stix_schema_spy 1.2.3 → 1.3

data/config/1.2/stix/cybox/objects/DNS_Query_Object.xsd

@@ -0,0 +1,164 @@
+<?xml version='1.0' encoding='UTF-8'?>
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:DNSQueryObj="http://cybox.mitre.org/objects#DNSQueryObject-2" xmlns:URIObj="http://cybox.mitre.org/objects#URIObject-2" xmlns:DNSRecordObj="http://cybox.mitre.org/objects#DNSRecordObject-2" xmlns:cyboxCommon="http://cybox.mitre.org/common-2" targetNamespace="http://cybox.mitre.org/objects#DNSQueryObject-2" elementFormDefault="qualified" attributeFormDefault="unqualified" version="2.1">
+	<xs:annotation>
+		<xs:documentation>This schema was originally developed by The MITRE Corporation. The CybOX XML Schema implementation is maintained by The MITRE Corporation and developed by the open CybOX Community. For more information, including how to get involved in the effort and how to submit change requests, please visit the CybOX website at http://cybox.mitre.org.</xs:documentation>
+		<xs:appinfo>
+			<schema>DNS_Query_Object</schema>
+			<version>2.1</version>
+			<date>01/22/2014</date>			
+			<short_description>The following specifies the fields and types that compose this defined CybOX Object type. Each defined object is an extension of the abstract ObjectPropertiesType, defined in CybOX Common. For more information on this extension mechanism, please see the CybOX Specification. This document is intended for developers and assumes some familiarity with XML. </short_description>
+			<terms_of_use>Copyright (c) 2012-2014, The MITRE Corporation. All rights reserved. The contents of this file are subject to the terms of the CybOX License located at http://cybox.mitre.org/about/termsofuse.html. See the CybOX License for the specific language governing permissions and limitations for use of this schema. When distributing copies of the CybOX Schema, this license header must be included.</terms_of_use>
+		</xs:appinfo>
+	</xs:annotation>
+	<xs:import namespace="http://cybox.mitre.org/common-2" schemaLocation="../cybox_common.xsd"/>
+	<xs:import namespace="http://cybox.mitre.org/objects#DNSRecordObject-2" schemaLocation="DNS_Record_Object.xsd"/>
+	<xs:import namespace="http://cybox.mitre.org/objects#URIObject-2" schemaLocation="URI_Object.xsd"/>
+	<xs:element name="DNS_Query" type="DNSQueryObj:DNSQueryObjectType">
+		<xs:annotation>
+			<xs:documentation>The DNS_Query object is intended to represent a single DNS query.</xs:documentation>
+		</xs:annotation>
+	</xs:element>
+	<xs:complexType name="DNSQueryObjectType">
+		<xs:annotation>
+			<xs:documentation>The DNSQueryType is intended to characterize a single DNS query and its components.</xs:documentation>
+		</xs:annotation>
+		<xs:complexContent>
+			<xs:extension base="cyboxCommon:ObjectPropertiesType">
+				<xs:sequence>
+					<xs:element name="Transaction_ID" type="cyboxCommon:HexBinaryObjectPropertyType" minOccurs="0">
+						<xs:annotation>
+							<xs:documentation>The Transaction_ID field specifies the Transaction ID value of the DNS query message header.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element name="Question" type="DNSQueryObj:DNSQuestionType" minOccurs="0">
+						<xs:annotation>
+							<xs:documentation>The Question field specifies the DNS question component of the DNS query.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element name="Answer_Resource_Records" minOccurs="0" type="DNSQueryObj:DNSResourceRecordsType">
+						<xs:annotation>
+							<xs:documentation>The Answers field specifies any Answers resource records that were returned for the DNS query.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element minOccurs="0" name="Authority_Resource_Records" type="DNSQueryObj:DNSResourceRecordsType">
+						<xs:annotation>
+							<xs:documentation>The Authority_Resource_Records field specifies any Authority resource records that were returned for the DNS query.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element name="Additional_Records" minOccurs="0" type="DNSQueryObj:DNSResourceRecordsType">
+						<xs:annotation>
+							<xs:documentation>The Authority_Resource_Records field specifies any Additional resource records that were returned for the DNS query.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element minOccurs="0" name="Date_Ran" type="cyboxCommon:DateTimeObjectPropertyType">
+						<xs:annotation>
+							<xs:documentation>The Date_Ran field specifies the date and time that the DNS query was run.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element minOccurs="0" name="Service_Used" type="cyboxCommon:StringObjectPropertyType">
