stix_schema_spy 1.3 → 1.3.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/config/1.2/stix/campaign.xsd +2 -2
- data/config/1.2/stix/cybox/cybox_common.xsd +2700 -2700
- data/config/1.2/stix/cybox/cybox_core.xsd +1145 -1145
- data/config/1.2/stix/cybox/cybox_default_vocabularies.xsd +5180 -5180
- data/config/1.2/stix/cybox/extensions/location/ciq_address_3.0.xsd +27 -27
- data/config/1.2/stix/cybox/extensions/platform/cpe2.3.xsd +34 -34
- data/config/1.2/stix/cybox/external/cpe_2.3/xml.xsd +145 -145
- data/config/1.2/stix/cybox/external/oasis_ciq_3.0/xlink-2003-12-31.xsd +90 -90
- data/config/1.2/stix/cybox/objects/API_Object.xsd +55 -55
- data/config/1.2/stix/cybox/objects/ARP_Cache_Object.xsd +98 -98
- data/config/1.2/stix/cybox/objects/AS_Object.xsd +50 -50
- data/config/1.2/stix/cybox/objects/Account_Object.xsd +501 -501
- data/config/1.2/stix/cybox/objects/Address_Object.xsd +127 -127
- data/config/1.2/stix/cybox/objects/Archive_File_Object.xsd +134 -134
- data/config/1.2/stix/cybox/objects/Artifact_Object.xsd +212 -212
- data/config/1.2/stix/cybox/objects/Code_Object.xsd +417 -417
- data/config/1.2/stix/cybox/objects/Custom_Object.xsd +42 -42
- data/config/1.2/stix/cybox/objects/DNS_Cache_Object.xsd +53 -53
- data/config/1.2/stix/cybox/objects/DNS_Query_Object.xsd +164 -164
- data/config/1.2/stix/cybox/objects/DNS_Record_Object.xsd +92 -92
- data/config/1.2/stix/cybox/objects/Device_Object.xsd +65 -65
- data/config/1.2/stix/cybox/objects/Disk_Object.xsd +117 -117
- data/config/1.2/stix/cybox/objects/Disk_Partition_Object.xsd +199 -199
- data/config/1.2/stix/cybox/objects/Domain_Name_Object.xsd +57 -57
- data/config/1.2/stix/cybox/objects/Email_Message_Object.xsd +278 -278
- data/config/1.2/stix/cybox/objects/File_Object.xsd +397 -397
- data/config/1.2/stix/cybox/objects/GUI_Dialogbox_Object.xsd +41 -41
- data/config/1.2/stix/cybox/objects/GUI_Object.xsd +40 -40
- data/config/1.2/stix/cybox/objects/GUI_Window_Object.xsd +46 -46
- data/config/1.2/stix/cybox/objects/HTTP_Session_Object.xsd +633 -633
- data/config/1.2/stix/cybox/objects/Hostname_Object.xsd +45 -45
- data/config/1.2/stix/cybox/objects/Image_File_Object.xsd +124 -124
- data/config/1.2/stix/cybox/objects/Library_Object.xsd +114 -114
- data/config/1.2/stix/cybox/objects/Link_Object.xsd +36 -36
- data/config/1.2/stix/cybox/objects/Linux_Package_Object.xsd +75 -75
- data/config/1.2/stix/cybox/objects/Memory_Object.xsd +141 -141
- data/config/1.2/stix/cybox/objects/Mutex_Object.xsd +40 -40
- data/config/1.2/stix/cybox/objects/Network_Connection_Object.xsd +540 -540
- data/config/1.2/stix/cybox/objects/Network_Flow_Object.xsd +1559 -1559
- data/config/1.2/stix/cybox/objects/Network_Packet_Object.xsd +2934 -2934
- data/config/1.2/stix/cybox/objects/Network_Route_Entry_Object.xsd +155 -155
- data/config/1.2/stix/cybox/objects/Network_Route_Object.xsd +93 -93
- data/config/1.2/stix/cybox/objects/Network_Socket_Object.xsd +529 -529
- data/config/1.2/stix/cybox/objects/Network_Subnet_Object.xsd +64 -64
- data/config/1.2/stix/cybox/objects/PDF_File_Object.xsd +595 -595
- data/config/1.2/stix/cybox/objects/Pipe_Object.xsd +40 -40
- data/config/1.2/stix/cybox/objects/Port_Object.xsd +40 -40
- data/config/1.2/stix/cybox/objects/Process_Object.xsd +199 -199
- data/config/1.2/stix/cybox/objects/Product_Object.xsd +65 -65
- data/config/1.2/stix/cybox/objects/SMS_Message_Object.xsd +79 -79
- data/config/1.2/stix/cybox/objects/Semaphore_Object.xsd +50 -50
- data/config/1.2/stix/cybox/objects/Socket_Address_Object.xsd +50 -50
- data/config/1.2/stix/cybox/objects/System_Object.xsd +410 -410
- data/config/1.2/stix/cybox/objects/URI_Object.xsd +62 -62
- data/config/1.2/stix/cybox/objects/URL_History_Object.xsd +104 -104
- data/config/1.2/stix/cybox/objects/Unix_File_Object.xsd +164 -164
- data/config/1.2/stix/cybox/objects/Unix_Network_Route_Entry_Object.xsd +56 -56
- data/config/1.2/stix/cybox/objects/Unix_Pipe_Object.xsd +36 -36
- data/config/1.2/stix/cybox/objects/Unix_Process_Object.xsd +143 -143
- data/config/1.2/stix/cybox/objects/Unix_User_Account_Object.xsd +78 -78
- data/config/1.2/stix/cybox/objects/Unix_Volume_Object.xsd +41 -41
- data/config/1.2/stix/cybox/objects/User_Account_Object.xsd +110 -110
- data/config/1.2/stix/cybox/objects/User_Session_Object.xsd +60 -60
- data/config/1.2/stix/cybox/objects/Volume_Object.xsd +235 -235
- data/config/1.2/stix/cybox/objects/Whois_Object.xsd +430 -430
- data/config/1.2/stix/cybox/objects/Win_Computer_Account_Object.xsd +135 -135
- data/config/1.2/stix/cybox/objects/Win_Critical_Section_Object.xsd +40 -40
- data/config/1.2/stix/cybox/objects/Win_Driver_Object.xsd +270 -270
- data/config/1.2/stix/cybox/objects/Win_Event_Log_Object.xsd +137 -137
- data/config/1.2/stix/cybox/objects/Win_Event_Object.xsd +80 -80
- data/config/1.2/stix/cybox/objects/Win_Executable_File_Object.xsd +1311 -1311
- data/config/1.2/stix/cybox/objects/Win_File_Object.xsd +269 -269
- data/config/1.2/stix/cybox/objects/Win_Filemapping_Object.xsd +175 -175
- data/config/1.2/stix/cybox/objects/Win_Handle_Object.xsd +351 -351
- data/config/1.2/stix/cybox/objects/Win_Hook_Object.xsd +152 -152
- data/config/1.2/stix/cybox/objects/Win_Kernel_Hook_Object.xsd +109 -109
- data/config/1.2/stix/cybox/objects/Win_Kernel_Object.xsd +128 -128
- data/config/1.2/stix/cybox/objects/Win_Mailslot_Object.xsd +56 -56
- data/config/1.2/stix/cybox/objects/Win_Memory_Page_Region_Object.xsd +198 -198
- data/config/1.2/stix/cybox/objects/Win_Mutex_Object.xsd +42 -42
- data/config/1.2/stix/cybox/objects/Win_Network_Route_Entry_Object.xsd +200 -200
- data/config/1.2/stix/cybox/objects/Win_Network_Share_Object.xsd +205 -205
- data/config/1.2/stix/cybox/objects/Win_Pipe_Object.xsd +73 -73
- data/config/1.2/stix/cybox/objects/Win_Prefetch_Object.xsd +113 -113
- data/config/1.2/stix/cybox/objects/Win_Process_Object.xsd +174 -174
- data/config/1.2/stix/cybox/objects/Win_Registry_Key_Object.xsd +290 -290
- data/config/1.2/stix/cybox/objects/Win_Semaphore_Object.xsd +42 -42
- data/config/1.2/stix/cybox/objects/Win_Service_Object.xsd +287 -287
- data/config/1.2/stix/cybox/objects/Win_System_Object.xsd +126 -126
- data/config/1.2/stix/cybox/objects/Win_System_Restore_Object.xsd +207 -207
- data/config/1.2/stix/cybox/objects/Win_Task_Object.xsd +755 -755
- data/config/1.2/stix/cybox/objects/Win_Thread_Object.xsd +146 -146
- data/config/1.2/stix/cybox/objects/Win_User_Account_Object.xsd +73 -73
- data/config/1.2/stix/cybox/objects/Win_Volume_Object.xsd +161 -161
- data/config/1.2/stix/cybox/objects/Win_Waitable_Timer_Object.xsd +90 -90
- data/config/1.2/stix/cybox/objects/X509_Certificate_Object.xsd +275 -275
- data/config/1.2/stix/data_marking.xsd +5 -5
- data/config/1.2/stix/exploit_target.xsd +2 -2
- data/config/1.2/stix/incident.xsd +1 -1
- data/config/1.2/stix/indicator.xsd +6 -6
- data/config/1.2/stix/report.xsd +6 -6
- data/config/1.2/stix/stix_common.xsd +22 -22
- data/config/1.2/stix/stix_core.xsd +7 -7
- data/config/1.2/stix/stix_default_vocabularies.xsd +8 -8
- data/config/1.2/stix/ttp.xsd +1 -1
- data/lib/stix_schema_spy/models/has_children.rb +3 -3
- data/lib/stix_schema_spy/version.rb +1 -1
- metadata +2 -2
@@ -1,175 +1,175 @@
|
|
1
|
-
<?xml version='1.0' encoding='UTF-8'?>
|
2
|
-
<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:WinFilemappingObj="http://cybox.mitre.org/objects#WinFilemappingObject-1" xmlns:WinHandleObj="http://cybox.mitre.org/objects#WinHandleObject-2" xmlns:cyboxCommon="http://cybox.mitre.org/common-2" targetNamespace="http://cybox.mitre.org/objects#WinFilemappingObject-1" elementFormDefault="qualified" attributeFormDefault="unqualified" version="1.0">
|
3
|
-
<xs:annotation>
|
4
|
-
<xs:documentation>This schema was originally developed by The MITRE Corporation. The CybOX XML Schema implementation is maintained by The MITRE Corporation and developed by the open CybOX Community. For more information, including how to get involved in the effort and how to submit change requests, please visit the CybOX website at http://cybox.mitre.org.</xs:documentation>
|
5
|
-
<xs:appinfo>
|
6
|
-
<schema>Win_Filemapping_Object</schema>
|
7
|
-
<version>1.0</version>
|
8
|
-
<date>01/22/2014</date>
|
9
|
