import namespace="http://stix.mitre.org/Incident-1" schemaLocation="stix/incident.xsd"/>
+  <import namespace="http://stix.mitre.org/Indicator-2" schemaLocation="stix/indicator.xsd"/>
+  <import namespace="http://stix.mitre.org/common-1" schemaLocation="stix/stix_common.xsd"/>
+  <import namespace="http://stix.mitre.org/stix-1" schemaLocation="stix/stix_core.xsd"/>
+  <import namespace="http://stix.mitre.org/default_vocabularies-1" schemaLocation="stix/stix_default_vocabularies.xsd"/>
+  <import namespace="http://stix.mitre.org/ThreatActor-1" schemaLocation="stix/threat_actor.xsd"/>
+  <import namespace="http://stix.mitre.org/TTP-1" schemaLocation="stix/ttp.xsd"/>
+  <import namespace="http://cybox.mitre.org/common-2" schemaLocation="stix/cybox/cybox_common.xsd"/>
+  <import namespace="http://cybox.mitre.org/cybox-2" schemaLocation="stix/cybox/cybox_core.xsd"/>
+  <import namespace="http://cybox.mitre.org/default_vocabularies-2" schemaLocation="stix/cybox/cybox_default_vocabularies.xsd"/>
+  <import namespace="http://cybox.mitre.org/extensions/Address#CIQAddress3.0-1" schemaLocation="stix/cybox/extensions/location/ciq_address_3.0.xsd"/>
+  <import namespace="http://cybox.mitre.org/extensions/platform#CPE2.3-1" schemaLocation="stix/cybox/extensions/platform/cpe2.3.xsd"/>
+  <import namespace="http://cpe.mitre.org/language/2.0" schemaLocation="stix/external/cvrf_1.1/cpe-language_2.2a.xsd"/>
+  <import namespace="http://cpe.mitre.org/naming/2.0" schemaLocation="stix/cybox/external/cpe_2.3/cpe-naming_2.3.xsd"/>
+  <import namespace="http://www.w3.org/XML/1998/namespace" schemaLocation="stix/external/cvrf_1.1/xml.xsd"/>
+  <import namespace="urn:oasis:names:tc:ciq:ct:3" schemaLocation="stix/external/oasis_ciq_3.0/CommonTypes.xsd"/>
+  <import namespace="urn:oasis:names:tc:ciq:xal:3" schemaLocation="stix/external/oasis_ciq_3.0/xAL.xsd"/>
+  <import namespace="http://www.w3.org/1999/xlink" schemaLocation="stix/external/oasis_ciq_3.0/xlink-2003-12-31.xsd"/>
+  <import namespace="urn:oasis:names:tc:ciq:xnal:3" schemaLocation="stix/external/oasis_ciq_3.0/xNAL.xsd"/>
+  <import namespace="urn:oasis:names:tc:ciq:xnl:3" schemaLocation="stix/external/oasis_ciq_3.0/xNL.xsd"/>
+  <import namespace="urn:oasis:names:tc:ciq:xpil:3" schemaLocation="stix/external/oasis_ciq_3.0/xPIL.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#AccountObject-2" schemaLocation="stix/cybox/objects/Account_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#AddressObject-2" schemaLocation="stix/cybox/objects/Address_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#APIObject-2" schemaLocation="stix/cybox/objects/API_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#ArchiveFileObject-1" schemaLocation="stix/cybox/objects/Archive_File_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#ARPCacheObject-1" schemaLocation="stix/cybox/objects/ARP_Cache_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#ArtifactObject-2" schemaLocation="stix/cybox/objects/Artifact_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#ASObject-1" schemaLocation="stix/cybox/objects/AS_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#CodeObject-2" schemaLocation="stix/cybox/objects/Code_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#CustomObject-1" schemaLocation="stix/cybox/objects/Custom_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#DeviceObject-2" schemaLocation="stix/cybox/objects/Device_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#DiskObject-2" schemaLocation="stix/cybox/objects/Disk_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#DiskPartitionObject-2" schemaLocation="stix/cybox/objects/Disk_Partition_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#DNSCacheObject-2" schemaLocation="stix/cybox/objects/DNS_Cache_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#DNSQueryObject-2" schemaLocation="stix/cybox/objects/DNS_Query_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#DNSRecordObject-2" schemaLocation="stix/cybox/objects/DNS_Record_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#DomainNameObject-1" schemaLocation="stix/cybox/objects/Domain_Name_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#EmailMessageObject-2" schemaLocation="stix/cybox/objects/Email_Message_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#FileObject-2" schemaLocation="stix/cybox/objects/File