+						<xs:annotation>
+							<xs:documentation>The Service_Used field specifies the service used to run the DNS Query.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+				</xs:sequence>
+				<xs:attribute name="successful" type="xs:boolean">
+					<xs:annotation>
+						<xs:documentation>The successful field specifies whether or not the DNS Query was successful.</xs:documentation>
+					</xs:annotation>
+				</xs:attribute>
+			</xs:extension>
+		</xs:complexContent>
+	</xs:complexType>
+	<xs:complexType name="DNSQuestionType">
+		<xs:annotation>
+			<xs:documentation>The DNSQuestionType specifies the components of a DNS Question, including the domain name queried, type, and class.</xs:documentation>
+		</xs:annotation>
+		<xs:sequence>
+			<xs:element name="QName" type="URIObj:URIObjectType" minOccurs="0">
+				<xs:annotation>
+					<xs:documentation>The QName field specifies the domain name being queried.</xs:documentation>
+				</xs:annotation>
+			</xs:element>
+			<xs:element minOccurs="0" name="QType" type="DNSQueryObj:DNSRecordType">
+				<xs:annotation>
+					<xs:documentation>The QType specifies the type of DNS query performed, in terms of the requested DNS record type.</xs:documentation>
+				</xs:annotation>
+			</xs:element>
+			<xs:element minOccurs="0" name="QClass" type="cyboxCommon:StringObjectPropertyType">
+				<xs:annotation>
+					<xs:documentation>The QClass field specifies the class of resource records being requested.</xs:documentation>
+				</xs:annotation>
+			</xs:element>
+		</xs:sequence>
+	</xs:complexType>
+	<xs:complexType name="DNSResourceRecordsType">
+		<xs:annotation>
+			<xs:documentation>The DNSAnswersType encompasses one or more resource records returned for a DNS query.</xs:documentation>
+		</xs:annotation>
+		<xs:sequence>
+			<xs:element name="Resource_Record" type="DNSRecordObj:DNSRecordObjectType" maxOccurs="unbounded">
+				<xs:annotation>
+					<xs:documentation>The Answer field specifies a single DNS resource record returned as part of a DNS query.</xs:documentation>
+				</xs:annotation>
+			</xs:element>
+		</xs:sequence>
+	</xs:complexType>
+	<xs:complexType name="DNSRecordType">
+		<xs:annotation>
+			<xs:documentation>DNSRecordType specifies DNS record types, via a union of the DNSRecordTypeEnum type and the atomic xs:string type. Its base type is the CybOX Core BaseObjectPropertyType, for permitting complex (i.e. regular-expression based) specifications.</xs:documentation>
+		</xs:annotation>
+		<xs:simpleContent>
+			<xs:restriction base="cyboxCommon:BaseObjectPropertyType">
+				<xs:simpleType>
+					<xs:union memberTypes="DNSQueryObj:DNSRecordTypeEnum xs:string"/>
+				</xs:simpleType>
+				<xs:attribute fixed="string" name="datatype" type="cyboxCommon:DatatypeEnum" use="optional">
+					<xs:annotation>
+						<xs:documentation>This attribute is optional and specifies the expected type for the value of the specified property.</xs:documentation>
+					</xs:annotation>
+				</xs:attribute>
+			</xs:restriction>
+		</xs:simpleContent>
+	</xs:complexType>
+	<xs:simpleType name="DNSRecordTypeEnum">
+		<xs:annotation>
+			<xs:documentation>The DNSRecordTypeEnum is a non-exhaustive enumeration of DNS Record Type names.</xs:documentation>
+		</xs:annotation>
+		<xs:restriction base="xs:string">
+			<xs:enumeration value="A"/>
+			<xs:enumeration value="AAAA"/>
+			<xs:enumeration value="AFSDB"/>
+			<xs:enumeration value="APL"/>
+			<xs:enumeration value="CERT"/>
+			<xs:enumeration value="CNAME"/>
+			<xs:enumeration value="DHCID"/>
+			<xs:enumeration value="DLV"/>
+			<xs:enumeration value="DNAME"/>
+			<xs:enumeration value="DNSKEY"/>
+			<xs:enumeration value="DS"/>
+			<xs:enumeration value="HIP"/>
+			<xs:enumeration value="IPSECKEY"/>
+			<xs:enumeration value="KEY"/>
+			<xs:enumeration value="KX"/>
+			<xs:enumeration value="LOC"/>
+			<xs:enumeration value="MX"/>
+			<xs:enumeration value="NAPTR"/>
+			<xs:enumeration value="NS"/>
+			<xs:enumeration value="NSEC"/>
+			<xs:enumeration value="NSEC3"/>
+			<xs:enumeration value="NSEC3PARAM"/>
+			<xs:enumeration value="PTR"/>
+			<xs:enumeration value="RRSIG"/>
+			<xs:enumeration value="RP"/>
+			<xs:enumeration value="SIG"/>
+			<xs:enumeration value="SOA"/>
+			<xs:enumeration value="SPF"/>
+			<xs:enumeration value="SRV"/>
+			<xs:enumeration value="SSHFP"/>
+			<xs:enumeration value="TA"/>
+			<xs:enumeration value="TKEY"/>
+			<xs:enumeration value="TSIG"/>
+			<xs:enumeration value="TXT"/>
+		</xs:restriction>
+	</xs:simpleType>
+</xs:schema>

data/config/1.2/stix/cybox/objects/DNS_Record_Object.xsd

@@ -0,0 +1,92 @@
