stix_schema_spy 1.3 → 1.3.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (109) hide show
  1. checksums.yaml +4 -4
  2. data/config/1.2/stix/campaign.xsd +2 -2
  3. data/config/1.2/stix/cybox/cybox_common.xsd +2700 -2700
  4. data/config/1.2/stix/cybox/cybox_core.xsd +1145 -1145
  5. data/config/1.2/stix/cybox/cybox_default_vocabularies.xsd +5180 -5180
  6. data/config/1.2/stix/cybox/extensions/location/ciq_address_3.0.xsd +27 -27
  7. data/config/1.2/stix/cybox/extensions/platform/cpe2.3.xsd +34 -34
  8. data/config/1.2/stix/cybox/external/cpe_2.3/xml.xsd +145 -145
  9. data/config/1.2/stix/cybox/external/oasis_ciq_3.0/xlink-2003-12-31.xsd +90 -90
  10. data/config/1.2/stix/cybox/objects/API_Object.xsd +55 -55
  11. data/config/1.2/stix/cybox/objects/ARP_Cache_Object.xsd +98 -98
  12. data/config/1.2/stix/cybox/objects/AS_Object.xsd +50 -50
  13. data/config/1.2/stix/cybox/objects/Account_Object.xsd +501 -501
  14. data/config/1.2/stix/cybox/objects/Address_Object.xsd +127 -127
  15. data/config/1.2/stix/cybox/objects/Archive_File_Object.xsd +134 -134
  16. data/config/1.2/stix/cybox/objects/Artifact_Object.xsd +212 -212
  17. data/config/1.2/stix/cybox/objects/Code_Object.xsd +417 -417
  18. data/config/1.2/stix/cybox/objects/Custom_Object.xsd +42 -42
  19. data/config/1.2/stix/cybox/objects/DNS_Cache_Object.xsd +53 -53
  20. data/config/1.2/stix/cybox/objects/DNS_Query_Object.xsd +164 -164
  21. data/config/1.2/stix/cybox/objects/DNS_Record_Object.xsd +92 -92
  22. data/config/1.2/stix/cybox/objects/Device_Object.xsd +65 -65
  23. data/config/1.2/stix/cybox/objects/Disk_Object.xsd +117 -117
  24. data/config/1.2/stix/cybox/objects/Disk_Partition_Object.xsd +199 -199
  25. data/config/1.2/stix/cybox/objects/Domain_Name_Object.xsd +57 -57
  26. data/config/1.2/stix/cybox/objects/Email_Message_Object.xsd +278 -278
  27. data/config/1.2/stix/cybox/objects/File_Object.xsd +397 -397
  28. data/config/1.2/stix/cybox/objects/GUI_Dialogbox_Object.xsd +41 -41
  29. data/config/1.2/stix/cybox/objects/GUI_Object.xsd +40 -40
  30. data/config/1.2/stix/cybox/objects/GUI_Window_Object.xsd +46 -46
  31. data/config/1.2/stix/cybox/objects/HTTP_Session_Object.xsd +633 -633
  32. data/config/1.2/stix/cybox/objects/Hostname_Object.xsd +45 -45
  33. data/config/1.2/stix/cybox/objects/Image_File_Object.xsd +124 -124
  34. data/config/1.2/stix/cybox/objects/Library_Object.xsd +114 -114
  35. data/config/1.2/stix/cybox/objects/Link_Object.xsd +36 -36
  36. data/config/1.2/stix/cybox/objects/Linux_Package_Object.xsd +75 -75
  37. data/config/1.2/stix/cybox/objects/Memory_Object.xsd +141 -141
  38. data/config/1.2/stix/cybox/objects/Mutex_Object.xsd +40 -40
  39. data/config/1.2/stix/cybox/objects/Network_Connection_Object.xsd +540 -540
  40. data/config/1.2/stix/cybox/objects/Network_Flow_Object.xsd +1559 -1559
  41. data/config/1.2/stix/cybox/objects/Network_Packet_Object.xsd +2934 -2934
  42. data/config/1.2/stix/cybox/objects/Network_Route_Entry_Object.xsd +155 -155
  43. data/config/1.2/stix/cybox/objects/Network_Route_Object.xsd +93 -93
  44. data/config/1.2/stix/cybox/objects/Network_Socket_Object.xsd +529 -529
  45. data/config/1.2/stix/cybox/objects/Network_Subnet_Object.xsd +64 -64
  46. data/config/1.2/stix/cybox/objects/PDF_File_Object.xsd +595 -595
  47. data/config/1.2/stix/cybox/objects/Pipe_Object.xsd +40 -40
  48. data/config/1.2/stix/cybox/objects/Port_Object.xsd +40 -40
  49. data/config/1.2/stix/cybox/objects/Process_Object.xsd +199 -199
  50. data/config/1.2/stix/cybox/objects/Product_Object.xsd +65 -65
  51. data/config/1.2/stix/cybox/objects/SMS_Message_Object.xsd +79 -79
  52. data/config/1.2/stix/cybox/objects/Semaphore_Object.xsd +50 -50
  53. data/config/1.2/stix/cybox/objects/Socket_Address_Object.xsd +50 -50
  54. data/config/1.2/stix/cybox/objects/System_Object.xsd +410 -410
  55. data/config/1.2/stix/cybox/objects/URI_Object.xsd +62 -62
  56. data/config/1.2/stix/cybox/objects/URL_History_Object.xsd +104 -104
  57. data/config/1.2/stix/cybox/objects/Unix_File_Object.xsd +164 -164
  58. data/config/1.2/stix/cybox/objects/Unix_Network_Route_Entry_Object.xsd +56 -56
  59. data/config/1.2/stix/cybox/objects/Unix_Pipe_Object.xsd +36 -36
  60. data/config/1.2/stix/cybox/objects/Unix_Process_Object.xsd +143 -143
  61. data/config/1.2/stix/cybox/objects/Unix_User_Account_Object.xsd +78 -78
  62. data/config/1.2/stix/cybox/objects/Unix_Volume_Object.xsd +41 -41
  63. data/config/1.2/stix/cybox/objects/User_Account_Object.xsd +110 -110
  64. data/config/1.2/stix/cybox/objects/User_Session_Object.xsd +60 -60
  65. data/config/1.2/stix/cybox/objects/Volume_Object.xsd +235 -235
  66. data/config/1.2/stix/cybox/objects/Whois_Object.xsd +430 -430
  67. data/config/1.2/stix/cybox/objects/Win_Computer_Account_Object.xsd +135 -135
  68. data/config/1.2/stix/cybox/objects/Win_Critical_Section_Object.xsd +40 -40
  69. data/config/1.2/stix/cybox/objects/Win_Driver_Object.xsd +270 -270
  70. data/config/1.2/stix/cybox/objects/Win_Event_Log_Object.xsd +137 -137
  71. data/config/1.2/stix/cybox/objects/Win_Event_Object.xsd +80 -80
  72. data/config/1.2/stix/cybox/objects/Win_Executable_File_Object.xsd +1311 -1311
  73. data/config/1.2/stix/cybox/objects/Win_File_Object.xsd +269 -269