_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#GUIDialogboxObject-2" schemaLocation="stix/cybox/objects/GUI_Dialogbox_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#GUIObject-2" schemaLocation="stix/cybox/objects/GUI_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#GUIWindowObject-2" schemaLocation="stix/cybox/objects/GUI_Window_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#HostnameObject-1" schemaLocation="stix/cybox/objects/Hostname_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#HTTPSessionObject-2" schemaLocation="stix/cybox/objects/HTTP_Session_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#ImageFileObject-1" schemaLocation="stix/cybox/objects/Image_File_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#LibraryObject-2" schemaLocation="stix/cybox/objects/Library_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#LinkObject-1" schemaLocation="stix/cybox/objects/Link_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#LinuxPackageObject-2" schemaLocation="stix/cybox/objects/Linux_Package_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#MemoryObject-2" schemaLocation="stix/cybox/objects/Memory_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#MutexObject-2" schemaLocation="stix/cybox/objects/Mutex_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#NetworkConnectionObject-2" schemaLocation="stix/cybox/objects/Network_Connection_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#NetworkFlowObject-2" schemaLocation="stix/cybox/objects/Network_Flow_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#PacketObject-2" schemaLocation="stix/cybox/objects/Network_Packet_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#NetworkRouteEntryObject-2" schemaLocation="stix/cybox/objects/Network_Route_Entry_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#NetworkRouteObject-2" schemaLocation="stix/cybox/objects/Network_Route_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#NetworkSocketObject-2" schemaLocation="stix/cybox/objects/Network_Socket_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#NetworkSubnetObject-2" schemaLocation="stix/cybox/objects/Network_Subnet_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#PDFFileObject-1" schemaLocation="stix/cybox/objects/PDF_File_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#PipeObject-2" schemaLocation="stix/cybox/objects/Pipe_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#PortObject-2" schemaLocation="stix/cybox/objects/Port_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#ProcessObject-2" schemaLocation="stix/cybox/objects/Process_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#ProductObject-2" schemaLocation="stix/cybox/objects/Product_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#SemaphoreObject-2" schemaLocation="stix/cybox/objects/Semaphore_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#SMSMessageObject-1" schemaLocation="stix/cybox/objects/SMS_Message_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#SocketAddressObject-1" schemaLocation="stix/cybox/objects/Socket_Address_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#SystemObject-2" schemaLocation="stix/cybox/objects/System_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#UnixFileObject-2" schemaLocation="stix/cybox/objects/Unix_File_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#UnixNetworkRouteEntryObject-2" schemaLocation="stix/cybox/objects/Unix_Network_Route_Entry_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#UnixPipeObject-2" schemaLocation="stix/cybox/objects/Unix_Pipe_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#UnixProcessObject-2" schemaLocation="stix/cybox/objects/Unix_Process_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#UnixUserAccountObject-2" schemaLocation="stix/cybox/objects/Unix_User_Account_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#UnixVolumeObject-2" schemaLocation="stix/cybox/objects/Unix_Volume_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#URIObject-2" schemaLocation="stix/cybox/objects/URI_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#URLHistoryObject-1" schemaLocation="stix/cybox/objects/URL_History_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#UserAccountObject-2" schemaLocation="stix/cybox/objects/User_Account_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#UserSessionObject-2" schemaLocation="stix/cybox/objects/User_Session_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#VolumeObject-2" schemaLocation="stix/cybox/objects/Volume_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#WhoisObject-2" schemaLocation="stix/cybox/objects/Whois_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#WinComputerAccountObject-2" schemaLocation="stix/cybox/objects/Win_Computer_Account_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#WinCriticalSectionObject-2" schemaLocation="stix/cybox/objects/Win_Critical_Section_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#WinDriverObject-3" schemaLocation="stix/cybox/objects/Win_Driver_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#WinEventLogObject-2" schemaLocation="stix/cybox/objects/Win_Event_Log_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#WinEventObject-2" schemaLocation="stix/cybox/objects/Win_Event_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#WinExecutableFileObject-2" schemaLocation="stix/cybox/objects/Win_Executable_File_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#WinFilemappingObject-1" schemaLocation="stix/cybox/objects/Win_Filemapping_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#WinFileObject-2" schemaLocation="stix/cybox/objects/Win_File_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#WinHandleObject-2" schemaLocation="stix/cybox/objects/Win_Handle_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#WinHookObject-1" schemaLocation="stix/cybox/objects/Win_Hook_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#WinKernelHookObject-2" schemaLocation="stix/cybox/objects/Win_Kernel_Hook_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#WinKernelObject-2" schemaLocation="stix/cybox/objects/Win_Kernel_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#WinMailslotObject-2" schemaLocation="stix/cybox/objects/Win_Mailslot_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#WinMemoryPageRegionObject-2" schemaLocation="stix/cybox/objects/Win_Memory_Page_Region_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#WinMutexObject-2" schemaLocation="stix/cybox/objects/Win_Mutex_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#WinNetworkRouteEntryObject-2" schemaLocation="stix/cybox/objects/Win_Network_Route_Entry_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#WinNetworkShareObject-2" schemaLocation="stix/cybox/objects/Win_Network_Share_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#WinPipeObject-2" schemaLocation="stix/cybox/objects/Win_Pipe_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#WinPrefetchObject-2" schemaLocation="stix/cybox/objects/Win_Prefetch_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#WinProcessObject-2" schemaLocation="stix/cybox/objects/Win_Process_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#WinRegistryKeyObject-2" schemaLocation="stix/cybox/objects/Win_Registry_Key_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#WinSemaphoreObject-2" schemaLocation="stix/cybox/objects/Win_Semaphore_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#WinServiceObject-2" schemaLocation="stix/cybox/objects/Win_Service_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#WinSystemObject-2" schemaLocation="stix/cybox/objects/Win_System_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#WinSystemRestoreObject-2" schemaLocation="stix/cybox/objects/Win_System_Restore_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#WinTaskObject-2" schemaLocation="stix/cybox/objects/Win_Task_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#WinThreadObject-2" schemaLocation="stix/cybox/objects/Win_Thread_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#WinUserAccountObject-2" schemaLocation="stix/cybox/objects/Win_User_Account_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#WinVolumeObject-2" schemaLocation="stix/cybox/objects/Win_Volume_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#WinWaitableTimerObject-2" schemaLocation="stix/cybox/objects/Win_Waitable_Timer_Object.xsd"/>
+  <import namespace="http://cybox.mitre.org/objects#X509CertificateObject-2" schemaLocation="stix/cybox/objects/X509_Certificate_Object.xsd"/>
+  <import namespace="http://stix.mitre.org/extensions/Address#CIQAddress3.0-1" schemaLocation="stix/extensions/address/ciq_3.0_address.xsd"/>