+<?xml version='1.0' encoding='UTF-8'?>
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:DNSRecordObj="http://cybox.mitre.org/objects#DNSRecordObject-2" xmlns:AddressObj="http://cybox.mitre.org/objects#AddressObject-2" xmlns:URIObj="http://cybox.mitre.org/objects#URIObject-2" xmlns:cyboxCommon="http://cybox.mitre.org/common-2" targetNamespace="http://cybox.mitre.org/objects#DNSRecordObject-2" elementFormDefault="qualified" attributeFormDefault="unqualified" version="2.1">
+	<xs:annotation>
+		<xs:documentation>This schema was originally developed by The MITRE Corporation. The CybOX XML Schema implementation is maintained by The MITRE Corporation and developed by the open CybOX Community. For more information, including how to get involved in the effort and how to submit change requests, please visit the CybOX website at http://cybox.mitre.org.</xs:documentation>
+		<xs:appinfo>
+			<schema>DNS_Record_Object</schema>
+			<version>2.1</version>
+			<date>01/22/2014</date>			
+			<short_description>The following specifies the fields and types that compose this defined CybOX Object type. Each defined object is an extension of the abstract ObjectPropertiesType, defined in CybOX Common. For more information on this extension mechanism, please see the CybOX Specification. This document is intended for developers and assumes some familiarity with XML. </short_description>
+			<terms_of_use>Copyright (c) 2012-2014, The MITRE Corporation. All rights reserved. The contents of this file are subject to the terms of the CybOX License located at http://cybox.mitre.org/about/termsofuse.html. See the CybOX License for the specific language governing permissions and limitations for use of this schema. When distributing copies of the CybOX Schema, this license header must be included.</terms_of_use>
+		</xs:appinfo>
+	</xs:annotation>
+	<xs:import namespace="http://cybox.mitre.org/common-2" schemaLocation="../cybox_common.xsd"/>
+	<xs:import namespace="http://cybox.mitre.org/objects#URIObject-2" schemaLocation="URI_Object.xsd"/>
+	<xs:import namespace="http://cybox.mitre.org/objects#AddressObject-2" schemaLocation="Address_Object.xsd"/>
+	<xs:element name="DNS_Record" type="DNSRecordObj:DNSRecordObjectType">
+		<xs:annotation>
+			<xs:documentation>The DNS object is intended to characterize an individual DNS record.</xs:documentation>
+		</xs:annotation>
+	</xs:element>
+	<xs:complexType name="DNSRecordObjectType" mixed="false">
+		<xs:annotation>
+			<xs:documentation>The DNSRecordObjectType type is intended to characterize an individual DNS record.</xs:documentation>
+		</xs:annotation>
+		<xs:complexContent>
+			<xs:extension base="cyboxCommon:ObjectPropertiesType">
+				<xs:sequence>
+					<xs:element name="Description" type="cyboxCommon:StructuredTextType" minOccurs="0">
+						<xs:annotation>
+							<xs:documentation>The Description field provides a mechanism to specify a structured text description of this DNS_Entry.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element name="Queried_Date" type="cyboxCommon:DateTimeObjectPropertyType" minOccurs="0">
+						<xs:annotation>
+							<xs:documentation>The Queried_Date field specifies the date and time at which this DNS record was returned from a query.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element name="Domain_Name" type="URIObj:URIObjectType" minOccurs="0">
+						<xs:annotation>
+							<xs:documentation>The Domain_Name field specifies the name of the domain to which the DNS cache entry points.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element name="IP_Address" type="AddressObj:AddressObjectType" minOccurs="0">
+						<xs:annotation>
+							<xs:documentation>The IP_Address field specifies the IP address to which the domain name in the DNS cache entry resolves to.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element name="Address_Class" type="cyboxCommon:StringObjectPropertyType" minOccurs="0">
+						<xs:annotation>
+							<xs:documentation>The Address_Class field specifies the address class (e.g. IN, TXT, ANY, etc.) for the DNS record.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element name="Entry_Type" type="cyboxCommon:StringObjectPropertyType" minOccurs="0">
+						<xs:annotation>
+							<xs:documentation>The Entry_Type field specifies the resource record type (e.g. SOA or A) for the DNS record.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element name="Record_Name" type="cyboxCommon:StringObjectPropertyType" minOccurs="0">
+						<xs:annotation>