-
<short_description>The following specifies the fields and types that compose this defined CybOX Object type. Each defined object is an extension of the abstract ObjectPropertiesType, defined in CybOX Common. For more information on this extension mechanism, please see the CybOX Specification. This document is intended for developers and assumes some familiarity with XML. </short_description>
|
10
|
-
<terms_of_use>Copyright (c) 2012-2014, The MITRE Corporation. All rights reserved. The contents of this file are subject to the terms of the CybOX License located at http://cybox.mitre.org/about/termsofuse.html. See the CybOX License for the specific language governing permissions and limitations for use of this schema. When distributing copies of the CybOX Schema, this license header must be included.</terms_of_use>
|
11
|
-
</xs:appinfo>
|
12
|
-
</xs:annotation>
|
13
|
-
<xs:import namespace="http://cybox.mitre.org/common-2" schemaLocation="../cybox_common.xsd"/>
|
14
|
-
<xs:import namespace="http://cybox.mitre.org/objects#WinHandleObject-2" schemaLocation="Win_Handle_Object.xsd"/>
|
15
|
-
<xs:element name="Windows_Filemapping" type="WinFilemappingObj:WindowsFilemappingObjectType">
|
16
|
-
<xs:annotation>
|
17
|
-
<xs:documentation>The Windows_Filemapping object is intended to characterize Windows file mappings.</xs:documentation>
|
18
|
-
<xs:documentation>For more information, please see http://msdn.microsoft.com/en-us/library/windows/desktop/aa366537(v=vs.85).aspx.</xs:documentation>
|
19
|
-
</xs:annotation>
|
20
|
-
</xs:element>
|
21
|
-
<xs:complexType name="WindowsFilemappingObjectType" mixed="false">
|
22
|
-
<xs:annotation>
|
23
|
-
<xs:documentation>The WindowsFilemappingObjectType type is intended to characterize Windows file mapping objects.</xs:documentation>
|
24
|
-
</xs:annotation>
|
25
|
-
<xs:complexContent>
|
26
|
-
<xs:extension base="cyboxCommon:ObjectPropertiesType">
|
27
|
-
<xs:sequence>
|
28
|
-
<xs:element minOccurs="0" name="Name" type="cyboxCommon:StringObjectPropertyType">
|
29
|
-
<xs:annotation>
|
30
|
-
<xs:documentation>The Name field specifies the name of the file mapping.</xs:documentation>
|
31
|
-
</xs:annotation>
|
32
|
-
</xs:element>
|
33
|
-
<xs:element minOccurs="0" name="File_Handle" type="WinHandleObj:WindowsHandleObjectType">
|
34
|
-
<xs:annotation>
|
35
|
-
<xs:documentation>The File_Handle field specifies the Windows handle to the file from which the file mapping was created. It uses the WindowsHandleObjectType from the imported CybOX Windows Handle Object.</xs:documentation>
|
36
|
-
</xs:annotation>
|
37
|
-
</xs:element>
|
38
|
-
<xs:element minOccurs="0" name="Handle" type="WinHandleObj:WindowsHandleObjectType">
|
39
|
-
<xs:annotation>
|
40
|
-
<xs:documentation>The Handle field specifies the Windows handle to the file mapping. It uses the WindowsHandleObjectType from the imported CybOX Windows Handle Object.</xs:documentation>
|
41
|
-
</xs:annotation>
|
42
|
-
</xs:element>
|
43
|
-
<xs:element minOccurs="0" name="Page_Protection_Value" type="WinFilemappingObj:PageProtectionValueType">
|
44
|
-
<xs:annotation>
|
45
|
-
<xs:documentation>The Page_Protection field specifies the page protection value (i.e. PAGE_) specified for the file mapping.</xs:documentation>
|
46
|
-
</xs:annotation>
|
47
|
-
</xs:element>
|
48
|
-
<xs:element maxOccurs="unbounded" minOccurs="0" name="Page_Protection_Attribute" type="WinFilemappingObj:PageProtectionAttributeType">
|
49
|
-
<xs:annotation>
|
50
|
-
<xs:documentation>The Page_Protection_Attribute field specifies a page protection attribute (i.e. SEC_) to be used in combination with the page protection value captured in the Page_Protection_Value field. One or more such attributes can be specified using this field.</xs:documentation>
|
51
|
-
</xs:annotation>
|
52
|
-
</xs:element>
|
53
|
-
<xs:element minOccurs="0" name="Maximum_Size" type="cyboxCommon:UnsignedLongObjectPropertyType">
|
54
|
-
<xs:annotation>
|
55
|
-
<xs:documentation>The Maximum_Size field specifies the maximum allowed size for the file mapping, in bytes. This value is typically initialized upon creation of the file mapping.</xs:documentation>
|
56
|
-
</xs:annotation>
|
57
|
-
</xs:element>
|
58
|
-
<xs:element minOccurs="0" name="Actual_Size" type="cyboxCommon:UnsignedLongObjectPropertyType">
|
59
|
-
<xs:annotation>
|
60
|
-
<xs:documentation>The Actual_Size field captures the actual size of the file mapping, in bytes.</xs:documentation>
|
61
|
-
</xs:annotation>
|
62
|
-
</xs:element>
|
63
|
-
<xs:element minOccurs="0" name="Security_Attributes" type="cyboxCommon:StringObjectPropertyType">
|
64
|
-
<xs:annotation>
|
65
|
-
<xs:documentation>The Security_Attributes field specifies the Windows security attributes for the file mapping.</xs:documentation>
|
66
|
-
</xs:annotation>
|
67
|
-
</xs:element>
|
68
|
-
</xs:sequence>
|
69
|
-
</xs:extension>
|
70
|
-
</xs:complexContent>
|
71
|
-
</xs:complexType>
|
72
|
-
<xs:complexType name="PageProtectionValueType">
|
73
|
-
<xs:annotation>
|
74
|
-
<xs:documentation>The PageProtectionValueType specifies Windows file mapping page protection value types (i.e. PAGE_) via a union of the PageProtectionValueEnum type and the atomic xs:string type. Its base type is the CybOX Core BaseObjectPropertyType, for permitting complex (i.e. regular-expression based) specifications.</xs:documentation>
|
75
|
-
</xs:annotation>
|
76
|
-
<xs:simpleContent>
|
77
|
-
<xs:restriction base="cyboxCommon:BaseObjectPropertyType">
|
78
|
-
<xs:simpleType>
|
79
|
-
<xs:union memberTypes="WinFilemappingObj:PageProtectionValueEnum xs:string"/>
|
80
|
-
</xs:simpleType>
|
81
|
-
</xs:restriction>
|
82
|
-
</xs:simpleContent>
|
83
|
-
</xs:complexType>
|
84
|
-
<xs:simpleType name="PageProtectionValueEnum">
|
85
|
-
<xs:annotation>
|
86
|
-
<xs:documentation>The PageProtectionValueEnum is an enumeration of Windows file mapping page protection value types.</xs:documentation>
|
87
|
-
</xs:annotation>
|
88
|
-
<xs:restriction base="xs:string">
|
89
|
-
<xs:enumeration value="PAGE_EXECUTE_READ">
|
90
|
-
<xs:annotation>
|
91
|
-
<xs:documentation>Specifies that the mapped view of the file represented by the file mapping can be mapped for read-only, copy-on-write, or execute access.</xs:documentation>
|
92
|
-
</xs:annotation>
|
93
|
-
</xs:enumeration>
|
94
|
-
<xs:enumeration value="PAGE_EXECUTE_READWRITE">
|
95
|
-
<xs:annotation>
|
96
|
-
<xs:documentation>Specifies that the mapped view of the file represented by the file mapping can be mapped for read-only, copy-on-write, read/write, or execute access.</xs:documentation>
|
97
|
-
</xs:annotation>
|
98
|
-
</xs:enumeration>
|
99
|
-
<xs:enumeration value="PAGE_EXECUTE_WRITECOPY">
|
100
|
-
<xs:annotation>
|
101
|
-
<xs:documentation>Specifies that the mapped view of the file represented by the file mapping can be mapped for read-only, copy-on-write, or execute access. This value is equivalent to PAGE_EXECUTE_READ.</xs:documentation>
|
102
|
-
</xs:annotation>
|
103
|
-
</xs:enumeration>
|
104
|
-
<xs:enumeration value="PAGE_READONLY">
|
105
|
-
<xs:annotation>
|
106
|
-
<xs:documentation>Specifies that the mapped view of the file represented by the file mapping can be mapped for read-only or copy-on-write access.</xs:documentation>
|
107
|
-
</xs:annotation>
|
108
|
-
</xs:enumeration>
|
109
|
-
<xs:enumeration value="PAGE_READWRITE">
|
110
|
-
<xs:annotation>
|
111
|
-
<xs:documentation>Specifies that the mapped view of the file represented by the file mapping can be mapped for read-only, copy-on-write, or read/write access.</xs:documentation>
|
112
|
-
</xs:annotation>
|
113
|
-
</xs:enumeration>
|
114
|
-
<xs:enumeration value="PAGE_WRITECOPY">
|
115
|
-
<xs:annotation>
|
116
|
-
<xs:documentation>Specifies that the mapped view of the file represented by the file mapping can be mapped for read-only or copy-on-write access. This value is equivalent to PAGE_READONLY.</xs:documentation>
|
117
|
-
</xs:annotation>
|
118
|
-
</xs:enumeration>
|
119
|
-
</xs:restriction>
|
120
|
-
</xs:simpleType>
|
121
|
-
<xs:complexType name="PageProtectionAttributeType">
|
122
|
-
<xs:annotation>
|
123
|
-