+  <import namespace="http://stix.mitre.org/extensions/AP#CAPEC2.7-1" schemaLocation="stix/extensions/attack_pattern/capec_2.7_attack_pattern.xsd"/>
+  <import namespace="http://stix.mitre.org/extensions/Identity#CIQIdentity3.0-1" schemaLocation="stix/extensions/identity/ciq_3.0_identity.xsd"/>
+  <import namespace="http://stix.mitre.org/extensions/Malware#MAEC4.1-1" schemaLocation="stix/extensions/malware/maec_4.1_malware.xsd"/>
+  <import namespace="http://data-marking.mitre.org/extensions/MarkingStructure#Simple-1" schemaLocation="stix/extensions/marking/simple_marking.xsd"/>
+  <import namespace="http://data-marking.mitre.org/extensions/MarkingStructure#Terms_Of_Use-1" schemaLocation="stix/extensions/marking/terms_of_use_marking.xsd"/>
+  <import namespace="http://data-marking.mitre.org/extensions/MarkingStructure#TLP-1" schemaLocation="stix/extensions/marking/tlp_marking.xsd"/>
+  <import namespace="http://stix.mitre.org/extensions/StructuredCOA#Generic-1" schemaLocation="stix/extensions/structured_coa/generic_structured_coa.xsd"/>
+  <import namespace="http://stix.mitre.org/extensions/TestMechanism#Generic-1" schemaLocation="stix/extensions/test_mechanism/generic_test_mechanism.xsd"/>
+  <import namespace="http://stix.mitre.org/extensions/TestMechanism#OpenIOC2010-1" schemaLocation="stix/extensions/test_mechanism/open_ioc_2010_test_mechanism.xsd"/>
+  <import namespace="http://stix.mitre.org/extensions/TestMechanism#OVAL5.10-1" schemaLocation="stix/extensions/test_mechanism/oval_5.10_test_mechanism.xsd"/>
+  <import namespace="http://stix.mitre.org/extensions/TestMechanism#Snort-1" schemaLocation="stix/extensions/test_mechanism/snort_test_mechanism.xsd"/>
+  <import namespace="http://stix.mitre.org/extensions/TestMechanism#YARA-1" schemaLocation="stix/extensions/test_mechanism/yara_test_mechanism.xsd"/>
+  <import namespace="http://stix.mitre.org/extensions/Vulnerability#CVRF-1" schemaLocation="stix/extensions/vulnerability/cvrf_1.1_vulnerability.xsd"/>
+  <import namespace="http://capec.mitre.org/capec-2" schemaLocation="stix/external/capec_2.7/ap_schema_v2.7.xsd"/>
+  <import namespace="http://www.icasi.org/CVRF/schema/common/1.1" schemaLocation="stix/external/cvrf_1.1/common.xsd"/>
+  <import namespace="http://www.icasi.org/CVRF/schema/cvrf/1.1" schemaLocation="stix/external/cvrf_1.1/cvrf.xsd"/>
+  <import namespace="http://scap.nist.gov/schema/cvss-v2/1.0" schemaLocation="stix/external/cvrf_1.1/cvss-v2_0.9.xsd"/>
+  <import namespace="http://purl.org/dc/elements/1.1/" schemaLocation="stix/external/cvrf_1.1/dc.xsd"/>
+  <import namespace="http://www.icasi.org/CVRF/schema/prod/1.1" schemaLocation="stix/external/cvrf_1.1/prod.xsd"/>
+  <import namespace="http://scap.nist.gov/schema/scap-core/1.0" schemaLocation="stix/external/cvrf_1.1/scap-core_0.9.xsd"/>
+  <import namespace="http://www.icasi.org/CVRF/schema/vuln/1.1" schemaLocation="stix/external/cvrf_1.1/vuln.xsd"/>
+  <import namespace="http://maec.mitre.org/XMLSchema/maec-bundle-4" schemaLocation="stix/external/maec_4.1/maec_bundle_schema.xsd"/>
+  <import namespace="http://maec.mitre.org/XMLSchema/maec-container-2" schemaLocation="stix/external/maec_4.1/maec_container_schema.xsd"/>
+  <import namespace="http://maec.mitre.org/default_vocabularies-1" schemaLocation="stix/external/maec_4.1/maec_default_vocabularies.xsd"/>
+  <import namespace="http://maec.mitre.org/XMLSchema/maec-package-2" schemaLocation="stix/external/maec_4.1/maec_package_schema.xsd"/>
+  <import namespace="http://xml/metadataSharing.xsd" schemaLocation="stix/external/maec_4.1/metadataSharing.xsd"/>
+  <import namespace="http://schemas.mandiant.com/2010/ioc/TR/" schemaLocation="stix/external/open_ioc_2010/ioc-TR.xsd"/>
+  <import namespace="http://schemas.mandiant.com/2010/ioc" schemaLocation="stix/external/open_ioc_2010/ioc.xsd"/>
+  <import namespace="http://oval.mitre.org/XMLSchema/oval-common-5" schemaLocation="stix/external/oval_5.10/oval-common-schema.xsd"/>
+  <import namespace="http://oval.mitre.org/XMLSchema/oval-definitions-5" schemaLocation="stix/external/oval_5.10/oval-definitions-schema.xsd"/>
+  <import namespace="http://oval.mitre.org/XMLSchema/oval-variables-5" schemaLocation="stix/external/oval_5.10/oval-variables-schema.xsd"/>
+  <import namespace="http://www.w3.org/2000/09/xmldsig#" schemaLocation="stix/external/oval_5.10/xmldsig-core-schema.xsd"/>
+</schema>