+							<xs:documentation>The Record_Name field is optional and specifies the name for the DNS record.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element name="Record_Type" type="cyboxCommon:StringObjectPropertyType" minOccurs="0">
+						<xs:annotation>
+							<xs:documentation>The Record_Type field is optional and specifies the type of the DNS record.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element name="TTL" type="cyboxCommon:IntegerObjectPropertyType" minOccurs="0" maxOccurs="1">
+						<xs:annotation>
+							<xs:documentation>The TTL field is optional and specifies the time-to-live for the DNS record.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element name="Flags" type="cyboxCommon:HexBinaryObjectPropertyType" minOccurs="0">
+						<xs:annotation>
+							<xs:documentation>The Flags field is optional and specifies the relevant flags for the DNS record.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element name="Data_Length" type="cyboxCommon:IntegerObjectPropertyType" minOccurs="0">
+						<xs:annotation>
+							<xs:documentation>The Data_Length field is optional and specifies the length of raw data to be captured in the Record_Data field.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element name="Record_Data" type="xs:anyType" minOccurs="0">
+						<xs:annotation>
+							<xs:documentation>The Record_Data field is optional and enables capture and expression of the raw record data.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+				</xs:sequence>
+			</xs:extension>
+		</xs:complexContent>
+	</xs:complexType>
+</xs:schema>

data/config/1.2/stix/cybox/objects/Device_Object.xsd

@@ -0,0 +1,65 @@
+<?xml version='1.0' encoding='UTF-8'?>
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:DeviceObj="http://cybox.mitre.org/objects#DeviceObject-2" xmlns:cyboxCommon="http://cybox.mitre.org/common-2" targetNamespace="http://cybox.mitre.org/objects#DeviceObject-2" elementFormDefault="qualified" attributeFormDefault="unqualified" version="2.1">
+	<xs:annotation>
+		<xs:documentation>This schema was originally developed by The MITRE Corporation. The CybOX XML Schema implementation is maintained by The MITRE Corporation and developed by the open CybOX Community. For more information, including how to get involved in the effort and how to submit change requests, please visit the CybOX website at http://cybox.mitre.org.</xs:documentation>
+		<xs:appinfo>
+			<schema>Device_Object</schema>
+			<version>2.1</version>
+			<date>01/22/2014</date>			
+			<short_description>The following specifies the fields and types that compose this defined CybOX Object type. Each defined object is an extension of the abstract ObjectPropertiesType, defined in CybOX Common. For more information on this extension mechanism, please see the CybOX Specification. This document is intended for developers and assumes some familiarity with XML. </short_description>
+			<terms_of_use>Copyright (c) 2012-2014, The MITRE Corporation. All rights reserved. The contents of this file are subject to the terms of the CybOX License located at http://cybox.mitre.org/about/termsofuse.html. See the CybOX License for the specific language governing permissions and limitations for use of this schema. When distributing copies of the CybOX Schema, this license header must be included.</terms_of_use>
+		</xs:appinfo>
+	</xs:annotation>
+	<xs:import namespace="http://cybox.mitre.org/common-2" schemaLocation="../cybox_common.xsd"/>
+	<xs:element name="Device" type="DeviceObj:DeviceObjectType">
+		<xs:annotation>
+			<xs:documentation>The Device_Object object is intended to characterize a specific Device.</xs:documentation>
+		</xs:annotation>
+	</xs:element>
+	<xs:complexType name="DeviceObjectType">
+		<xs:annotation>
+			<xs:documentation>The DeviceObjectType type is intended to characterize a specific Device.</xs:documentation>
+		</xs:annotation>
+		<xs:complexContent>
+			<xs:extension base="cyboxCommon:ObjectPropertiesType">
+				<xs:sequence>
+					<xs:element name="Description" type="cyboxCommon:StructuredTextType" minOccurs="0">
+						<xs:annotation>
+							<xs:documentation>The Description field is intended for use in providing a brief description of the Device.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element name="Device_Type" type="cyboxCommon:StringObjectPropertyType" minOccurs="0">
+						<xs:annotation>
+							<xs:documentation>The Device_Type field specifies the type of the device.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element name="Manufacturer" type="cyboxCommon:StringObjectPropertyType" minOccurs="0">
+						<xs:annotation>