<xs:documentation>The PageProtectionValueType specifies the optional Windows file mapping page protection attribute types (i.e. SEC_) via a union of the PageProtectionAttributeEnum type and the atomic xs:string type. Its base type is the CybOX Core BaseObjectPropertyType, for permitting complex (i.e. regular-expression based) specifications.</xs:documentation>
|
124
|
-
</xs:annotation>
|
125
|
-
<xs:simpleContent>
|
126
|
-
<xs:restriction base="cyboxCommon:BaseObjectPropertyType">
|
127
|
-
<xs:simpleType>
|
128
|
-
<xs:union memberTypes="WinFilemappingObj:PageProtectionAttributeEnum xs:string"/>
|
129
|
-
</xs:simpleType>
|
130
|
-
</xs:restriction>
|
131
|
-
</xs:simpleContent>
|
132
|
-
</xs:complexType>
|
133
|
-
<xs:simpleType name="PageProtectionAttributeEnum">
|
134
|
-
<xs:annotation>
|
135
|
-
<xs:documentation>The PageProtectionAttributeEnum is an enumeration of Windows file mapping page protection attribute types.</xs:documentation>
|
136
|
-
</xs:annotation>
|
137
|
-
<xs:restriction base="xs:string">
|
138
|
-
<xs:enumeration value="SEC_COMMIT">
|
139
|
-
<xs:annotation>
|
140
|
-
<xs:documentation>Specifies that if the file mapping is backed by the operating system paging file, that when a view of the file is mapped into a process address space, the entire range of pages is committed rather than reserved.</xs:documentation>
|
141
|
-
</xs:annotation>
|
142
|
-
</xs:enumeration>
|
143
|
-
<xs:enumeration value="SEC_IMAGE">
|
144
|
-
<xs:annotation>
|
145
|
-
<xs:documentation>Specifies that the file mapped by the file mapping is an executable image file.</xs:documentation>
|
146
|
-
</xs:annotation>
|
147
|
-
</xs:enumeration>
|
148
|
-
<xs:enumeration value="SEC_IMAGE_NO_EXECUTE">
|
149
|
-
<xs:annotation>
|
150
|
-
<xs:documentation>Specifies that the file mapped by the file mapping is an executable image file that will not be executed and the loaded image file will have no forced integrity checks run.</xs:documentation>
|
151
|
-
</xs:annotation>
|
152
|
-
</xs:enumeration>
|
153
|
-
<xs:enumeration value="SEC_LARGE_PAGES">
|
154
|
-
<xs:annotation>
|
155
|
-
<xs:documentation>Enables large pages to be used for file mapping objects that are backed by the operating system paging file.</xs:documentation>
|
156
|
-
</xs:annotation>
|
157
|
-
</xs:enumeration>
|
158
|
-
<xs:enumeration value="SEC_NOCACHE">
|
159
|
-
<xs:annotation>
|
160
|
-
<xs:documentation>Sets all pages to be non-cachable.</xs:documentation>
|
161
|
-
</xs:annotation>
|
162
|
-
</xs:enumeration>
|
163
|
-
<xs:enumeration value="SEC_RESERVE">
|
164
|
-
<xs:annotation>
|
165
|
-
<xs:documentation>Specifies that when a view of the file is mapped into a process address space, the entire range of pages is reserved for later use by the process rather than committed. Only valid if the file mapping is backed by the operating system paging file.</xs:documentation>
|
166
|
-
</xs:annotation>
|
167
|
-
</xs:enumeration>
|
168
|
-
<xs:enumeration value="SEC_WRITECOMBINE">
|
169
|
-
<xs:annotation>
|
170
|
-
<xs:documentation>Sets all pages to be write-combined.</xs:documentation>
|
171
|
-
</xs:annotation>
|
172
|
-
</xs:enumeration>
|
173
|
-
</xs:restriction>
|
174
|
-
</xs:simpleType>
|
175
|
-
</xs:schema>
|
1
|
+
<?xml version='1.0' encoding='UTF-8'?>
|
2
|
+
<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:WinFilemappingObj="http://cybox.mitre.org/objects#WinFilemappingObject-1" xmlns:WinHandleObj="http://cybox.mitre.org/objects#WinHandleObject-2" xmlns:cyboxCommon="http://cybox.mitre.org/common-2" targetNamespace="http://cybox.mitre.org/objects#WinFilemappingObject-1" elementFormDefault="qualified" attributeFormDefault="unqualified" version="1.0">
|
3
|
+
<xs:annotation>
|
4
|
+
<xs:documentation>This schema was originally developed by The MITRE Corporation. The CybOX XML Schema implementation is maintained by The MITRE Corporation and developed by the open CybOX Community. For more information, including how to get involved in the effort and how to submit change requests, please visit the CybOX website at http://cybox.mitre.org.</xs:documentation>
|
5
|
+
<xs:appinfo>
|
6
|
+
<schema>Win_Filemapping_Object</schema>
|
7
|
+
<version>1.0</version>
|
8
|
+
<date>01/22/2014</date>
|
9
|
+
<short_description>The following specifies the fields and types that compose this defined CybOX Object type. Each defined object is an extension of the abstract ObjectPropertiesType, defined in CybOX Common. For more information on this extension mechanism, please see the CybOX Specification. This document is intended for developers and assumes some familiarity with XML. </short_description>
|
10
|
+
<terms_of_use>Copyright (c) 2012-2014, The MITRE Corporation. All rights reserved. The contents of this file are subject to the terms of the CybOX License located at http://cybox.mitre.org/about/termsofuse.html. See the CybOX License for the specific language governing permissions and limitations for use of this schema. When distributing copies of the CybOX Schema, this license header must be included.</terms_of_use>
|
11
|
+
</xs:appinfo>
|
12
|
+
</xs:annotation>
|
13
|
+
<xs:import namespace="http://cybox.mitre.org/common-2" schemaLocation="../cybox_common.xsd"/>
|
14
|
+
<xs:import namespace="http://cybox.mitre.org/objects#WinHandleObject-2" schemaLocation="Win_Handle_Object.xsd"/>
|
15
|
+
<xs:element name="Windows_Filemapping" type="WinFilemappingObj:WindowsFilemappingObjectType">
|
16
|
+
<xs:annotation>
|
17
|
+
<xs:documentation>The Windows_Filemapping object is intended to characterize Windows file mappings.</xs:documentation>
|
18
|
+
<xs:documentation>For more information, please see http://msdn.microsoft.com/en-us/library/windows/desktop/aa366537(v=vs.85).aspx.</xs:documentation>
|
19
|
+
</xs:annotation>
|
20
|
+
</xs:element>
|
21
|
+
<xs:complexType name="WindowsFilemappingObjectType" mixed="false">
|
22
|
+
<xs:annotation>
|
23
|
+
<xs:documentation>The WindowsFilemappingObjectType type is intended to characterize Windows file mapping objects.</xs:documentation>
|
24
|
+
</xs:annotation>
|
25
|
+
<xs:complexContent>
|
26
|
+
<xs:extension base="cyboxCommon:ObjectPropertiesType">
|
27
|
+
<xs:sequence>
|
28
|
+
<xs:element minOccurs="0" name="Name" type="cyboxCommon:StringObjectPropertyType">
|
29
|
+
<xs:annotation>
|
30
|
+
<xs:documentation>The Name field specifies the name of the file mapping.</xs:documentation>
|
31
|
+
</xs:annotation>
|
32
|
+
</xs:element>
|
33
|
+
<xs:element minOccurs="0" name="File_Handle" type="WinHandleObj:WindowsHandleObjectType">
|
34
|
+
<xs:annotation>
|
35
|
+
<xs:documentation>The File_Handle field specifies the Windows handle to the file from which the file mapping was created. It uses the WindowsHandleObjectType from the imported CybOX Windows Handle Object.</xs:documentation>
|
36
|
+
</xs:annotation>
|
37
|
+
</xs:element>
|
38
|
+
<xs:element minOccurs="0" name="Handle" type="WinHandleObj:WindowsHandleObjectType">
|
39
|
+
<xs:annotation>
|
40
|
+
<xs:documentation>The Handle field specifies the Windows handle to the file mapping. It uses the WindowsHandleObjectType from the imported CybOX Windows Handle Object.</xs:documentation>
|
41
|
+
</xs:annotation>
|
42
|
+
</xs:element>
|
43
|
+
<xs:element minOccurs="0" name="Page_Protection_Value" type="WinFilemappingObj:PageProtectionValueType">
|
44
|
+
<xs:annotation>
|
45
|
+
<xs:documentation>The Page_Protection field specifies the page protection value (i.e. PAGE_) specified for the file mapping.</xs:documentation>
|
46
|
+
</xs:annotation>
|
47
|
+
</xs:element>
|
48
|
+
<xs:element maxOccurs="unbounded" minOccurs="0" name="Page_Protection_Attribute" type="WinFilemappingObj:PageProtectionAttributeType">
|
49
|
+
<xs:annotation>
|
50
|
+
<xs:documentation>The Page_Protection_Attribute field specifies a page protection attribute (i.e. SEC_) to be used in combination with the page protection value captured in the Page_Protection_Value field. One or more such attributes can be specified using this field.</xs:documentation>
|
51
|
+
</xs:annotation>
|
52
|
+
</xs:element>
|
53
|
+
<xs:element minOccurs="0" name="Maximum_Size" type="cyboxCommon:UnsignedLongObjectPropertyType">
|
54
|
+
<xs:annotation>
|
55
|
+