data/config/mappings.json

@@ -0,0 +1,30 @@
+{
+  "schemas": {
+    "urn:oasis:names:tc:ciq:ct:3": {
+      "title": "Common Types",
+      "prefix": "ct"
+    },
+    "urn:oasis:names:tc:ciq:xnl:3": {
+      "title": "xNL",
+      "prefix": "n"
+    },
+    "urn:oasis:names:tc:ciq:xal:3": {
+      "title": "xAL",
+      "prefix": "a"
+    },
+    "urn:oasis:names:tc:ciq:xnal:3": {
+      "title": "xNAL",
+      "prefix": "xnal"
+    },
+    "urn:oasis:names:tc:ciq:xpil:3": {
+      "title": "xPIL",
+      "prefix": "xpil"
+    },
+    "xal": {
+      "prefix": "a"
+    },
+    "xnl": {
+      "prefix": "n"
+    }
+  }
+}

data/lib/stix_schema_spy.rb

@@ -0,0 +1,18 @@
+require 'stix_schema_spy/version'
+
+require 'nokogiri'
+
+require 'stix_schema_spy/util/schema_naming'
+
+require 'stix_schema_spy/models/node'
+require 'stix_schema_spy/models/has_children'
+
+require 'stix_schema_spy/models/type'
+require 'stix_schema_spy/models/simple_type'
+
+require 'stix_schema_spy/models/attribute'
+require 'stix_schema_spy/models/complex_type'
+require 'stix_schema_spy/models/element'
+require 'stix_schema_spy/models/external_type'
+require 'stix_schema_spy/models/schema'
+require 'stix_schema_spy/models/special_field'

data/lib/stix_schema_spy/models/attribute.rb

@@ -0,0 +1,20 @@
+# Instance of node for attributes
+
+require_relative 'node'
+
+module StixSchemaSpy
+  class Attribute < StixSchemaSpy::Node
+    def attribute?
+      true
+    end
+
+    # Attribute names have an @ prefixed
+    def name
+      "@#{super}"
+    end
+
+    def use
+      @xml.attributes['use'].try(:value) || "optional"
+    end
+  end
+end

data/lib/stix_schema_spy/models/complex_type.rb

@@ -0,0 +1,50 @@
+# Representation of a ComplexType
+
+module StixSchemaSpy
+  class ComplexType < Type
+
+    include StixSchemaSpy::HasChildren
+
+    def initialize(*args)
+      @attributes = {}
+      @elements = {}
+      @types = {}
+      @special_fields = []
+      super
+    end
+
+    def load!
+      return if @loaded
+      @xml.elements.each {|child| process_field(child) }
+      @loaded = true
+    end
+
+    # Build a new complex type by trying to find special classes and either using those or the generic type
+    def self.build(xml, schema)
+      ComplexType.new(xml, schema)
+    end
+
+    # Returns whether or not this type is a complex type
+    def complex?
+      true
+    end
+
+    # Complex types can't be enumerations?
+    def enumeration?
+      false
+    end
+
+    # Only valid for vocabularies
+
+    # Returns a list of possible values for that vocabulary
+    def vocab_values
+      type = Schema.find(self.schema.prefix).find_type(name.gsub("Vocab", "Enum"))
+
+      if type
+        type.enumeration_values
+      else
+        raise "Unable to find corresponding enumeration for vocabulary"
+      end
+    end
+  end
+end

data/lib/stix_schema_spy/models/element.rb

@@ -0,0 +1,26 @@
+# Representation of an Element (type of Node)
+
+require_relative 'node'
+
+module StixSchemaSpy
+  class Element < StixSchemaSpy::Node
+    def attribute?
+      false
+    end
+
+    def min_occurs
+      @xml.attributes['minOccurs'].try(:value) || "1"
+    end
+
+    def max_occurs
+      case value = @xml.attributes['maxOccurs'].try(:value)
+      when nil
+        "1"
+      when "unbounded"
+        "n"
+      else
+        value
+      end
+    end
+  end
+end

data/lib/stix_schema_spy/models/external_type.rb

@@ -0,0 +1,48 @@
+# Representation of a type that is not contained within the schemas available to this app
+
+module StixSchemaSpy
+  class ExternalType
+    attr_reader :name
+
+    def initialize(prefix, name)
+      @prefix = prefix
+      @name = name
+    end
+
+    def prefix
+      @prefix || ""
+    end
+
+    def full_name
+      if prefix && prefix.length > 0
+        "#{prefix}:#{name}"
+      else
+        name
+      end
+    end
+
+    def documentation
+      ""
+    end
+
+    def has_example?
+      false
+    end
+
+    def fields
+      []
+    end
+
+    def attributes
+      []
+    end
+
+    def elements
+      []
+    end
+
+    def url
+      nil
+    end
+  end
+end