+							<xs:documentation>The Manufacturer field specifies the manufacturer of the device.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element name="Model" type="cyboxCommon:StringObjectPropertyType" minOccurs="0">
+						<xs:annotation>
+							<xs:documentation>The Model field specifies the model identifier of the device.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element name="Serial_Number" type="cyboxCommon:StringObjectPropertyType" minOccurs="0">
+						<xs:annotation>
+							<xs:documentation>The Serial_Number field specifies the serial number of the Device.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element minOccurs="0" name="Firmware_Version" type="cyboxCommon:StringObjectPropertyType">
+						<xs:annotation>
+							<xs:documentation>The Firmware_Version field specifies the version of the firmware running on the device.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element minOccurs="0" name="System_Details" type="cyboxCommon:ObjectPropertiesType">
+						<xs:annotation>
+							<xs:documentation>The System_Details field captures the details of the system that may be present on the device. It uses the abstract ObjectPropertiesType which permits the specification of any Object; however, it is strongly recommended that the System Object or one of its subtypes be used in this context.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+				</xs:sequence>
+			</xs:extension>
+		</xs:complexContent>
+	</xs:complexType>
+</xs:schema>

data/config/1.2/stix/cybox/objects/Disk_Object.xsd

@@ -0,0 +1,117 @@
+<?xml version='1.0' encoding='UTF-8'?>
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:DiskObj="http://cybox.mitre.org/objects#DiskObject-2" xmlns:cyboxCommon="http://cybox.mitre.org/common-2" xmlns:DiskPartitionObj="http://cybox.mitre.org/objects#DiskPartitionObject-2" targetNamespace="http://cybox.mitre.org/objects#DiskObject-2" elementFormDefault="qualified" attributeFormDefault="unqualified" version="2.1">
+	<xs:annotation>
+		<xs:documentation>This schema was originally developed by The MITRE Corporation. The CybOX XML Schema implementation is maintained by The MITRE Corporation and developed by the open CybOX Community. For more information, including how to get involved in the effort and how to submit change requests, please visit the CybOX website at http://cybox.mitre.org.</xs:documentation>
+		<xs:appinfo>
+			<schema>Disk_Object</schema>
+			<version>2.1</version>
+			<date>01/22/2014</date>			
+			<short_description>The following specifies the fields and types that compose this defined CybOX Object type. Each defined object is an extension of the abstract ObjectPropertiesType, defined in CybOX Common. For more information on this extension mechanism, please see the CybOX Specification. This document is intended for developers and assumes some familiarity with XML. </short_description>
+			<terms_of_use>Copyright (c) 2012-2014, The MITRE Corporation. All rights reserved. The contents of this file are subject to the terms of the CybOX License located at http://cybox.mitre.org/about/termsofuse.html. See the CybOX License for the specific language governing permissions and limitations for use of this schema. When distributing copies of the CybOX Schema, this license header must be included.</terms_of_use>
+		</xs:appinfo>
+	</xs:annotation>
+	<xs:import namespace="http://cybox.mitre.org/common-2" schemaLocation="../cybox_common.xsd"/>
+	<xs:import namespace="http://cybox.mitre.org/objects#DiskPartitionObject-2" schemaLocation="Disk_Partition_Object.xsd"/>
+	<xs:element name="Disk" type="DiskObj:DiskObjectType">
+		<xs:annotation>
+			<xs:documentation>The Disk object is intended to characterize a disk drive.</xs:documentation>
+		</xs:annotation>
+	</xs:element>
+	<xs:complexType name="DiskObjectType" mixed="false">
+		<xs:annotation>
+			<xs:documentation>The DiskObjectType type is intended to characterize disk drives.</xs:documentation>
+		</xs:annotation>
+		<xs:complexContent>
+			<xs:extension base="cyboxCommon:ObjectPropertiesType">
+				<xs:sequence>
+					<xs:element name="Disk_Name" type="cyboxCommon:StringObjectPropertyType" minOccurs="0" maxOccurs="1">
+						<xs:annotation>
+							<xs:documentation>The Disk_Name field specifies the name of the disk.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element name="Disk_Size" type="cyboxCommon:UnsignedLongObjectPropertyType" minOccurs="0" maxOccurs="1">
+						<xs:annotation>
+							<xs:documentation>The Disk_Size field specifies the size of the disk, in bytes.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element name="Free_Space" type="cyboxCommon:UnsignedLongObjectPropertyType" minOccurs="0">
+						<xs:annotation>