  74. data/config/1.2/stix/cybox/objects/Win_Filemapping_Object.xsd +175 -175
  75. data/config/1.2/stix/cybox/objects/Win_Handle_Object.xsd +351 -351
  76. data/config/1.2/stix/cybox/objects/Win_Hook_Object.xsd +152 -152
  77. data/config/1.2/stix/cybox/objects/Win_Kernel_Hook_Object.xsd +109 -109
  78. data/config/1.2/stix/cybox/objects/Win_Kernel_Object.xsd +128 -128
  79. data/config/1.2/stix/cybox/objects/Win_Mailslot_Object.xsd +56 -56
  80. data/config/1.2/stix/cybox/objects/Win_Memory_Page_Region_Object.xsd +198 -198
  81. data/config/1.2/stix/cybox/objects/Win_Mutex_Object.xsd +42 -42
  82. data/config/1.2/stix/cybox/objects/Win_Network_Route_Entry_Object.xsd +200 -200
  83. data/config/1.2/stix/cybox/objects/Win_Network_Share_Object.xsd +205 -205
  84. data/config/1.2/stix/cybox/objects/Win_Pipe_Object.xsd +73 -73
  85. data/config/1.2/stix/cybox/objects/Win_Prefetch_Object.xsd +113 -113
  86. data/config/1.2/stix/cybox/objects/Win_Process_Object.xsd +174 -174
  87. data/config/1.2/stix/cybox/objects/Win_Registry_Key_Object.xsd +290 -290
  88. data/config/1.2/stix/cybox/objects/Win_Semaphore_Object.xsd +42 -42
  89. data/config/1.2/stix/cybox/objects/Win_Service_Object.xsd +287 -287
  90. data/config/1.2/stix/cybox/objects/Win_System_Object.xsd +126 -126
  91. data/config/1.2/stix/cybox/objects/Win_System_Restore_Object.xsd +207 -207
  92. data/config/1.2/stix/cybox/objects/Win_Task_Object.xsd +755 -755
  93. data/config/1.2/stix/cybox/objects/Win_Thread_Object.xsd +146 -146
  94. data/config/1.2/stix/cybox/objects/Win_User_Account_Object.xsd +73 -73
  95. data/config/1.2/stix/cybox/objects/Win_Volume_Object.xsd +161 -161
  96. data/config/1.2/stix/cybox/objects/Win_Waitable_Timer_Object.xsd +90 -90
  97. data/config/1.2/stix/cybox/objects/X509_Certificate_Object.xsd +275 -275
  98. data/config/1.2/stix/data_marking.xsd +5 -5
  99. data/config/1.2/stix/exploit_target.xsd +2 -2
  100. data/config/1.2/stix/incident.xsd +1 -1
  101. data/config/1.2/stix/indicator.xsd +6 -6
  102. data/config/1.2/stix/report.xsd +6 -6
  103. data/config/1.2/stix/stix_common.xsd +22 -22
  104. data/config/1.2/stix/stix_core.xsd +7 -7
  105. data/config/1.2/stix/stix_default_vocabularies.xsd +8 -8
  106. data/config/1.2/stix/ttp.xsd +1 -1
  107. data/lib/stix_schema_spy/models/has_children.rb +3 -3
  108. data/lib/stix_schema_spy/version.rb +1 -1
  109. metadata +2 -2
@@ -1,278 +1,278 @@
1
- <?xml version='1.0' encoding='UTF-8'?>
2
- <xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:EmailMessageObj="http://cybox.mitre.org/objects#EmailMessageObject-2" xmlns:cyboxCommon="http://cybox.mitre.org/common-2" xmlns:AddressObj="http://cybox.mitre.org/objects#AddressObject-2" targetNamespace="http://cybox.mitre.org/objects#EmailMessageObject-2" elementFormDefault="qualified" attributeFormDefault="unqualified" version="2.1">
3
- <xs:annotation>
4
- <xs:documentation>This schema was originally developed by The MITRE Corporation. The CybOX XML Schema implementation is maintained by The MITRE Corporation and developed by the open CybOX Community. For more information, including how to get involved in the effort and how to submit change requests, please visit the CybOX website at http://cybox.mitre.org.</xs:documentation>
5
- <xs:appinfo>
6
- <schema>Email_Message_Object</schema>
7
- <version>2.1</version>
8
- <date>01/22/2014</date>
9
- <short_description>The following specifies the fields and types that compose this defined CybOX Object type. Each defined object is an extension of the abstract ObjectPropertiesType, defined in CybOX Common. For more information on this extension mechanism, please see the CybOX Specification. This document is intended for developers and assumes some familiarity with XML. </short_description>
10
- <terms_of_use>Copyright (c) 2012-2014, The MITRE Corporation. All rights reserved. The contents of this file are subject to the terms of the CybOX License located at http://cybox.mitre.org/about/termsofuse.html. See the CybOX License for the specific language governing permissions and limitations for use of this schema. When distributing copies of the CybOX Schema, this license header must be included.</terms_of_use>
11
- </xs:appinfo>
12
- </xs:annotation>
13
- <xs:import namespace="http://cybox.mitre.org/common-2" schemaLocation="../cybox_common.xsd"/>
14
- <xs:import namespace="http://cybox.mitre.org/objects#AddressObject-2" schemaLocation="Address_Object.xsd"/>
15
- <xs:element name="Email_Message" type="EmailMessageObj:EmailMessageObjectType">
16
- <xs:annotation>
17
- <xs:documentation>The Email_Message object is intended to characterize an individual email message.</xs:documentation>
18
- </xs:annotation>
19
- </xs:element>
20
- <xs:complexType name="EmailMessageObjectType" mixed="false">
21
- <xs:annotation>
22
- <xs:documentation>The EmailMessageObjectType type is intended to characterize an individual email message.</xs:documentation>
23
- </xs:annotation>
24
- <xs:complexContent>
25
- <xs:extension base="cyboxCommon:ObjectPropertiesType">
26
- <xs:sequence>
27
- <xs:element name="Header" type="EmailMessageObj:EmailHeaderType" minOccurs="0" maxOccurs="1">
28
- <xs:annotation>
29