<xs:documentation>The Maximum_Size field specifies the maximum allowed size for the file mapping, in bytes. This value is typically initialized upon creation of the file mapping.</xs:documentation>
|
56
|
+
</xs:annotation>
|
57
|
+
</xs:element>
|
58
|
+
<xs:element minOccurs="0" name="Actual_Size" type="cyboxCommon:UnsignedLongObjectPropertyType">
|
59
|
+
<xs:annotation>
|
60
|
+
<xs:documentation>The Actual_Size field captures the actual size of the file mapping, in bytes.</xs:documentation>
|
61
|
+
</xs:annotation>
|
62
|
+
</xs:element>
|
63
|
+
<xs:element minOccurs="0" name="Security_Attributes" type="cyboxCommon:StringObjectPropertyType">
|
64
|
+
<xs:annotation>
|
65
|
+
<xs:documentation>The Security_Attributes field specifies the Windows security attributes for the file mapping.</xs:documentation>
|
66
|
+
</xs:annotation>
|
67
|
+
</xs:element>
|
68
|
+
</xs:sequence>
|
69
|
+
</xs:extension>
|
70
|
+
</xs:complexContent>
|
71
|
+
</xs:complexType>
|
72
|
+
<xs:complexType name="PageProtectionValueType">
|
73
|
+
<xs:annotation>
|
74
|
+
<xs:documentation>The PageProtectionValueType specifies Windows file mapping page protection value types (i.e. PAGE_) via a union of the PageProtectionValueEnum type and the atomic xs:string type. Its base type is the CybOX Core BaseObjectPropertyType, for permitting complex (i.e. regular-expression based) specifications.</xs:documentation>
|
75
|
+
</xs:annotation>
|
76
|
+
<xs:simpleContent>
|
77
|
+
<xs:restriction base="cyboxCommon:BaseObjectPropertyType">
|
78
|
+
<xs:simpleType>
|
79
|
+
<xs:union memberTypes="WinFilemappingObj:PageProtectionValueEnum xs:string"/>
|
80
|
+
</xs:simpleType>
|
81
|
+
</xs:restriction>
|
82
|
+
</xs:simpleContent>
|
83
|
+
</xs:complexType>
|
84
|
+
<xs:simpleType name="PageProtectionValueEnum">
|
85
|
+
<xs:annotation>
|
86
|
+
<xs:documentation>The PageProtectionValueEnum is an enumeration of Windows file mapping page protection value types.</xs:documentation>
|
87
|
+
</xs:annotation>
|
88
|
+
<xs:restriction base="xs:string">
|
89
|
+
<xs:enumeration value="PAGE_EXECUTE_READ">
|
90
|
+
<xs:annotation>
|
91
|
+
<xs:documentation>Specifies that the mapped view of the file represented by the file mapping can be mapped for read-only, copy-on-write, or execute access.</xs:documentation>
|
92
|
+
</xs:annotation>
|
93
|
+
</xs:enumeration>
|
94
|
+
<xs:enumeration value="PAGE_EXECUTE_READWRITE">
|
95
|
+
<xs:annotation>
|
96
|
+
<xs:documentation>Specifies that the mapped view of the file represented by the file mapping can be mapped for read-only, copy-on-write, read/write, or execute access.</xs:documentation>
|
97
|
+
</xs:annotation>
|
98
|
+
</xs:enumeration>
|
99
|
+
<xs:enumeration value="PAGE_EXECUTE_WRITECOPY">
|
100
|
+
<xs:annotation>
|
101
|
+
<xs:documentation>Specifies that the mapped view of the file represented by the file mapping can be mapped for read-only, copy-on-write, or execute access. This value is equivalent to PAGE_EXECUTE_READ.</xs:documentation>
|
102
|
+
</xs:annotation>
|
103
|
+
</xs:enumeration>
|
104
|
+
<xs:enumeration value="PAGE_READONLY">
|
105
|
+
<xs:annotation>
|
106
|
+
<xs:documentation>Specifies that the mapped view of the file represented by the file mapping can be mapped for read-only or copy-on-write access.</xs:documentation>
|
107
|
+
</xs:annotation>
|
108
|
+
</xs:enumeration>
|
109
|
+
<xs:enumeration value="PAGE_READWRITE">
|
110
|
+
<xs:annotation>
|
111
|
+
<xs:documentation>Specifies that the mapped view of the file represented by the file mapping can be mapped for read-only, copy-on-write, or read/write access.</xs:documentation>
|
112
|
+
</xs:annotation>
|
113
|
+
</xs:enumeration>
|
114
|
+
<xs:enumeration value="PAGE_WRITECOPY">
|
115
|
+
<xs:annotation>
|
116
|
+
<xs:documentation>Specifies that the mapped view of the file represented by the file mapping can be mapped for read-only or copy-on-write access. This value is equivalent to PAGE_READONLY.</xs:documentation>
|
117
|
+
</xs:annotation>
|
118
|
+
</xs:enumeration>
|
119
|
+
</xs:restriction>
|
120
|
+
</xs:simpleType>
|
121
|
+
<xs:complexType name="PageProtectionAttributeType">
|
122
|
+
<xs:annotation>
|
123
|
+
<xs:documentation>The PageProtectionValueType specifies the optional Windows file mapping page protection attribute types (i.e. SEC_) via a union of the PageProtectionAttributeEnum type and the atomic xs:string type. Its base type is the CybOX Core BaseObjectPropertyType, for permitting complex (i.e. regular-expression based) specifications.</xs:documentation>
|
124
|
+
</xs:annotation>
|
125
|
+
<xs:simpleContent>
|
126
|
+
<xs:restriction base="cyboxCommon:BaseObjectPropertyType">
|
127
|
+
<xs:simpleType>
|
128
|
+
<xs:union memberTypes="WinFilemappingObj:PageProtectionAttributeEnum xs:string"/>
|
129
|
+
</xs:simpleType>
|
130
|
+
</xs:restriction>
|
131
|
+
</xs:simpleContent>
|
132
|
+
</xs:complexType>
|
133
|
+
<xs:simpleType name="PageProtectionAttributeEnum">
|
134
|
+
<xs:annotation>
|
135
|
+
<xs:documentation>The PageProtectionAttributeEnum is an enumeration of Windows file mapping page protection attribute types.</xs:documentation>
|
136
|
+
</xs:annotation>
|
137
|
+
<xs:restriction base="xs:string">
|
138
|
+
<xs:enumeration value="SEC_COMMIT">
|
139
|
+
<xs:annotation>
|
140
|
+
<xs:documentation>Specifies that if the file mapping is backed by the operating system paging file, that when a view of the file is mapped into a process address space, the entire range of pages is committed rather than reserved.</xs:documentation>
|
141
|
+
</xs:annotation>
|
142
|
+
</xs:enumeration>
|
143
|
+
<xs:enumeration value="SEC_IMAGE">
|
144
|
+
<xs:annotation>
|
145
|
+
<xs:documentation>Specifies that the file mapped by the file mapping is an executable image file.</xs:documentation>
|
146
|
+
</xs:annotation>
|
147
|
+
</xs:enumeration>
|
148
|
+
<xs:enumeration value="SEC_IMAGE_NO_EXECUTE">
|
149
|
+
<xs:annotation>
|
150
|
+
<xs:documentation>Specifies that the file mapped by the file mapping is an executable image file that will not be executed and the loaded image file will have no forced integrity checks run.</xs:documentation>
|
151
|
+
</xs:annotation>
|
152
|
+
</xs:enumeration>
|
153
|
+
<xs:enumeration value="SEC_LARGE_PAGES">
|
154
|
+
<xs:annotation>
|
155
|
+
<xs:documentation>Enables large pages to be used for file mapping objects that are backed by the operating system paging file.</xs:documentation>
|
156
|
+
</xs:annotation>
|
157
|
+
</xs:enumeration>
|
158
|
+
<xs:enumeration value="SEC_NOCACHE">
|
159
|
+
<xs:annotation>
|
160
|
+
<xs:documentation>Sets all pages to be non-cachable.</xs:documentation>
|
161
|
+
</xs:annotation>
|
162
|
+
</xs:enumeration>
|
163
|
+
<xs:enumeration value="SEC_RESERVE">
|
164
|
+
<xs:annotation>
|
165
|
+
<xs:documentation>Specifies that when a view of the file is mapped into a process address space, the entire range of pages is reserved for later use by the process rather than committed. Only valid if the file mapping is backed by the operating system paging file.</xs:documentation>
|
166
|
+
</xs:annotation>
|
167
|
+
</xs:enumeration>
|
168
|
+
<xs:enumeration value="SEC_WRITECOMBINE">
|
169
|
+
<xs:annotation>
|
170
|
+
<xs:documentation>Sets all pages to be write-combined.</xs:documentation>
|
171
|
+
</xs:annotation>
|
172
|
+
</xs:enumeration>
|
173
|
+
</xs:restriction>
|
174
|
+
</xs:simpleType>
|
175
|
+
</xs:schema>
|
@@ -1,351 +1,351 @@
|
|
1
|
-
<?xml version='1.0' encoding='UTF-8'?>
|
2
|
-
<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:WinHandleObj="http://cybox.mitre.org/objects#WinHandleObject-2" xmlns:cyboxCommon="http://cybox.mitre.org/common-2" targetNamespace="http://cybox.mitre.org/objects#WinHandleObject-2" elementFormDefault="qualified" attributeFormDefault="unqualified" version="2.1">
|
3
|
-
<xs:annotation>
|
4
|
-
<xs:documentation>This schema was originally developed by The MITRE Corporation. The CybOX XML Schema implementation is maintained by The MITRE Corporation and developed by the open CybOX Community. For more information, including how to get involved in the effort and how to submit change requests, please visit the CybOX website at http://cybox.mitre.org.</xs:documentation>
|
5