+							<xs:documentation>The Free_Space field specifies the amount of free space on the disk, in bytes.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element name="Partition_List" type="DiskObj:PartitionListType" minOccurs="0" maxOccurs="1">
+						<xs:annotation>
+							<xs:documentation>The Partition_List field specifies the partitions that reside on the disk.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element name="Type" type="DiskObj:DiskType" minOccurs="0">
+						<xs:annotation>
+							<xs:documentation>The Type field specifies the type of disk being characterized, e.g. removable.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+				</xs:sequence>
+			</xs:extension>
+		</xs:complexContent>
+	</xs:complexType>
+	<xs:complexType name="PartitionListType">
+		<xs:annotation>
+			<xs:documentation>The PartionListType type specifies a list of partitions.</xs:documentation>
+		</xs:annotation>
+		<xs:sequence>
+			<xs:element name="Partition" type="DiskPartitionObj:DiskPartitionObjectType" minOccurs="1" maxOccurs="unbounded">
+				<xs:annotation>
+					<xs:documentation>The Partition field specifies a single partition that resides on the disk.</xs:documentation>
+				</xs:annotation>
+			</xs:element>
+		</xs:sequence>
+	</xs:complexType>
+	<xs:complexType name="DiskType">
+		<xs:annotation>
+			<xs:documentation>DiskType specifies disk types, via a union of the DiskTypeEnum type and the atomic xs:string type. Its base type is the CybOX Core BaseObjectPropertyType, for permitting complex (i.e. regular-expression based) specifications.</xs:documentation>
+		</xs:annotation>
+		<xs:simpleContent>
+			<xs:restriction base="cyboxCommon:BaseObjectPropertyType">
+				<xs:simpleType>
+					<xs:union memberTypes="DiskObj:DiskTypeEnum xs:string"/>
+				</xs:simpleType>
+				<xs:attribute name="datatype" type="cyboxCommon:DatatypeEnum" fixed="string">
+					<xs:annotation>
+						<xs:documentation>This attribute is optional and specifies the expected type for the value of the specified property.</xs:documentation>
+					</xs:annotation>
+				</xs:attribute>
+			</xs:restriction>
+		</xs:simpleContent>
+	</xs:complexType>
+	<xs:simpleType name="DiskTypeEnum">
+		<xs:annotation>
+			<xs:documentation>The DiskTypeEnum type contains a non-exhaustive enumeration of disk types.</xs:documentation>
+		</xs:annotation>
+		<xs:restriction base="xs:string">
+			<xs:enumeration value="Removable">
+				<xs:annotation>
+					<xs:documentation>Indicates the removable disk type.</xs:documentation>
+				</xs:annotation>
+			</xs:enumeration>
+			<xs:enumeration value="Fixed">
+				<xs:annotation>
+					<xs:documentation>Indicates the fixed disk type.</xs:documentation>
+				</xs:annotation>
+			</xs:enumeration>
+			<xs:enumeration value="Remote">
+				<xs:annotation>
+					<xs:documentation>Indicates the remote disk type.</xs:documentation>
+				</xs:annotation>
+			</xs:enumeration>
+			<xs:enumeration value="CDRom">
+				<xs:annotation>
+					<xs:documentation>Indicates the CDRom disk type.</xs:documentation>
+				</xs:annotation>
+			</xs:enumeration>
+			<xs:enumeration value="RAMDisk">
+				<xs:annotation>
+					<xs:documentation>Indicates the RAMDisk disk type.</xs:documentation>
+				</xs:annotation>
+			</xs:enumeration>
+		</xs:restriction>
+	</xs:simpleType>
+</xs:schema>

data/config/1.2/stix/cybox/objects/Disk_Partition_Object.xsd

@@ -0,0 +1,199 @@
+<?xml version='1.0' encoding='UTF-8'?>
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:DiskPartitionObj="http://cybox.mitre.org/objects#DiskPartitionObject-2" xmlns:cyboxCommon="http://cybox.mitre.org/common-2" targetNamespace="http://cybox.mitre.org/objects#DiskPartitionObject-2" elementFormDefault="qualified" attributeFormDefault="unqualified" version="2.1">
+	<xs:annotation>
+		<xs:documentation>This schema was originally developed by The MITRE Corporation. The CybOX XML Schema implementation is maintained by The MITRE Corporation and developed by the open CybOX Community. For more information, including how to get involved in the effort and how to submit change requests, please visit the CybOX website at http://cybox.mitre.org.</xs:documentation>
+		<xs:appinfo>
+			<schema>Disk_Partition_Object</schema>
+			<version>2.1</version>
+			<date>01/22/2014</date>			
+			<short_description>The following specifies the fields and types that compose this defined CybOX Object type. Each defined object is an extension of the abstract ObjectPropertiesType, defined in CybOX Common. For more information on this extension mechanism, please see the CybOX Specification. This document is intended for developers and assumes some familiarity with XML. </short_description>