- <xs:documentation>The Header field specifies a variety of common headers that may be included in the email message.</xs:documentation>
30
- </xs:annotation>
31
- </xs:element>
32
- <xs:element name="Email_Server" type="cyboxCommon:StringObjectPropertyType" minOccurs="0">
33
- <xs:annotation>
34
- <xs:documentation>The Email_Server field is optional and specifies the relevant email server.</xs:documentation>
35
- </xs:annotation>
36
- </xs:element>
37
- <xs:element name="Raw_Body" type="cyboxCommon:StringObjectPropertyType" minOccurs="0">
38
- <xs:annotation>
39
- <xs:documentation>The Raw_Body field specifies the complete (raw) body of the email message.</xs:documentation>
40
- </xs:annotation>
41
- </xs:element>
42
- <xs:element name="Raw_Header" type="cyboxCommon:StringObjectPropertyType" minOccurs="0">
43
- <xs:annotation>
44
- <xs:documentation>The Raw_Header field specifies the complete (raw) headers of the email message.</xs:documentation>
45
- </xs:annotation>
46
- </xs:element>
47
- <xs:element name="Attachments" type="EmailMessageObj:AttachmentsType" minOccurs="0">
48
- <xs:annotation>
49
- <xs:documentation>The Attachments field specifies any files that were attached to the email message. It imports and uses the CybOX FileObjectType from the File_Object to do so.</xs:documentation>
50
- </xs:annotation>
51
- </xs:element>
52
- <xs:element name="Links" minOccurs="0" type="EmailMessageObj:LinksType">
53
- <xs:annotation>
54
- <xs:documentation>The Links field specifies any URL links contained within the email message. It imports and uses the CybOX LinkObjectType from the Link_Object to do so.</xs:documentation>
55
- </xs:annotation>
56
- </xs:element>
57
- </xs:sequence>
58
- </xs:extension>
59
- </xs:complexContent>
60
- </xs:complexType>
61
- <xs:complexType name="AttachmentsType">
62
- <xs:annotation>
63
- <xs:documentation>The AttachmenstType captures a list of attachments for an email message.</xs:documentation>
64
- </xs:annotation>
65
- <xs:sequence>
66
- <xs:element name="File" type="EmailMessageObj:AttachmentReferenceType" maxOccurs="unbounded">
67
- <xs:annotation>
68
- <xs:documentation>The File field specifies a file that was attached to the email message, via a reference to an Object included elsewhere in the document.</xs:documentation>
69
- </xs:annotation>
70
- </xs:element>
71
- </xs:sequence>
72
- </xs:complexType>
73
- <xs:complexType name="EmailHeaderType">
74
- <xs:annotation>
75
- <xs:documentation>The EmailHeaderType captures a representation of a standard email header.</xs:documentation>
76
- </xs:annotation>
77
- <xs:sequence>
78
- <xs:element minOccurs="0" name="Received_Lines" type="EmailMessageObj:EmailReceivedLineListType">
79
- <xs:annotation>
80
- <xs:documentation>The Received_Lines field specifies one or more 'Received' lines that may be included in the email header.</xs:documentation>
81
- </xs:annotation>
82
- </xs:element>
83
- <xs:element name="To" type="EmailMessageObj:EmailRecipientsType" minOccurs="0">
84
- <xs:annotation>
85
- <xs:documentation>The To field specifies the email addresses of the recipients of the email message.</xs:documentation>
86
- </xs:annotation>
87
- </xs:element>
88
- <xs:element name="CC" type="EmailMessageObj:EmailRecipientsType" minOccurs="0">
89
- <xs:annotation>
90
- <xs:documentation>The CC field specifies the email addresses of any recipients that were included in the carbon copy header of the email message.</xs:documentation>
91
- </xs:annotation>
92
- </xs:element>
93
- <xs:element name="BCC" type="EmailMessageObj:EmailRecipientsType" minOccurs="0">
94
- <xs:annotation>
95
- <xs:documentation>The BCC field specifies the email addresses of any recipients that were included in the blind carbon copy header of the email message.</xs:documentation>
96
- </xs:annotation>
97
- </xs:element>
98
- <xs:element name="From" type="AddressObj:AddressObjectType" minOccurs="0">
99
- <xs:annotation>
100
- <xs:documentation>The From field specifies the email address of the sender of the email message.</xs:documentation>
101
- </xs:annotation>
102
- </xs:element>
103
- <xs:element name="Subject" type="cyboxCommon:StringObjectPropertyType" minOccurs="0">
104
- <xs:annotation>
105
- <xs:documentation>The Subject field specifies the subject (a brief summary of the message topic) of the email message.</xs:documentation>
106
- </xs:annotation>
107
- </xs:element>
108
- <xs:element name="In_Reply_To" type="cyboxCommon:StringObjectPropertyType" minOccurs="0">
109
- <xs:annotation>
110
- <xs:documentation>The In_Reply_To field specifies the message ID of the message that this email is a reply to.</xs:documentation>
111
- </xs:annotation>
112
- </xs:element>
113
- <xs:element name="Date" type="cyboxCommon:DateTimeObjectPropertyType" minOccurs="0">
114
- <xs:annotation>
115
- <xs:documentation>The Date field specifies the date/time that the email message was sent.</xs:documentation>
116
- </xs:annotation>
117
- </xs:element>
118
- <xs:element name="Message_ID" type="cyboxCommon:StringObjectPropertyType" minOccurs="0">
119
- <xs:annotation>
120
- <xs:documentation>The Message_ID field specifies the automatically generated ID of the email message.</xs:documentation>
121
- </xs:annotation>
122
- </xs:element>
123
- <xs:element name="Sender" type="AddressObj:AddressObjectType" minOccurs="0">