|
-
<xs:appinfo>
|
6
|
-
<schema>Win_Handle_Object</schema>
|
7
|
-
<version>2.1</version>
|
8
|
-
<date>01/22/2014</date>
|
9
|
-
<short_description>The following specifies the fields and types that compose this defined CybOX Object type. Each defined object is an extension of the abstract ObjectPropertiesType, defined in CybOX Common. For more information on this extension mechanism, please see the CybOX Specification. This document is intended for developers and assumes some familiarity with XML. </short_description>
|
10
|
-
<terms_of_use>Copyright (c) 2012-2014, The MITRE Corporation. All rights reserved. The contents of this file are subject to the terms of the CybOX License located at http://cybox.mitre.org/about/termsofuse.html. See the CybOX License for the specific language governing permissions and limitations for use of this schema. When distributing copies of the CybOX Schema, this license header must be included.</terms_of_use>
|
11
|
-
</xs:appinfo>
|
12
|
-
</xs:annotation>
|
13
|
-
<xs:import namespace="http://cybox.mitre.org/common-2" schemaLocation="../cybox_common.xsd"/>
|
14
|
-
<xs:element name="Windows_Handle" type="WinHandleObj:WindowsHandleObjectType">
|
15
|
-
<xs:annotation>
|
16
|
-
<xs:documentation>The Windows_Handle object is intended to characterize Windows handles.</xs:documentation>
|
17
|
-
</xs:annotation>
|
18
|
-
</xs:element>
|
19
|
-
<xs:complexType name="WindowsHandleObjectType" mixed="false">
|
20
|
-
<xs:annotation>
|
21
|
-
<xs:documentation>The WindowsHandleObjectType type is intended to characterize Windows handles.</xs:documentation>
|
22
|
-
</xs:annotation>
|
23
|
-
<xs:complexContent>
|
24
|
-
<xs:extension base="cyboxCommon:ObjectPropertiesType">
|
25
|
-
<xs:sequence>
|
26
|
-
<xs:element name="ID" type="cyboxCommon:UnsignedIntegerObjectPropertyType" minOccurs="0">
|
27
|
-
<xs:annotation>
|
28
|
-
<xs:documentation>The ID field refers to the unique number used to identify the handle.</xs:documentation>
|
29
|
-
</xs:annotation>
|
30
|
-
</xs:element>
|
31
|
-
<xs:element name="Name" type="cyboxCommon:StringObjectPropertyType" minOccurs="0" maxOccurs="1">
|
32
|
-
<xs:annotation>
|
33
|
-
<xs:documentation>The Name field specifies the name of the handle.</xs:documentation>
|
34
|
-
</xs:annotation>
|
35
|
-
</xs:element>
|
36
|
-
<xs:element name="Type" type="WinHandleObj:HandleType" minOccurs="0">
|
37
|
-
<xs:annotation>
|
38
|
-
<xs:documentation>The Type field specifies the handle type, which is equivalent to the type of Windows object that the handle refers to.</xs:documentation>
|
39
|
-
</xs:annotation>
|
40
|
-
</xs:element>
|
41
|
-
<xs:element name="Object_Address" type="cyboxCommon:UnsignedLongObjectPropertyType" minOccurs="0">
|
42
|
-
<xs:annotation>
|
43
|
-
<xs:documentation>The Object_Address field specifies the address of the Windows object that the handle refers to.</xs:documentation>
|
44
|
-
</xs:annotation>
|
45
|
-
</xs:element>
|
46
|
-
<xs:element name="Access_Mask" type="cyboxCommon:UnsignedLongObjectPropertyType" minOccurs="0">
|
47
|
-
<xs:annotation>
|
48
|
-
<xs:documentation>The Access_Mask field specifies the access bitmask of the handle.</xs:documentation>
|
49
|
-
</xs:annotation>
|
50
|
-
</xs:element>
|
51
|
-
<xs:element name="Pointer_Count" type="cyboxCommon:UnsignedLongObjectPropertyType" minOccurs="0" maxOccurs="1">
|
52
|
-
<xs:annotation>
|
53
|
-
<xs:documentation>The Pointer_Count field specifies the count of pointer references to the Windows object that the handle refers to.</xs:documentation>
|
54
|
-
</xs:annotation>
|
55
|
-
</xs:element>
|
56
|
-
</xs:sequence>
|
57
|
-
</xs:extension>
|
58
|
-
</xs:complexContent>
|
59
|
-
</xs:complexType>
|
60
|
-
<xs:complexType name="WindowsHandleListType">
|
61
|
-
<xs:annotation>
|
62
|
-
<xs:documentation>The WindowsHandleListType type specifies a list of Windows handles, for re-use in other objects.</xs:documentation>
|
63
|
-
</xs:annotation>
|
64
|
-
<xs:sequence>
|
65
|
-
<xs:element name="Handle" type="WinHandleObj:WindowsHandleObjectType" maxOccurs="unbounded">
|
66
|
-
<xs:annotation>
|
67
|
-
<xs:documentation>The Handle field characterizes a single Windows handle.</xs:documentation>
|
68
|
-
</xs:annotation>
|
69
|
-
</xs:element>
|
70
|
-
</xs:sequence>
|
71
|
-
</xs:complexType>
|
72
|
-
<xs:complexType name="HandleType">
|
73
|
-
<xs:annotation>
|
74
|
-
<xs:documentation>HandleType specifies Windows handle types via a union of the HandleTypeEnum type and the atomic xs:string type. Its base type is the CybOX Core BaseObjectPropertyType, for permitting complex (i.e. regular-expression based) specifications.</xs:documentation>
|
75
|
-
</xs:annotation>
|
76
|
-
<xs:simpleContent>
|
77
|
-
<xs:restriction base="cyboxCommon:BaseObjectPropertyType">
|
78
|
-
<xs:simpleType>
|
79
|
-
<xs:union memberTypes="WinHandleObj:HandleTypeEnum xs:string"/>
|
80
|
-
</xs:simpleType>
|
81
|
-
<xs:attribute name="datatype" type="cyboxCommon:DatatypeEnum" fixed="string">
|
82
|
-
<xs:annotation>
|
83
|
-
<xs:documentation>This attribute is optional and specifies the expected type for the value of the specified property.</xs:documentation>
|
84
|
-
</xs:annotation>
|
85
|
-
</xs:attribute>
|
86
|
-
</xs:restriction>
|
87
|
-
</xs:simpleContent>
|
88
|
-
</xs:complexType>
|
89
|
-
<xs:simpleType name="HandleTypeEnum">
|
90
|
-
<xs:annotation>
|
91
|
-
<xs:documentation>The WindowsHandleType is a non-exhaustive enumeration of Windows handle types.</xs:documentation>
|
92
|
-
</xs:annotation>
|
93
|
-
<xs:restriction base="xs:string">
|
94
|
-
<xs:enumeration value="AccessToken">
|
95
|
-
<xs:annotation>
|
96
|
-
<xs:documentation>Specifies an access token handle.</xs:documentation>
|
97
|
-
</xs:annotation>
|
98
|
-
</xs:enumeration>
|
99
|
-
<xs:enumeration value="Event">
|
100
|
-
<xs:annotation>
|
101
|
-
<xs:documentation>Specifies an event handle.</xs:documentation>
|
102
|
-
</xs:annotation>
|
103
|
-
</xs:enumeration>
|
104
|
-
<xs:enumeration value="File">
|
105
|
-
<xs:annotation>
|
106
|
-
<xs:documentation>Specifies a file handle.</xs:documentation>
|
107
|
-
</xs:annotation>
|
108
|
-
</xs:enumeration>
|
109
|
-
<xs:enumeration value="FileMapping">
|
110
|
-
<xs:annotation>
|
111
|
-
<xs:documentation>Specifies a file mapping handle.</xs:documentation>
|
112
|
-
</xs:annotation>
|
113
|
-
</xs:enumeration>
|
114
|
-
<xs:enumeration value="Job">
|
115
|
-
<xs:annotation>
|
116
|
-
<xs:documentation>Specifies a job handle.</xs:documentation>
|
117
|
-
</xs:annotation>
|
118
|
-
</xs:enumeration>
|
119
|
-
<xs:enumeration value="IOCompletionPort">
|
120
|
-
<xs:annotation>
|
121
|
-
<xs:documentation>Specifies an IO completion port handle.</xs:documentation>
|
122
|
-
</xs:annotation>
|
123
|
-
</xs:enumeration>
|
124
|
-
<xs:enumeration value="Mailslot">
|
125
|
-
<xs:annotation>
|
126
|
-
<xs:documentation>Specifies a mailslot handle.</xs:documentation>
|
127
|
-
</xs:annotation>
|
128
|
-
</xs:enumeration>
|
129
|
-
<xs:enumeration value="Mutex">
|
130
|
-
<xs:annotation>
|
131
|
-
<xs:documentation>Specifies a mutex handle.</xs:documentation>
|
132
|
-
</xs:annotation>
|
133
|
-
</xs:enumeration>
|
134
|
-
<xs:enumeration value="NamedPipe">
|
135
|
-
<xs:annotation>
|
136
|
-
<xs:documentation>Specifies a named pipe handle.</xs:documentation>
|
137
|
-
</xs:annotation>
|
138
|
-
</xs:enumeration>
|
139
|
-
<xs:enumeration value="Pipe">
|
140
|
-
<xs:annotation>
|
141
|
-
<xs:documentation>Specifies a pipe handle.</xs:documentation>
|
142
|
-
</xs:annotation>
|
143
|
-
</xs:enumeration>
|
144
|
-
<xs:enumeration value="Process">
|
145
|
-
<xs:annotation>
|
146
|
-
<xs:documentation>Specifies a process handle.</xs:documentation>
|
147
|
-
</xs:annotation>
|
148
|
-
</xs:enumeration>
|
149
|
-
<xs:enumeration value="Semaphore">
|
150
|
-
<xs:annotation>
|
151
|
-
<xs:documentation>Specifies a semaphore handle.</xs:documentation>
|
152
|
-
</xs:annotation>
|
153
|
-
</xs:enumeration>
|
154
|
-
<xs:enumeration value="Thread">
|
155
|
-
<xs:annotation>
|
156
|
-
<xs:documentation>Specifies a thread handle.</xs:documentation>
|
157
|
-
</xs:annotation>
|
158
|
-
</xs:enumeration>
|
159
|
-
<xs:enumeration value="Transaction">