data/lib/stix_schema_spy/models/has_children.rb

@@ -0,0 +1,83 @@
+module StixSchemaSpy
+  module HasChildren
+    def find_element(name, all = true)
+      load!
+      if @elements[name]
+        @elements[name]
+      elsif extension && all
+        extension.find_element(name)
+      else
+        nil
+      end
+    end
+
+    def find_attribute(name, all = true)
+      load!
+      if @attributes[name]
+        @attributes[name]
+      elsif extension && all
+        extension.find_attribute(name)
+      else
+        nil
+      end
+    end
+
+    def elements(all = true)
+      load!
+      (@elements.values + (all && extension ? extension.elements : []))
+    end
+
+    def attributes(all = true)
+      load!
+      (@attributes.values + (all && extension ? extension.attributes : []))
+    end
+
+    def own_fields
+      load!
+      attributes(false) + elements(false) + @special_fields
+    end
+
+    def fields
+      load!
+      (!extension.nil? ? extension.fields : []) + own_fields
+    end
+    
+    #################################################################################################
+    private
+    #################################################################################################
+
+    # Runs through the list of fields under this type and creates the appropriate objects
+    def process_field(child)
+      if ['complexContent', 'simpleContent', 'sequence', 'group', 'choice', 'extension'].include?(child.name)
+        child.elements.each {|grandchild| process_field(grandchild)}
+      elsif child.name == 'element'
+        element = Element.new(child, self.schema)
+        @elements[element.name] = element
+      elsif child.name == 'attribute'
+        attribute = Attribute.new(child, self.schema)
+        @attributes[attribute.name] = attribute
+      elsif child.name == 'complexType'
+        type = ComplexType.build(child, self.schema)
+        @types[type.name] = type
+      elsif child.name == 'simpleType'
+        type = SimpleType.build(child, self.schema)
+        @types[type.name] = type
+      elsif child.name == 'anyAttribute'
+        @special_fields << SpecialField.new("##anyAttribute")
+      elsif child.name == 'anyElement'
+        @special_fields << SpecialField.new("##anyElement")
+      elsif child.name == 'attributeGroup'
+        # The only special case here...essentially we'll' transparently roll attribute groups into parent nodes,
+        # while at the schema level global attribute groups get created as a type
+        if self.kind_of?(Schema)
+          type = ComplexType.build(child, self.schema)
+          @types[type.name] = type
+        else
+          Type.find(child.attributes['ref'].value).attributes.each {|attrib| @attributes[attrib.name] = attrib}
+        end
+      else
+        $logger.debug "Skipping: #{child.name}" if defined?($logger)
+      end
+    end
+  end
+end

data/lib/stix_schema_spy/models/node.rb

@@ -0,0 +1,71 @@
+# Generic Node (Element or Attribute)
+
+module StixSchemaSpy
+  class Node
+    attr_reader :documentation, :schema
+
+    def initialize(xml, schema)
+      @xml = xml
+      @schema = schema
+      @documentation = @xml.xpath('xs:annotation/xs:documentation', {'xs' => 'http://www.w3.org/2001/XMLSchema'}).to_a.map {|node| node.text}.join("\n")
+    end
+
+    def link
+      type.url
+    end
+
+    def reference?
+      @xml.attributes['ref'] != nil
+    end
+
+    def element?
+      !attribute?
+    end
+
+    def type
+      @type ||= type!
+    end
+
+    def type!
+      if reference?
+        if referenced_element
+          referenced_element.type
+        else        
+          ExternalType.new(*@xml.attributes['ref'].value.split(':'))
+        end
+      elsif named_type = @xml.attributes['type']
+        type = schema.find_type(named_type.value) || Type.find(named_type.value)
+        type
+      else
+        Type.inline(@xml, self.schema, self.name)
+      end
+    end
+
+    def name
+      @name ||= name!
+    end
+
+    def name!
+      if reference?
+        @xml.attributes['ref'].value.split(':').last
+      else
+        @xml.attributes['name'].value
+      end
+    end
+
+    # Only valid if this is a reference. Also works for attributes, this was a crappy name
+    def referenced_element
+      ref = @xml.attributes['ref'].value
+      @referenced_element ||= if ref =~ /:/
+        prefix, element = ref.split(':')
+        schema.find_element(element) || schema.find_attribute("@#{element}") if schema = Schema.find(prefix)
+      else
+        self.schema.find_element(ref) || self.schema.find_attribute("@#{ref}")
+      end
+    end
+
+    def inspect
+      "#<#{self.class.to_s}:#{object_id} @name=\"#{name}\">"
+    end
+  end
+end