124
- <xs:annotation>
125
- <xs:documentation>The Sender field specifies the email address of the sender who is acting on behalf of the author listed in the From: field.</xs:documentation>
126
- </xs:annotation>
127
- </xs:element>
128
- <xs:element name="Reply_To" type="AddressObj:AddressObjectType" minOccurs="0">
129
- <xs:annotation>
130
- <xs:documentation>The Reply_To field specifies the email address that should be used when replying to the email message.</xs:documentation>
131
- </xs:annotation>
132
- </xs:element>
133
- <xs:element name="Errors_To" type="cyboxCommon:StringObjectPropertyType" minOccurs="0">
134
- <xs:annotation>
135
- <xs:documentation>The Errors_To field specifies the entry in the (deprecated) errors_to header of the email message.</xs:documentation>
136
- </xs:annotation>
137
- </xs:element>
138
- <xs:element name="Boundary" type="cyboxCommon:StringObjectPropertyType" minOccurs="0">
139
- <xs:annotation>
140
- <xs:documentation>The Boundary field specifies a boundary tag that may be included in a MIME multipart message. This boundary tag is used to indicate the parts of a multipart message.</xs:documentation>
141
- </xs:annotation>
142
- </xs:element>
143
- <xs:element name="Content_Type" type="cyboxCommon:StringObjectPropertyType" minOccurs="0">
144
- <xs:annotation>
145
- <xs:documentation>The Content-Type field specifies the internet media, or MIME, type of the email message content.</xs:documentation>
146
- </xs:annotation>
147
- </xs:element>
148
- <xs:element name="MIME_Version" type="cyboxCommon:StringObjectPropertyType" minOccurs="0">
149
- <xs:annotation>
150
- <xs:documentation>The MIME-Version field specifies the version of the MIME formatting used in the email message.</xs:documentation>
151
- </xs:annotation>
152
- </xs:element>
153
- <xs:element name="Precedence" type="cyboxCommon:StringObjectPropertyType" minOccurs="0">
154
- <xs:annotation>
155
- <xs:documentation>The Precedence field specifies the (non-standard) priority value of the message, which can influence transmission speed and delivery. Use of this field is typically discouraged, as per IETF RFC2076 (http://www.faqs.org/rfcs/rfc2076.html).</xs:documentation>
156
- </xs:annotation>
157
- </xs:element>
158
- <xs:element minOccurs="0" name="User_Agent" type="cyboxCommon:StringObjectPropertyType">
159
- <xs:annotation>
160
- <xs:documentation>The User-Agent field specifies the identity of the email user agent software that may have been used to send the email message.</xs:documentation>
161
- </xs:annotation>
162
- </xs:element>
163
- <xs:element name="X_Mailer" type="cyboxCommon:StringObjectPropertyType" minOccurs="0">
164
- <xs:annotation>
165
- <xs:documentation>The X-Mailer field specifies the software used to send the email message. This field is non-standard.</xs:documentation>
166
- </xs:annotation>
167
- </xs:element>
168
- <xs:element name="X_Originating_IP" type="AddressObj:AddressObjectType" minOccurs="0">
169
- <xs:annotation>
170
- <xs:documentation>The X-Originating-IP field specifies the originating IP Address of the email sender, in terms of their connection to the mail server used to send the email message. This field is non-standard.</xs:documentation>
171
- </xs:annotation>
172
- </xs:element>
173
- <xs:element name="X_Priority" type="cyboxCommon:PositiveIntegerObjectPropertyType" minOccurs="0">
174
- <xs:annotation>
175
- <xs:documentation>The X-Priority field specifies the numerical priority of the email message. This is a non-standard field, but typically a value of '1' is considered the highest priority, '3' is normal, and '5' is the lowest priority.</xs:documentation>
176
- </xs:annotation>
177
- </xs:element>
178
- </xs:sequence>
179
- </xs:complexType>
180
- <xs:complexType name="EmailRecipientsType">
181
- <xs:annotation>
182
- <xs:documentation>The EmailRecipientsType captures a list of recipients for an email message.</xs:documentation>
183
- </xs:annotation>
184
- <xs:sequence>
185
- <xs:element name="Recipient" type="AddressObj:AddressObjectType" maxOccurs="unbounded">
186
- <xs:annotation>
187
- <xs:documentation>The Recipient field represents a single recipient for an email message.</xs:documentation>
188
- </xs:annotation>
189
- </xs:element>
190
- </xs:sequence>
191
- </xs:complexType>
192
- <xs:complexType name="LinksType">
193
- <xs:annotation>
194
- <xs:documentation>The LinksType captures a list of URIs, representing the links contained in the message.</xs:documentation>
195
- </xs:annotation>
196
- <xs:sequence>
197
- <xs:element name="Link" type="EmailMessageObj:LinkReferenceType" maxOccurs="unbounded">
198
- <xs:annotation>
199
- <xs:documentation>The Link field specifies a single URL link contained within the email message, via a reference to an Object included elsewhere in the document.</xs:documentation>
200
- </xs:annotation>
201
- </xs:element>
202
- </xs:sequence>
203
- </xs:complexType>
204
- <xs:complexType name="EmailReceivedLineType">
205
- <xs:annotation>
206
- <xs:documentation>The EmailReceivedLineType captures a single 'Received' line in an email message header.</xs:documentation>
207
- </xs:annotation>
208
- <xs:sequence>
209