|
160
|
-
<xs:annotation>
|
161
|
-
<xs:documentation>Specifies a transaction handle.</xs:documentation>
|
162
|
-
</xs:annotation>
|
163
|
-
</xs:enumeration>
|
164
|
-
<xs:enumeration value="WaitableTimer">
|
165
|
-
<xs:annotation>
|
166
|
-
<xs:documentation>Specifies a waitable timer handle.</xs:documentation>
|
167
|
-
</xs:annotation>
|
168
|
-
</xs:enumeration>
|
169
|
-
<xs:enumeration value="RegistryKey">
|
170
|
-
<xs:annotation>
|
171
|
-
<xs:documentation>Specifies a registry key handle.</xs:documentation>
|
172
|
-
</xs:annotation>
|
173
|
-
</xs:enumeration>
|
174
|
-
<xs:enumeration value="Window">
|
175
|
-
<xs:annotation>
|
176
|
-
<xs:documentation>Specifies a window handle.</xs:documentation>
|
177
|
-
</xs:annotation>
|
178
|
-
</xs:enumeration>
|
179
|
-
<xs:enumeration value="ServiceControlManager">
|
180
|
-
<xs:annotation>
|
181
|
-
<xs:documentation>Specifies a service control manager handle.</xs:documentation>
|
182
|
-
</xs:annotation>
|
183
|
-
</xs:enumeration>
|
184
|
-
<xs:enumeration value="CommunicationsDevice">
|
185
|
-
<xs:annotation>
|
186
|
-
<xs:documentation>Specifies a communications device handle.</xs:documentation>
|
187
|
-
</xs:annotation>
|
188
|
-
</xs:enumeration>
|
189
|
-
<xs:enumeration value="ConsoleInput">
|
190
|
-
<xs:annotation>
|
191
|
-
<xs:documentation>Specifies a console input handle.</xs:documentation>
|
192
|
-
</xs:annotation>
|
193
|
-
</xs:enumeration>
|
194
|
-
<xs:enumeration value="ConsoleScreenBuffer">
|
195
|
-
<xs:annotation>
|
196
|
-
<xs:documentation>Specifies a console screen buffer handle.</xs:documentation>
|
197
|
-
</xs:annotation>
|
198
|
-
</xs:enumeration>
|
199
|
-
<xs:enumeration value="MemoryResourceNotification">
|
200
|
-
<xs:annotation>
|
201
|
-
<xs:documentation>Specifies a memory resource notification handle.</xs:documentation>
|
202
|
-
</xs:annotation>
|
203
|
-
</xs:enumeration>
|
204
|
-
<xs:enumeration value="Directory">
|
205
|
-
<xs:annotation>
|
206
|
-
<xs:documentation>Specifies a directory handle.</xs:documentation>
|
207
|
-
</xs:annotation>
|
208
|
-
</xs:enumeration>
|
209
|
-
<xs:enumeration value="SymbolicLink">
|
210
|
-
<xs:annotation>
|
211
|
-
<xs:documentation>Specifies a symbolic link handle.</xs:documentation>
|
212
|
-
</xs:annotation>
|
213
|
-
</xs:enumeration>
|
214
|
-
<xs:enumeration value="Token">
|
215
|
-
<xs:annotation>
|
216
|
-
<xs:documentation>Specifies a token handle.</xs:documentation>
|
217
|
-
</xs:annotation>
|
218
|
-
</xs:enumeration>
|
219
|
-
<xs:enumeration value="Profile">
|
220
|
-
<xs:annotation>
|
221
|
-
<xs:documentation>Specifies a profile handle.</xs:documentation>
|
222
|
-
</xs:annotation>
|
223
|
-
</xs:enumeration>
|
224
|
-
<xs:enumeration value="WindowStation">
|
225
|
-
<xs:annotation>
|
226
|
-
<xs:documentation>Specifies a window station handle.</xs:documentation>
|
227
|
-
</xs:annotation>
|
228
|
-
</xs:enumeration>
|
229
|
-
<xs:enumeration value="Port">
|
230
|
-
<xs:annotation>
|
231
|
-
<xs:documentation>Specifies a port handle.</xs:documentation>
|
232
|
-
</xs:annotation>
|
233
|
-
</xs:enumeration>
|
234
|
-
<xs:enumeration value="WaitablePort">
|
235
|
-
<xs:annotation>
|
236
|
-
<xs:documentation>Specifies a waitable port handle.</xs:documentation>
|
237
|
-
</xs:annotation>
|
238
|
-
</xs:enumeration>
|
239
|
-
<xs:enumeration value="Controller">
|
240
|
-
<xs:annotation>
|
241
|
-
<xs:documentation>Specifies a controller handle.</xs:documentation>
|
242
|
-
</xs:annotation>
|
243
|
-
</xs:enumeration>
|
244
|
-
<xs:enumeration value="Driver">
|
245
|
-
<xs:annotation>
|
246
|
-
<xs:documentation>Specifies a driver handle.</xs:documentation>
|
247
|
-
</xs:annotation>
|
248
|
-
</xs:enumeration>
|
249
|
-
<xs:enumeration value="Desktop">
|
250
|
-
<xs:annotation>
|
251
|
-
<xs:documentation>Specifies a desktop handle.</xs:documentation>
|
252
|
-
</xs:annotation>
|
253
|
-
</xs:enumeration>
|
254
|
-
<xs:enumeration value="Adapter">
|
255
|
-
<xs:annotation>
|
256
|
-
<xs:documentation>Specifies an adapter handle.</xs:documentation>
|
257
|
-
</xs:annotation>
|
258
|
-
</xs:enumeration>
|
259
|
-
<xs:enumeration value="Bitmap">
|
260
|
-
<xs:annotation>
|
261
|
-
<xs:documentation>Specifies a bitmap handle.</xs:documentation>
|
262
|
-
</xs:annotation>
|
263
|
-
</xs:enumeration>
|
264
|
-
<xs:enumeration value="Brush">
|
265
|
-
<xs:annotation>
|
266
|
-
<xs:documentation>Specifies a brush handle.</xs:documentation>
|
267
|
-
</xs:annotation>
|
268
|
-
</xs:enumeration>
|
269
|
-
<xs:enumeration value="ColorSpace">
|
270
|
-
<xs:annotation>
|
271
|
-
<xs:documentation>Specifies a color space handle.</xs:documentation>
|
272
|
-
</xs:annotation>
|
273
|
-
</xs:enumeration>
|
274
|
-
<xs:enumeration value="Cursor">
|
275
|
-
<xs:annotation>
|
276
|
-
<xs:documentation>Specifies a cursor handle.</xs:documentation>
|
277
|
-
</xs:annotation>
|
278
|
-
</xs:enumeration>
|
279
|
-
<xs:enumeration value="DeviceContext">
|
280
|
-
<xs:annotation>
|
281
|
-
<xs:documentation>Specifies a device context handle.</xs:documentation>
|
282
|
-
</xs:annotation>
|
283
|
-
</xs:enumeration>
|
284
|
-
<xs:enumeration value="EnhancedMetafile">
|
285
|
-
<xs:annotation>
|
286
|
-
<xs:documentation>Specifies an enhanced metafile handle.</xs:documentation>
|
287
|
-
</xs:annotation>
|
288
|
-
</xs:enumeration>
|
289
|
-
<xs:enumeration value="Font">
|
290
|
-
<xs:annotation>
|
291
|
-
<xs:documentation>Specifies a font handle.</xs:documentation>
|
292
|
-
</xs:annotation>
|
293
|
-
</xs:enumeration>
|
294
|
-
<xs:enumeration value="GDIObject">
|
295
|
-
<xs:annotation>
|
296
|
-
<xs:documentation>Specifies a GDI object handle.</xs:documentation>
|
297
|
-
</xs:annotation>
|
298
|
-
</xs:enumeration>
|
299
|
-
<xs:enumeration value="Hook">
|
300
|
-
<xs:annotation>
|
301
|
-
<xs:documentation>Specifies a hook handle.</xs:documentation>
|
302
|
-
</xs:annotation>
|
303
|
-
</xs:enumeration>
|
304
|
-
<xs:enumeration value="Icon">
|
305
|
-
<xs:annotation>
|
306
|
-
<xs:documentation>Specifies an icon handle.</xs:documentation>
|
307
|
-
</xs:annotation>
|
308
|
-
</xs:enumeration>
|
309
|
-
<xs:enumeration value="Instance">
|
310
|
-
<xs:annotation>
|
311
|
-
<xs:documentation>Specifies a module instance handle.</xs:documentation>
|
312
|
-
</xs:annotation>
|
313
|
-
</xs:enumeration>
|
314
|
-
<xs:enumeration value="Menu">
|
315
|
-
<xs:annotation>
|
316
|
-
<xs:documentation>Specifies a menu handle.</xs:documentation>
|
317
|
-
</xs:annotation>
|
318
|
-
</xs:enumeration>
|
319
|
-
<xs:enumeration value="Metafile">
|
320
|
-
<xs:annotation>
|
321
|
-
<xs:documentation>Specifies a metafile handle.</xs:documentation>
|
322
|
-
</xs:annotation>
|
323
|
-
</xs:enumeration>
|
324
|
-
<xs:enumeration value="DisplayMonitor">
|
325
|
-
<xs:annotation>
|
326
|
-
<xs:documentation>Specifies a display monitor handle.</xs:documentation>
|
327
|
-
</xs:annotation>
|
328
|
-
</xs:enumeration>
|
329
|
-
<xs:enumeration value="Palette">
|
330
|
-
<xs:annotation>
|
331
|
-
<xs:documentation>Specifies a palette handle.</xs:documentation>
|
332
|
-
</xs:annotation>
|
333
|
-
</xs:enumeration>
|
334
|
-
<xs:enumeration value="Pen">
|
335
|
-
<xs:annotation>
|
336
|
-
<xs:documentation>Specifies a pen handle.</xs:documentation>
|
337
|
-
</xs:annotation>
|
338
|
-
</xs:enumeration>
|
339
|
-
<xs:enumeration value="Region">
|
340
|
-
<xs:annotation>
|
341
|
-
<xs:documentation>Specifies a region handle.</xs:documentation>
|
342
|
-
</xs:annotation>
|
343
|
-
</xs:enumeration>
|
344
|
-
<xs:enumeration value="Resource">
|
345
|
-
<xs:annotation>
|
346
|
-
<xs:documentation>Specifies a resource handle.</xs:documentation>
|
347
|
-
</xs:annotation>
|
348
|
-
</xs:enumeration>
|
349
|
-
</xs:restriction>
|
350
|
-
</xs:simpleType>
|
351
|
-
</xs:schema>
|
1
|
+
<?xml version='1.0' encoding='UTF-8'?>
|
2
|
+
<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:WinHandleObj="http://cybox.mitre.org/objects#WinHandleObject-2" xmlns:cyboxCommon="http://cybox.mitre.org/common-2" targetNamespace="http://cybox.mitre.org/objects#WinHandleObject-2" elementFormDefault="qualified" attributeFormDefault="unqualified" version="2.1">
|
3
|
+
<xs:annotation>