+			<terms_of_use>Copyright (c) 2012-2014, The MITRE Corporation. All rights reserved. The contents of this file are subject to the terms of the CybOX License located at http://cybox.mitre.org/about/termsofuse.html. See the CybOX License for the specific language governing permissions and limitations for use of this schema. When distributing copies of the CybOX Schema, this license header must be included.</terms_of_use>
+		</xs:appinfo>
+	</xs:annotation>
+	<xs:import namespace="http://cybox.mitre.org/common-2" schemaLocation="../cybox_common.xsd"/>
+	<xs:element name="Disk_Partition" type="DiskPartitionObj:DiskPartitionObjectType">
+		<xs:annotation>
+			<xs:documentation>The Disk_Partition object is intended to characterize a single partition of a disk drive.</xs:documentation>
+		</xs:annotation>
+	</xs:element>
+	<xs:complexType name="DiskPartitionObjectType" mixed="false">
+		<xs:annotation>
+			<xs:documentation>The DiskPartitionType type is intended to characterize partitions of disk drives.</xs:documentation>
+		</xs:annotation>
+		<xs:complexContent>
+			<xs:extension base="cyboxCommon:ObjectPropertiesType">
+				<xs:sequence>
+					<xs:element name="Created" type="cyboxCommon:DateTimeObjectPropertyType" minOccurs="0">
+						<xs:annotation>
+							<xs:documentation>The Created field specifies the date/time the partition was created.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element name="Device_Name" type="cyboxCommon:NameObjectPropertyType" minOccurs="0">
+						<xs:annotation>
+							<xs:documentation>The Device_Name field specifies the name of the device on which the partition resides.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element name="Mount_Point" type="cyboxCommon:StringObjectPropertyType" minOccurs="0">
+						<xs:annotation>
+							<xs:documentation>The Mount_Point field specifies the mount point of the partition.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element name="Partition_ID" type="cyboxCommon:IntegerObjectPropertyType" minOccurs="0">
+						<xs:annotation>
+							<xs:documentation>The Partition_ID field specifies the numerical identifier of the partition.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element name="Partition_Length" type="cyboxCommon:UnsignedLongObjectPropertyType" minOccurs="0">
+						<xs:annotation>
+							<xs:documentation>The Partition_Length field specifies the length of the partition, in bytes.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element name="Partition_Offset" type="cyboxCommon:UnsignedLongObjectPropertyType" minOccurs="0">
+						<xs:annotation>
+							<xs:documentation>The Partition_Offset field specifies the starting offset of the partition, in bytes.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element name="Space_Left" type="cyboxCommon:UnsignedLongObjectPropertyType" minOccurs="0">
+						<xs:annotation>
+							<xs:documentation>The Space_Left field specifies the amount of space left on the partition, in bytes.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element name="Space_Used" type="cyboxCommon:UnsignedLongObjectPropertyType" minOccurs="0">
+						<xs:annotation>
+							<xs:documentation>The Space_Used field specifies the amount of space used on the partition, in bytes.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element name="Total_Space" type="cyboxCommon:UnsignedLongObjectPropertyType" minOccurs="0">
+						<xs:annotation>
+							<xs:documentation>The Total_Space field specifies the total amount of space available on the partition, in bytes.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+					<xs:element name="Type" type="DiskPartitionObj:PartitionType" minOccurs="0">
+						<xs:annotation>
+							<xs:documentation>The Type field specifies the type of partition being characterized.</xs:documentation>
+						</xs:annotation>
+					</xs:element>
+				</xs:sequence>
+			</xs:extension>
+		</xs:complexContent>
+	</xs:complexType>
+	<xs:complexType name="PartitionType">
+		<xs:annotation>
+			<xs:documentation>PartitionType specifies partition types, via a union of the PartitionTypeEnum type and the atomic xs:string type. Its base type is the CybOX Core BaseObjectPropertyType, for permitting complex (i.e. regular-expression based) specifications.</xs:documentation>
+		</xs:annotation>
+		<xs:simpleContent>
+			<xs:restriction base="cyboxCommon:BaseObjectPropertyType">
+				<xs:simpleType>
+					<xs:union memberTypes="DiskPartitionObj:PartitionTypeEnum xs:string"/>
+				</xs:simpleType>
+				<xs:attribute name="datatype" type="cyboxCommon:DatatypeEnum" fixed="string">