- <xs:element minOccurs="0" name="From" type="cyboxCommon:StringObjectPropertyType">
210
- <xs:annotation>
211
- <xs:documentation>The From field captures the 'from' portion of the Received line, if applicable.</xs:documentation>
212
- </xs:annotation>
213
- </xs:element>
214
- <xs:element minOccurs="0" name="By" type="cyboxCommon:StringObjectPropertyType">
215
- <xs:annotation>
216
- <xs:documentation>The By field captures the 'by' portion of the Received line, if applicable.</xs:documentation>
217
- </xs:annotation>
218
- </xs:element>
219
- <xs:element minOccurs="0" name="Via" type="cyboxCommon:StringObjectPropertyType">
220
- <xs:annotation>
221
- <xs:documentation>The Via field captures the 'via' portion of the Received line, if applicable.</xs:documentation>
222
- </xs:annotation>
223
- </xs:element>
224
- <xs:element minOccurs="0" name="With" type="cyboxCommon:StringObjectPropertyType">
225
- <xs:annotation>
226
- <xs:documentation>The With field captures the 'with' portion of the Received line, if applicable.</xs:documentation>
227
- </xs:annotation>
228
- </xs:element>
229
- <xs:element minOccurs="0" name="For" type="cyboxCommon:StringObjectPropertyType">
230
- <xs:annotation>
231
- <xs:documentation>The For field captures the 'for' portion of the Received line, if applicable.</xs:documentation>
232
- </xs:annotation>
233
- </xs:element>
234
- <xs:element minOccurs="0" name="ID" type="cyboxCommon:StringObjectPropertyType">
235
- <xs:annotation>
236
- <xs:documentation>The ID field captures the 'id' portion of the Received line, if applicable.</xs:documentation>
237
- </xs:annotation>
238
- </xs:element>
239
- <xs:element minOccurs="0" name="Timestamp" type="cyboxCommon:DateTimeObjectPropertyType">
240
- <xs:annotation>
241
- <xs:documentation>The Timestamp field captures the timestamp portion of the Received line, if applicable.</xs:documentation>
242
- </xs:annotation>
243
- </xs:element>
244
- </xs:sequence>
245
- </xs:complexType>
246
- <xs:complexType name="EmailReceivedLineListType">
247
- <xs:annotation>
248
- <xs:documentation>The EmailReceivedLineListType captures a list of 'Received' lines in an email message header.</xs:documentation>
249
- </xs:annotation>
250
- <xs:sequence>
251
- <xs:element maxOccurs="unbounded" name="Received" type="EmailMessageObj:EmailReceivedLineType">
252
- <xs:annotation>
253
- <xs:documentation>The Received field captures a single Received line in the list.</xs:documentation>
254
- </xs:annotation>
255
- </xs:element>
256
- </xs:sequence>
257
- </xs:complexType>
258
- <xs:complexType name="AttachmentReferenceType">
259
- <xs:annotation>
260
- <xs:documentation>The AttachmentReferenceType specifies a reference to an Object defined elsewhere in the document which characterizes an attachment included in the email message.</xs:documentation>
261
- </xs:annotation>
262
- <xs:attribute name="object_reference" type="xs:QName">
263
- <xs:annotation>
264
- <xs:documentation>The object_reference field specifies a reference to an file-oriented (i.e., the File Object or one its derivations such as the Windows File Object) Object defined elsewhere in the document, via its id.</xs:documentation>
265
- </xs:annotation>
266
- </xs:attribute>
267
- </xs:complexType>
268
- <xs:complexType name="LinkReferenceType">
269
- <xs:annotation>
270
- <xs:documentation>The LinkReferenceType specifies a reference to a URI Object defined elsewhere in the document which characterizes a hyperlink embedded in the body of the email message.</xs:documentation>
271
- </xs:annotation>
272
- <xs:attribute name="object_reference" type="xs:QName">
273
- <xs:annotation>
274
- <xs:documentation>The object_reference field specifies a reference to a URI Object defined elsewhere in the document, via its id.</xs:documentation>
275
- </xs:annotation>
276
- </xs:attribute>
277
- </xs:complexType>
278
- </xs:schema>
1
+ <?xml version='1.0' encoding='UTF-8'?>
2
+ <xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:EmailMessageObj="http://cybox.mitre.org/objects#EmailMessageObject-2" xmlns:cyboxCommon="http://cybox.mitre.org/common-2" xmlns:AddressObj="http://cybox.mitre.org/objects#AddressObject-2" targetNamespace="http://cybox.mitre.org/objects#EmailMessageObject-2" elementFormDefault="qualified" attributeFormDefault="unqualified" version="2.1">
3
+ <xs:annotation>
4
+ <xs:documentation>This schema was originally developed by The MITRE Corporation. The CybOX XML Schema implementation is maintained by The MITRE Corporation and developed by the open CybOX Community. For more information, including how to get involved in the effort and how to submit change requests, please visit the CybOX website at http://cybox.mitre.org.</xs:documentation>
5
+ <xs:appinfo>
6
+ <schema>Email_Message_Object</schema>
7
+ <version>2.1</version>
8
+ <date>01/22/2014</date>
9
+ <short_description>The following specifies the fields and types that compose this defined CybOX Object type. Each defined object is an extension of the abstract ObjectPropertiesType, defined in CybOX Common. For more information on this extension mechanism, please see the CybOX Specification. This document is intended for developers and assumes some familiarity with XML. </short_description>
10