|
4
|
+
<xs:documentation>This schema was originally developed by The MITRE Corporation. The CybOX XML Schema implementation is maintained by The MITRE Corporation and developed by the open CybOX Community. For more information, including how to get involved in the effort and how to submit change requests, please visit the CybOX website at http://cybox.mitre.org.</xs:documentation>
|
5
|
+
<xs:appinfo>
|
6
|
+
<schema>Win_Handle_Object</schema>
|
7
|
+
<version>2.1</version>
|
8
|
+
<date>01/22/2014</date>
|
9
|
+
<short_description>The following specifies the fields and types that compose this defined CybOX Object type. Each defined object is an extension of the abstract ObjectPropertiesType, defined in CybOX Common. For more information on this extension mechanism, please see the CybOX Specification. This document is intended for developers and assumes some familiarity with XML. </short_description>
|
10
|
+
<terms_of_use>Copyright (c) 2012-2014, The MITRE Corporation. All rights reserved. The contents of this file are subject to the terms of the CybOX License located at http://cybox.mitre.org/about/termsofuse.html. See the CybOX License for the specific language governing permissions and limitations for use of this schema. When distributing copies of the CybOX Schema, this license header must be included.</terms_of_use>
|
11
|
+
</xs:appinfo>
|
12
|
+
</xs:annotation>
|
13
|
+
<xs:import namespace="http://cybox.mitre.org/common-2" schemaLocation="../cybox_common.xsd"/>
|
14
|
+
<xs:element name="Windows_Handle" type="WinHandleObj:WindowsHandleObjectType">
|
15
|
+
<xs:annotation>
|
16
|
+
<xs:documentation>The Windows_Handle object is intended to characterize Windows handles.</xs:documentation>
|
17
|
+
</xs:annotation>
|
18
|
+
</xs:element>
|
19
|
+
<xs:complexType name="WindowsHandleObjectType" mixed="false">
|
20
|
+
<xs:annotation>
|
21
|
+
<xs:documentation>The WindowsHandleObjectType type is intended to characterize Windows handles.</xs:documentation>
|
22
|
+
</xs:annotation>
|
23
|
+
<xs:complexContent>
|
24
|
+
<xs:extension base="cyboxCommon:ObjectPropertiesType">
|
25
|
+
<xs:sequence>
|
26
|
+
<xs:element name="ID" type="cyboxCommon:UnsignedIntegerObjectPropertyType" minOccurs="0">
|
27
|
+
<xs:annotation>
|
28
|
+
<xs:documentation>The ID field refers to the unique number used to identify the handle.</xs:documentation>
|
29
|
+
</xs:annotation>
|
30
|
+
</xs:element>
|
31
|
+
<xs:element name="Name" type="cyboxCommon:StringObjectPropertyType" minOccurs="0" maxOccurs="1">
|
32
|
+
<xs:annotation>
|
33
|
+
<xs:documentation>The Name field specifies the name of the handle.</xs:documentation>
|
34
|
+
</xs:annotation>
|
35
|
+
</xs:element>
|
36
|
+
<xs:element name="Type" type="WinHandleObj:HandleType" minOccurs="0">
|
37
|
+
<xs:annotation>
|
38
|
+
<xs:documentation>The Type field specifies the handle type, which is equivalent to the type of Windows object that the handle refers to.</xs:documentation>
|
39
|
+
</xs:annotation>
|
40
|
+
</xs:element>
|
41
|
+
<xs:element name="Object_Address" type="cyboxCommon:UnsignedLongObjectPropertyType" minOccurs="0">
|
42
|
+
<xs:annotation>
|
43
|
+
<xs:documentation>The Object_Address field specifies the address of the Windows object that the handle refers to.</xs:documentation>
|
44
|
+
</xs:annotation>
|
45
|
+
</xs:element>
|
46
|
+
<xs:element name="Access_Mask" type="cyboxCommon:UnsignedLongObjectPropertyType" minOccurs="0">
|
47
|
+
<xs:annotation>
|
48
|
+
<xs:documentation>The Access_Mask field specifies the access bitmask of the handle.</xs:documentation>
|
49
|
+
</xs:annotation>
|
50
|
+
</xs:element>
|
51
|
+
<xs:element name="Pointer_Count" type="cyboxCommon:UnsignedLongObjectPropertyType" minOccurs="0" maxOccurs="1">
|
52
|
+
<xs:annotation>
|
53
|
+
<xs:documentation>The Pointer_Count field specifies the count of pointer references to the Windows object that the handle refers to.</xs:documentation>
|
54
|
+
</xs:annotation>
|
55
|
+
</xs:element>
|
56
|
+
</xs:sequence>
|
57
|
+
</xs:extension>
|
58
|
+
</xs:complexContent>
|
59
|
+
</xs:complexType>
|
60
|
+
<xs:complexType name="WindowsHandleListType">
|
61
|
+
<xs:annotation>
|
62
|
+
<xs:documentation>The WindowsHandleListType type specifies a list of Windows handles, for re-use in other objects.</xs:documentation>
|
63
|
+
</xs:annotation>
|
64
|
+
<xs:sequence>
|
65
|
+
<xs:element name="Handle" type="WinHandleObj:WindowsHandleObjectType" maxOccurs="unbounded">
|
66
|
+
<xs:annotation>
|
67
|
+
<xs:documentation>The Handle field characterizes a single Windows handle.</xs:documentation>
|
68
|
+
</xs:annotation>
|
69
|
+
</xs:element>
|
70
|
+
</xs:sequence>
|
71
|
+
</xs:complexType>
|
72
|
+
<xs:complexType name="HandleType">
|
73
|
+
<xs:annotation>
|
74
|
+
<xs:documentation>HandleType specifies Windows handle types via a union of the HandleTypeEnum type and the atomic xs:string type. Its base type is the CybOX Core BaseObjectPropertyType, for permitting complex (i.e. regular-expression based) specifications.</xs:documentation>
|
75
|
+
</xs:annotation>
|
76
|
+
<xs:simpleContent>
|
77
|
+
<xs:restriction base="cyboxCommon:BaseObjectPropertyType">
|
78
|
+
<xs:simpleType>
|
79
|
+
<xs:union memberTypes="WinHandleObj:HandleTypeEnum xs:string"/>
|
80
|
+
</xs:simpleType>
|
81
|
+
<xs:attribute name="datatype" type="cyboxCommon:DatatypeEnum" fixed="string">
|
82
|
+
<xs:annotation>
|
83
|
+
<xs:documentation>This attribute is optional and specifies the expected type for the value of the specified property.</xs:documentation>
|
84
|
+
</xs:annotation>
|
85
|
+
</xs:attribute>
|
86
|
+
</xs:restriction>
|
87
|
+
</xs:simpleContent>
|
88
|
+
</xs:complexType>
|
89
|
+
<xs:simpleType name="HandleTypeEnum">
|
90
|
+
<xs:annotation>
|
91
|
+
<xs:documentation>The WindowsHandleType is a non-exhaustive enumeration of Windows handle types.</xs:documentation>
|
92
|
+
</xs:annotation>
|
93
|
+
<xs:restriction base="xs:string">
|
94
|
+
<xs:enumeration value="AccessToken">
|
95
|
+
<xs:annotation>
|
96
|
+
<xs:documentation>Specifies an access token handle.</xs:documentation>
|
97
|
+
</xs:annotation>
|
98
|
+
</xs:enumeration>
|
99
|
+
<xs:enumeration value="Event">
|
100
|
+
<xs:annotation>
|
101
|
+
<xs:documentation>Specifies an event handle.</xs:documentation>
|
102
|
+
</xs:annotation>
|
103
|
+
</xs:enumeration>
|
104
|
+
<xs:enumeration value="File">
|
105
|
+
<xs:annotation>
|
106
|
+
<xs:documentation>Specifies a file handle.</xs:documentation>
|
107
|
+
</xs:annotation>
|
108
|
+
</xs:enumeration>
|
109
|
+
<xs:enumeration value="FileMapping">
|
110
|
+
<xs:annotation>
|
111
|
+
<xs:documentation>Specifies a file mapping handle.</xs:documentation>
|
112
|
+
</xs:annotation>
|
113
|
+
</xs:enumeration>
|
114
|
+
<xs:enumeration value="Job">
|
115
|
+
<xs:annotation>
|
116
|
+
<xs:documentation>Specifies a job handle.</xs:documentation>
|
117
|
+
</xs:annotation>
|
118
|
+
</xs:enumeration>
|
119
|
+
<xs:enumeration value="IOCompletionPort">
|
120
|
+
<xs:annotation>
|
121
|
+
<xs:documentation>Specifies an IO completion port handle.</xs:documentation>
|
122
|
+
</xs:annotation>
|
123
|
+
</xs:enumeration>
|
124
|
+
<xs:enumeration value="Mailslot">
|
125
|
+
<xs:annotation>
|
126
|
+
<xs:documentation>Specifies a mailslot handle.</xs:documentation>
|
127
|
+
</xs:annotation>
|
128
|
+
</xs:enumeration>
|
129
|
+
<xs:enumeration value="Mutex">
|
130
|
+
<xs:annotation>
|
131
|
+
<xs:documentation>Specifies a mutex handle.</xs:documentation>
|
132
|
+
</xs:annotation>
|
133
|
+
</xs:enumeration>
|
134
|
+
<xs:enumeration value="NamedPipe">
|
135
|
+
<xs:annotation>
|
136
|
+
<xs:documentation>Specifies a named pipe handle.</xs:documentation>
|
137
|
+
</xs:annotation>
|
138
|
+
</xs:enumeration>
|
139
|
+
<xs:enumeration value="Pipe">
|
140
|
+
<xs:annotation>
|
141
|
+
<xs:documentation>Specifies a pipe handle.</xs:documentation>
|
142
|
+
</xs:annotation>
|
143
|
+
</xs:enumeration>
|
144
|
+
<xs:enumeration value="Process">
|
145
|
+
<xs:annotation>
|
146
|
+
<xs:documentation>Specifies a process handle.</xs:documentation>
|
147
|
+
</xs:annotation>
|
148
|
+
</xs:enumeration>
|
149
|
+
<xs:enumeration value="Semaphore">
|
150
|