+					<xs:annotation>
+						<xs:documentation>This attribute is optional and specifies the expected type for the value of the specified property.</xs:documentation>
+					</xs:annotation>
+				</xs:attribute>
+			</xs:restriction>
+		</xs:simpleContent>
+	</xs:complexType>
+	<xs:simpleType name="PartitionTypeEnum">
+		<xs:annotation>
+			<xs:documentation>The PartitionTypeEnum type is a non-exhaustive enumeration of partition types. See http://www.win.tue.nl/~aeb/partitions/partition_types-1.html for more information about the various partition types.</xs:documentation>
+		</xs:annotation>
+		<xs:restriction base="xs:string">
+			<xs:enumeration value="PARTITION_ENTRY_UNUSED">
+				<xs:annotation>
+					<xs:documentation>Indicates an unused partition entry.</xs:documentation>
+				</xs:annotation>
+			</xs:enumeration>
+			<xs:enumeration value="PARTITION_FAT_12">
+				<xs:annotation>
+					<xs:documentation>Indicates a FAT 12 partition.</xs:documentation>
+				</xs:annotation>
+			</xs:enumeration>
+			<xs:enumeration value="PARTITION_XENIX_1">
+				<xs:annotation>
+					<xs:documentation>Indicates a XENIX type 1 partition.</xs:documentation>
+				</xs:annotation>
+			</xs:enumeration>
+			<xs:enumeration value="PARTITION_XENIX_2">
+				<xs:annotation>
+					<xs:documentation>Indicates a XENIX type 2 partition.</xs:documentation>
+				</xs:annotation>
+			</xs:enumeration>
+			<xs:enumeration value="PARTITION_FAT_16">
+				<xs:annotation>
+					<xs:documentation>Indicates a XENIX FAT 16 partition.</xs:documentation>
+				</xs:annotation>
+			</xs:enumeration>
+			<xs:enumeration value="PARTITION_EXTENDED">
+				<xs:annotation>
+					<xs:documentation>Indicates a XENIX extended partition.</xs:documentation>
+				</xs:annotation>
+			</xs:enumeration>
+			<xs:enumeration value="PARTITION_HUGE">
+				<xs:annotation>
+					<xs:documentation>Specifies an MS-DOS V4 huge partition. This value indicates that there is no Microsoft file system on the partition. Use this value when creating a logical volume.</xs:documentation>
+				</xs:annotation>
+			</xs:enumeration>
+			<xs:enumeration value="PARTITION_IFS">
+				<xs:annotation>
+					<xs:documentation>Indicates an IFS partition.</xs:documentation>
+				</xs:annotation>
+			</xs:enumeration>
+			<xs:enumeration value="PARTITION_OS2BOOTMGR">
+				<xs:annotation>
+					<xs:documentation>Indicates an OS/2 boot manager partition.</xs:documentation>
+				</xs:annotation>
+			</xs:enumeration>
+			<xs:enumeration value="PARTITION_FAT32">
+				<xs:annotation>
+					<xs:documentation>Indicates a FAT32 partition.</xs:documentation>
+				</xs:annotation>
+			</xs:enumeration>
+			<xs:enumeration value="PARTITION_FAT32_XINT13">
+				<xs:annotation>
+					<xs:documentation>Indicates a FAT32 Extended-INT13 equivalent partition to the FAT32 partition.</xs:documentation>
+				</xs:annotation>
+			</xs:enumeration>
+			<xs:enumeration value="PARTITION_XINT13">
+				<xs:annotation>
+					<xs:documentation>Indicates an XINT13 partition.</xs:documentation>
+				</xs:annotation>
+			</xs:enumeration>
+			<xs:enumeration value="PARTITION_XINT13_EXTENDED">
+				<xs:annotation>
+					<xs:documentation>Indicates an extended XINT13 partition.</xs:documentation>
+				</xs:annotation>
+			</xs:enumeration>
+			<xs:enumeration value="PARTITION_PREP">
+				<xs:annotation>
+					<xs:documentation>Indicates a PReP (Power PC Reference Platform) partition.</xs:documentation>
+				</xs:annotation>
+			</xs:enumeration>
+			<xs:enumeration value="PARTITION_LDM">
+				<xs:annotation>
+					<xs:documentation>Indicates an LDM partition.</xs:documentation>
+				</xs:annotation>
+			</xs:enumeration>
+			<xs:enumeration value="PARTITION_UNIX">
+				<xs:annotation>
+					<xs:documentation>Indicates a UNIX partition.</xs:documentation>
+				</xs:annotation>
+			</xs:enumeration>
+			<xs:enumeration value="VALID_NTFT">
+				<xs:annotation>
+					<xs:documentation>Specifies a valid NTFT partition. The high bit of a partition type code indicates that a partition is part of an NTFT mirror or striped array.</xs:documentation>
+				</xs:annotation>
+			</xs:enumeration>
+			<xs:enumeration value="PARTITION_NTFT">
+				<xs:annotation>
+					<xs:documentation>Specifies an NTFT partition.</xs:documentation>
+				</xs:annotation>
+			</xs:enumeration>
+			<xs:enumeration value="UNKNOWN">
+				<xs:annotation>
+					<xs:documentation>Refers to an unknown partition or a partition other than those listed.</xs:documentation>
+				</xs:annotation>
+			</xs:enumeration>
+		</xs:restriction>
+	</xs:simpleType>
+</xs:schema>