+ <terms_of_use>Copyright (c) 2012-2014, The MITRE Corporation. All rights reserved. The contents of this file are subject to the terms of the CybOX License located at http://cybox.mitre.org/about/termsofuse.html. See the CybOX License for the specific language governing permissions and limitations for use of this schema. When distributing copies of the CybOX Schema, this license header must be included.</terms_of_use>
11
+ </xs:appinfo>
12
+ </xs:annotation>
13
+ <xs:import namespace="http://cybox.mitre.org/common-2" schemaLocation="../cybox_common.xsd"/>
14
+ <xs:import namespace="http://cybox.mitre.org/objects#AddressObject-2" schemaLocation="Address_Object.xsd"/>
15
+ <xs:element name="Email_Message" type="EmailMessageObj:EmailMessageObjectType">
16
+ <xs:annotation>
17
+ <xs:documentation>The Email_Message object is intended to characterize an individual email message.</xs:documentation>
18
+ </xs:annotation>
19
+ </xs:element>
20
+ <xs:complexType name="EmailMessageObjectType" mixed="false">
21
+ <xs:annotation>
22
+ <xs:documentation>The EmailMessageObjectType type is intended to characterize an individual email message.</xs:documentation>
23
+ </xs:annotation>
24
+ <xs:complexContent>
25
+ <xs:extension base="cyboxCommon:ObjectPropertiesType">
26
+ <xs:sequence>
27
+ <xs:element name="Header" type="EmailMessageObj:EmailHeaderType" minOccurs="0" maxOccurs="1">
28
+ <xs:annotation>
29
+ <xs:documentation>The Header field specifies a variety of common headers that may be included in the email message.</xs:documentation>
30
+ </xs:annotation>
31
+ </xs:element>
32
+ <xs:element name="Email_Server" type="cyboxCommon:StringObjectPropertyType" minOccurs="0">
33
+ <xs:annotation>
34
+ <xs:documentation>The Email_Server field is optional and specifies the relevant email server.</xs:documentation>
35
+ </xs:annotation>
36
+ </xs:element>
37
+ <xs:element name="Raw_Body" type="cyboxCommon:StringObjectPropertyType" minOccurs="0">
38
+ <xs:annotation>
39
+ <xs:documentation>The Raw_Body field specifies the complete (raw) body of the email message.</xs:documentation>
40
+ </xs:annotation>
41
+ </xs:element>
42
+ <xs:element name="Raw_Header" type="cyboxCommon:StringObjectPropertyType" minOccurs="0">
43
+ <xs:annotation>
44
+ <xs:documentation>The Raw_Header field specifies the complete (raw) headers of the email message.</xs:documentation>
45
+ </xs:annotation>
46
+ </xs:element>
47
+ <xs:element name="Attachments" type="EmailMessageObj:AttachmentsType" minOccurs="0">
48
+ <xs:annotation>
49
+ <xs:documentation>The Attachments field specifies any files that were attached to the email message. It imports and uses the CybOX FileObjectType from the File_Object to do so.</xs:documentation>
50
+ </xs:annotation>
51
+ </xs:element>
52
+ <xs:element name="Links" minOccurs="0" type="EmailMessageObj:LinksType">
53
+ <xs:annotation>
54
+ <xs:documentation>The Links field specifies any URL links contained within the email message. It imports and uses the CybOX LinkObjectType from the Link_Object to do so.</xs:documentation>
55
+ </xs:annotation>
56
+ </xs:element>
57
+ </xs:sequence>
58
+ </xs:extension>
59
+ </xs:complexContent>
60
+ </xs:complexType>
61
+ <xs:complexType name="AttachmentsType">
62
+ <xs:annotation>
63
+ <xs:documentation>The AttachmenstType captures a list of attachments for an email message.</xs:documentation>
64
+ </xs:annotation>
65
+ <xs:sequence>
66
+ <xs:element name="File" type="EmailMessageObj:AttachmentReferenceType" maxOccurs="unbounded">
67
+ <xs:annotation>
68
+ <xs:documentation>The File field specifies a file that was attached to the email message, via a reference to an Object included elsewhere in the document.</xs:documentation>
69
+ </xs:annotation>
70
+ </xs:element>
71
+ </xs:sequence>
72
+ </xs:complexType>
73
+ <xs:complexType name="EmailHeaderType">
74
+ <xs:annotation>
75
+ <xs:documentation>The EmailHeaderType captures a representation of a standard email header.</xs:documentation>
76
+ </xs:annotation>
77
+ <xs:sequence>
78
+ <xs:element minOccurs="0" name="Received_Lines" type="EmailMessageObj:EmailReceivedLineListType">
79
+ <xs:annotation>
80
+ <xs:documentation>The Received_Lines field specifies one or more 'Received' lines that may be included in the email header.</xs:documentation>
81
+ </xs:annotation>
82
+ </xs:element>
83
+ <xs:element name="To" type="EmailMessageObj:EmailRecipientsType" minOccurs="0">
84
+ <xs:annotation>
85
+ <xs:documentation>The To field specifies the email addresses of the recipients of the email message.</xs:documentation>
86
+ </xs:annotation>
87
+ </xs:element>
88
+ <xs:element name="CC" type="EmailMessageObj:EmailRecipientsType" minOccurs="0">
89
+ <xs:annotation>
90
+ <xs:documentation>The CC field specifies the email addresses of any recipients that were included in the carbon copy header of the email message.</xs:documentation>
91
+ </xs:annotation>
92
+ </xs:element>
93
+ <xs:element name="BCC" type="EmailMessageObj:EmailRecipientsType" minOccurs="0">
94
+ <xs:annotation>
95
+ <xs:documentation>The BCC field specifies the email addresses of any recipients that were included in the blind carbon copy header of the email message.</xs:documentation>
96
+ </xs:annotation>
97
+ </xs:element>
98
+ <xs:element name="From" type="AddressObj:AddressObjectType" minOccurs="0">