+
<xs:annotation>
|
151
|
+
<xs:documentation>Specifies a semaphore handle.</xs:documentation>
|
152
|
+
</xs:annotation>
|
153
|
+
</xs:enumeration>
|
154
|
+
<xs:enumeration value="Thread">
|
155
|
+
<xs:annotation>
|
156
|
+
<xs:documentation>Specifies a thread handle.</xs:documentation>
|
157
|
+
</xs:annotation>
|
158
|
+
</xs:enumeration>
|
159
|
+
<xs:enumeration value="Transaction">
|
160
|
+
<xs:annotation>
|
161
|
+
<xs:documentation>Specifies a transaction handle.</xs:documentation>
|
162
|
+
</xs:annotation>
|
163
|
+
</xs:enumeration>
|
164
|
+
<xs:enumeration value="WaitableTimer">
|
165
|
+
<xs:annotation>
|
166
|
+
<xs:documentation>Specifies a waitable timer handle.</xs:documentation>
|
167
|
+
</xs:annotation>
|
168
|
+
</xs:enumeration>
|
169
|
+
<xs:enumeration value="RegistryKey">
|
170
|
+
<xs:annotation>
|
171
|
+
<xs:documentation>Specifies a registry key handle.</xs:documentation>
|
172
|
+
</xs:annotation>
|
173
|
+
</xs:enumeration>
|
174
|
+
<xs:enumeration value="Window">
|
175
|
+
<xs:annotation>
|
176
|
+
<xs:documentation>Specifies a window handle.</xs:documentation>
|
177
|
+
</xs:annotation>
|
178
|
+
</xs:enumeration>
|
179
|
+
<xs:enumeration value="ServiceControlManager">
|
180
|
+
<xs:annotation>
|
181
|
+
<xs:documentation>Specifies a service control manager handle.</xs:documentation>
|
182
|
+
</xs:annotation>
|
183
|
+
</xs:enumeration>
|
184
|
+
<xs:enumeration value="CommunicationsDevice">
|
185
|
+
<xs:annotation>
|
186
|
+
<xs:documentation>Specifies a communications device handle.</xs:documentation>
|
187
|
+
</xs:annotation>
|
188
|
+
</xs:enumeration>
|
189
|
+
<xs:enumeration value="ConsoleInput">
|
190
|
+
<xs:annotation>
|
191
|
+
<xs:documentation>Specifies a console input handle.</xs:documentation>
|
192
|
+
</xs:annotation>
|
193
|
+
</xs:enumeration>
|
194
|
+
<xs:enumeration value="ConsoleScreenBuffer">
|
195
|
+
<xs:annotation>
|
196
|
+
<xs:documentation>Specifies a console screen buffer handle.</xs:documentation>
|
197
|
+
</xs:annotation>
|
198
|
+
</xs:enumeration>
|
199
|
+
<xs:enumeration value="MemoryResourceNotification">
|
200
|
+
<xs:annotation>
|
201
|
+
<xs:documentation>Specifies a memory resource notification handle.</xs:documentation>
|
202
|
+
</xs:annotation>
|
203
|
+
</xs:enumeration>
|
204
|
+
<xs:enumeration value="Directory">
|
205
|
+
<xs:annotation>
|
206
|
+
<xs:documentation>Specifies a directory handle.</xs:documentation>
|
207
|
+
</xs:annotation>
|
208
|
+
</xs:enumeration>
|
209
|
+
<xs:enumeration value="SymbolicLink">
|
210
|
+
<xs:annotation>
|
211
|
+
<xs:documentation>Specifies a symbolic link handle.</xs:documentation>
|
212
|
+
</xs:annotation>
|
213
|
+
</xs:enumeration>
|
214
|
+
<xs:enumeration value="Token">
|
215
|
+
<xs:annotation>
|
216
|
+
<xs:documentation>Specifies a token handle.</xs:documentation>
|
217
|
+
</xs:annotation>
|
218
|
+
</xs:enumeration>
|
219
|
+
<xs:enumeration value="Profile">
|
220
|
+
<xs:annotation>
|
221
|
+
<xs:documentation>Specifies a profile handle.</xs:documentation>
|
222
|
+
</xs:annotation>
|
223
|
+
</xs:enumeration>
|
224
|
+
<xs:enumeration value="WindowStation">
|
225
|
+
<xs:annotation>
|
226
|
+
<xs:documentation>Specifies a window station handle.</xs:documentation>
|
227
|
+
</xs:annotation>
|
228
|
+
</xs:enumeration>
|
229
|
+
<xs:enumeration value="Port">
|
230
|
+
<xs:annotation>
|
231
|
+
<xs:documentation>Specifies a port handle.</xs:documentation>
|
232
|
+
</xs:annotation>
|
233
|
+
</xs:enumeration>
|
234
|
+
<xs:enumeration value="WaitablePort">
|
235
|
+
<xs:annotation>
|
236
|
+
<xs:documentation>Specifies a waitable port handle.</xs:documentation>
|
237
|
+
</xs:annotation>
|
238
|
+
</xs:enumeration>
|
239
|
+
<xs:enumeration value="Controller">
|
240
|
+
<xs:annotation>
|
241
|
+
<xs:documentation>Specifies a controller handle.</xs:documentation>
|
242
|
+
</xs:annotation>
|
243
|
+
</xs:enumeration>
|
244
|
+
<xs:enumeration value="Driver">
|
245
|
+
<xs:annotation>
|
246
|
+
<xs:documentation>Specifies a driver handle.</xs:documentation>
|
247
|
+
</xs:annotation>
|
248
|
+
</xs:enumeration>
|
249
|
+
<xs:enumeration value="Desktop">
|
250
|
+
<xs:annotation>
|
251
|
+
<xs:documentation>Specifies a desktop handle.</xs:documentation>
|
252
|
+
</xs:annotation>
|
253
|
+
</xs:enumeration>
|
254
|
+
<xs:enumeration value="Adapter">
|
255
|
+
<xs:annotation>
|
256
|
+
<xs:documentation>Specifies an adapter handle.</xs:documentation>
|
257
|
+
</xs:annotation>
|
258
|
+
</xs:enumeration>
|
259
|
+
<xs:enumeration value="Bitmap">
|
260
|
+
<xs:annotation>
|
261
|
+
<xs:documentation>Specifies a bitmap handle.</xs:documentation>
|
262
|
+
</xs:annotation>
|
263
|
+
</xs:enumeration>
|
264
|
+
<xs:enumeration value="Brush">
|
265
|
+
<xs:annotation>
|
266
|
+
<xs:documentation>Specifies a brush handle.</xs:documentation>
|
267
|
+
</xs:annotation>
|
268
|
+
</xs:enumeration>
|
269
|
+
<xs:enumeration value="ColorSpace">
|
270
|
+
<xs:annotation>
|
271
|
+
<xs:documentation>Specifies a color space handle.</xs:documentation>
|
272
|
+
</xs:annotation>
|
273
|
+
</xs:enumeration>
|
274
|
+
<xs:enumeration value="Cursor">
|
275
|
+
<xs:annotation>
|
276
|
+
<xs:documentation>Specifies a cursor handle.</xs:documentation>
|
277
|
+
</xs:annotation>
|
278
|
+
</xs:enumeration>
|
279
|
+
<xs:enumeration value="DeviceContext">
|
280
|
+
<xs:annotation>
|
281
|
+
<xs:documentation>Specifies a device context handle.</xs:documentation>
|
282
|
+
</xs:annotation>
|
283
|
+
</xs:enumeration>
|
284
|
+
<xs:enumeration value="EnhancedMetafile">
|
285
|
+
<xs:annotation>
|
286
|
+
<xs:documentation>Specifies an enhanced metafile handle.</xs:documentation>
|
287
|
+
</xs:annotation>
|
288
|
+
</xs:enumeration>
|
289
|
+
<xs:enumeration value="Font">
|
290
|
+
<xs:annotation>
|
291
|
+
<xs:documentation>Specifies a font handle.</xs:documentation>
|
292
|
+
</xs:annotation>
|
293
|
+
</xs:enumeration>
|
294
|
+
<xs:enumeration value="GDIObject">
|
295
|
+
<xs:annotation>
|
296
|
+
<xs:documentation>Specifies a GDI object handle.</xs:documentation>
|
297
|
+
</xs:annotation>
|
298
|
+
</xs:enumeration>
|
299
|
+
<xs:enumeration value="Hook">
|
300
|
+
<xs:annotation>
|
301
|
+
<xs:documentation>Specifies a hook handle.</xs:documentation>
|
302
|
+
</xs:annotation>
|
303
|
+
</xs:enumeration>
|
304
|
+
<xs:enumeration value="Icon">
|
305
|
+
<xs:annotation>
|
306
|
+
<xs:documentation>Specifies an icon handle.</xs:documentation>
|
307
|
+
</xs:annotation>
|
308
|
+
</xs:enumeration>
|
309
|
+
<xs:enumeration value="Instance">
|
310
|
+
<xs:annotation>
|
311
|
+
<xs:documentation>Specifies a module instance handle.</xs:documentation>
|
312
|
+
</xs:annotation>
|
313
|
+
</xs:enumeration>
|
314
|
+
<xs:enumeration value="Menu">
|
315
|
+
<xs:annotation>
|
316
|
+
<xs:documentation>Specifies a menu handle.</xs:documentation>
|
317
|
+
</xs:annotation>
|
318
|
+
</xs:enumeration>
|
319
|
+
<xs:enumeration value="Metafile">
|
320
|
+
<xs:annotation>
|
321
|
+
<xs:documentation>Specifies a metafile handle.</xs:documentation>
|
322
|
+
</xs:annotation>
|
323
|
+
</xs:enumeration>
|
324
|
+
<xs:enumeration value="DisplayMonitor">
|
325
|
+
<xs:annotation>
|
326
|
+
<xs:documentation>Specifies a display monitor handle.</xs:documentation>
|
327
|
+
</xs:annotation>
|
328
|
+
</xs:enumeration>
|
329
|
+
<xs:enumeration value="Palette">
|
330
|
+
<xs:annotation>
|
331
|
+
<xs:documentation>Specifies a palette handle.</xs:documentation>
|
332
|
+
</xs:annotation>
|
333
|
+
</xs:enumeration>
|
334
|
+
<xs:enumeration value="Pen">
|
335
|
+
<xs:annotation>
|
336
|
+
<xs:documentation>Specifies a pen handle.</xs:documentation>
|
337
|
+
</xs:annotation>
|
338
|
+
</xs:enumeration>
|
339
|
+
<xs:enumeration value="Region">
|
340
|
+
<xs:annotation>
|
341
|
+
<xs:documentation>Specifies a region handle.</xs:documentation>
|
342
|
+
</xs:annotation>
|
343
|
+
</xs:enumeration>
|
344
|
+
<xs:enumeration value="Resource">
|
345
|
+
<xs:annotation>
|
346
|
+
<xs:documentation>Specifies a resource handle.</xs:documentation>
|
347
|
+
</xs:annotation>
|
348
|
+
</xs:enumeration>
|
349
|
+
</xs:restriction>
|
350
|
+
</xs:simpleType>
|
351
|
+
</xs:schema>
|