99
+ <xs:annotation>
100
+ <xs:documentation>The From field specifies the email address of the sender of the email message.</xs:documentation>
101
+ </xs:annotation>
102
+ </xs:element>
103
+ <xs:element name="Subject" type="cyboxCommon:StringObjectPropertyType" minOccurs="0">
104
+ <xs:annotation>
105
+ <xs:documentation>The Subject field specifies the subject (a brief summary of the message topic) of the email message.</xs:documentation>
106
+ </xs:annotation>
107
+ </xs:element>
108
+ <xs:element name="In_Reply_To" type="cyboxCommon:StringObjectPropertyType" minOccurs="0">
109
+ <xs:annotation>
110
+ <xs:documentation>The In_Reply_To field specifies the message ID of the message that this email is a reply to.</xs:documentation>
111
+ </xs:annotation>
112
+ </xs:element>
113
+ <xs:element name="Date" type="cyboxCommon:DateTimeObjectPropertyType" minOccurs="0">
114
+ <xs:annotation>
115
+ <xs:documentation>The Date field specifies the date/time that the email message was sent.</xs:documentation>
116
+ </xs:annotation>
117
+ </xs:element>
118
+ <xs:element name="Message_ID" type="cyboxCommon:StringObjectPropertyType" minOccurs="0">
119
+ <xs:annotation>
120
+ <xs:documentation>The Message_ID field specifies the automatically generated ID of the email message.</xs:documentation>
121
+ </xs:annotation>
122
+ </xs:element>
123
+ <xs:element name="Sender" type="AddressObj:AddressObjectType" minOccurs="0">
124
+ <xs:annotation>
125
+ <xs:documentation>The Sender field specifies the email address of the sender who is acting on behalf of the author listed in the From: field.</xs:documentation>
126
+ </xs:annotation>
127
+ </xs:element>
128
+ <xs:element name="Reply_To" type="AddressObj:AddressObjectType" minOccurs="0">
129
+ <xs:annotation>
130
+ <xs:documentation>The Reply_To field specifies the email address that should be used when replying to the email message.</xs:documentation>
131
+ </xs:annotation>
132
+ </xs:element>
133
+ <xs:element name="Errors_To" type="cyboxCommon:StringObjectPropertyType" minOccurs="0">
134
+ <xs:annotation>
135
+ <xs:documentation>The Errors_To field specifies the entry in the (deprecated) errors_to header of the email message.</xs:documentation>
136
+ </xs:annotation>
137
+ </xs:element>
138
+ <xs:element name="Boundary" type="cyboxCommon:StringObjectPropertyType" minOccurs="0">
139
+ <xs:annotation>
140
+ <xs:documentation>The Boundary field specifies a boundary tag that may be included in a MIME multipart message. This boundary tag is used to indicate the parts of a multipart message.</xs:documentation>
141
+ </xs:annotation>
142
+ </xs:element>
143
+ <xs:element name="Content_Type" type="cyboxCommon:StringObjectPropertyType" minOccurs="0">
144
+ <xs:annotation>
145
+ <xs:documentation>The Content-Type field specifies the internet media, or MIME, type of the email message content.</xs:documentation>
146
+ </xs:annotation>
147
+ </xs:element>
148
+ <xs:element name="MIME_Version" type="cyboxCommon:StringObjectPropertyType" minOccurs="0">
149
+ <xs:annotation>
150
+ <xs:documentation>The MIME-Version field specifies the version of the MIME formatting used in the email message.</xs:documentation>
151
+ </xs:annotation>
152
+ </xs:element>
153
+ <xs:element name="Precedence" type="cyboxCommon:StringObjectPropertyType" minOccurs="0">
154
+ <xs:annotation>
155
+ <xs:documentation>The Precedence field specifies the (non-standard) priority value of the message, which can influence transmission speed and delivery. Use of this field is typically discouraged, as per IETF RFC2076 (http://www.faqs.org/rfcs/rfc2076.html).</xs:documentation>
156
+ </xs:annotation>
157
+ </xs:element>
158
+ <xs:element minOccurs="0" name="User_Agent" type="cyboxCommon:StringObjectPropertyType">
159
+ <xs:annotation>
160
+ <xs:documentation>The User-Agent field specifies the identity of the email user agent software that may have been used to send the email message.</xs:documentation>
161
+ </xs:annotation>
162
+ </xs:element>
163
+ <xs:element name="X_Mailer" type="cyboxCommon:StringObjectPropertyType" minOccurs="0">
164
+ <xs:annotation>
165
+ <xs:documentation>The X-Mailer field specifies the software used to send the email message. This field is non-standard.</xs:documentation>
166
+ </xs:annotation>
167
+ </xs:element>
168
+ <xs:element name="X_Originating_IP" type="AddressObj:AddressObjectType" minOccurs="0">
169
+ <xs:annotation>
170
+ <xs:documentation>The X-Originating-IP field specifies the originating IP Address of the email sender, in terms of their connection to the mail server used to send the email message. This field is non-standard.</xs:documentation>
171
+ </xs:annotation>
172
+ </xs:element>
173
+ <xs:element name="X_Priority" type="cyboxCommon:PositiveIntegerObjectPropertyType" minOccurs="0">
174
+ <xs:annotation>
175
+ <xs:documentation>The X-Priority field specifies the numerical priority of the email message. This is a non-standard field, but typically a value of '1' is considered the highest priority, '3' is normal, and '5' is the lowest priority.</xs:documentation>
176
+ </xs:annotation>
177
+ </xs:element>
178
+ </xs:sequence>
179
+ </xs:complexType>
180
+ <xs:complexType name="EmailRecipientsType">
181
+ <xs:annotation>
182
+ <xs:documentation>The EmailRecipientsType captures a list of recipients for an email message.</xs:documentation>
183
+ </xs:annotation>
184
+ <xs:sequence>
185
+ <xs:element name="Recipient" type="AddressObj:AddressObjectType" maxOccurs="unbounded">
186
+ <xs:annotation>
187
+ <xs:documentation>The Recipient field represents a single recipient for an email message.</xs:documentation>
188
+ </xs:annotation>
189
+ </xs:element>
190
+ </xs:sequence>
191
+ </xs:complexType>
192
+ <xs:complexType name="LinksType">
193
+ <xs:annotation>
194
+ <xs:documentation>The LinksType captures a list of URIs, representing the links contained in the message.</xs:documentation>
195
+ </xs:annotation>
196
+ <xs:sequence>
197
+ <xs:element name="Link" type="EmailMessageObj:LinkReferenceType" maxOccurs="unbounded">
198
+ <xs:annotation>
199
+ <xs:documentation>The Link field specifies a single URL link contained within the email message, via a reference to an Object included elsewhere in the document.</xs:documentation>
200
+ </xs:annotation>
201
+ </xs:element>
202
+ </xs:sequence>
203
+ </xs:complexType>
204
+ <xs:complexType name="EmailReceivedLineType">
205
+ <xs:annotation>
206
+ <xs:documentation>The EmailReceivedLineType captures a single 'Received' line in an email message header.</xs:documentation>
207
+ </xs:annotation>
208
+ <xs:sequence>
209
+ <xs:element minOccurs="0" name="From" type="cyboxCommon:StringObjectPropertyType">
210
+ <xs:annotation>
211
+ <xs:documentation>The From field captures the 'from' portion of the Received line, if applicable.</xs:documentation>
212
+ </xs:annotation>
213
+ </xs:element>
214
+ <xs:element minOccurs="0" name="By" type="cyboxCommon:StringObjectPropertyType">
215
+ <xs:annotation>
216
+ <xs:documentation>The By field captures the 'by' portion of the Received line, if applicable.</xs:documentation>
217
+ </xs:annotation>
218
+ </xs:element>
219
+ <xs:element minOccurs="0" name="Via" type="cyboxCommon:StringObjectPropertyType">
220
+ <xs:annotation>
221
+ <xs:documentation>The Via field captures the 'via' portion of the Received line, if applicable.</xs:documentation>
222
+ </xs:annotation>
223
+ </xs:element>
224
+ <xs:element minOccurs="0" name="With" type="cyboxCommon:StringObjectPropertyType">
225
+ <xs:annotation>
226
+ <xs:documentation>The With field captures the 'with' portion of the Received line, if applicable.</xs:documentation>
227
+ </xs:annotation>
228
+ </xs:element>
229
+ <xs:element minOccurs="0" name="For" type="cyboxCommon:StringObjectPropertyType">
230
+ <xs:annotation>
231
+ <xs:documentation>The For field captures the 'for' portion of the Received line, if applicable.</xs:documentation>
232
+ </xs:annotation>
233
+ </xs:element>
234
+ <xs:element minOccurs="0" name="ID" type="cyboxCommon:StringObjectPropertyType">
235
+ <xs:annotation>
236
+ <xs:documentation>The ID field captures the 'id' portion of the Received line, if applicable.</xs:documentation>
237
+ </xs:annotation>
238
+ </xs:element>
239
+ <xs:element minOccurs="0" name="Timestamp" type="cyboxCommon:DateTimeObjectPropertyType">
240
+ <xs:annotation>
241
+ <xs:documentation>The Timestamp field captures the timestamp portion of the Received line, if applicable.</xs:documentation>
242
+ </xs:annotation>
243
+ </xs:element>
244
+ </xs:sequence>
245
+ </xs:complexType>
246
+ <xs:complexType name="EmailReceivedLineListType">
247
+ <xs:annotation>
248
+ <xs:documentation>The EmailReceivedLineListType captures a list of 'Received' lines in an email message header.</xs:documentation>
249
+ </xs:annotation>
250
+ <xs:sequence>
251
+ <xs:element maxOccurs="unbounded" name="Received" type="EmailMessageObj:EmailReceivedLineType">
252
+ <xs:annotation>
253
+ <xs:documentation>The Received field captures a single Received line in the list.</xs:documentation>
254
+ </xs:annotation>
255
+ </xs:element>
256
+ </xs:sequence>
257
+ </xs:complexType>
258
+ <xs:complexType name="AttachmentReferenceType">
259
+ <xs:annotation>
260
+ <xs:documentation>The AttachmentReferenceType specifies a reference to an Object defined elsewhere in the document which characterizes an attachment included in the email message.</xs:documentation>
261
+ </xs:annotation>
262
+ <xs:attribute name="object_reference" type="xs:QName">
263
+ <xs:annotation>
264
+ <xs:documentation>The object_reference field specifies a reference to an file-oriented (i.e., the File Object or one its derivations such as the Windows File Object) Object defined elsewhere in the document, via its id.</xs:documentation>
265
+ </xs:annotation>
266
+ </xs:attribute>
267
+ </xs:complexType>
268
+ <xs:complexType name="LinkReferenceType">
269
+ <xs:annotation>
270
+ <xs:documentation>The LinkReferenceType specifies a reference to a URI Object defined elsewhere in the document which characterizes a hyperlink embedded in the body of the email message.</xs:documentation>
271
+ </xs:annotation>
272
+ <xs:attribute name="object_reference" type="xs:QName">
273
+ <xs:annotation>
274
+ <xs:documentation>The object_reference field specifies a reference to a URI Object defined elsewhere in the document, via its id.</xs:documentation>
275
+ </xs:annotation>
276
+ </xs:attribute>
277
+ </xs:complexType>
278
+ </xs:schema>