├── .gitignore ├── .gitmodules ├── .travis.yml ├── README.md ├── campaign.xsd ├── common.xsd ├── core.xsd ├── course-of-action.xsd ├── data-marking.xsd ├── exploit-target.xsd ├── extensions ├── address │ ├── ciq-3.0-address.xsd │ └── readme.txt ├── attack-pattern │ ├── capec-2.7-attack-pattern.xsd │ └── readme.txt ├── identity │ ├── ciq-3.0-identity.xsd │ └── readme.txt ├── malware │ ├── maec-4.1-malware.xsd │ └── readme.txt ├── marking │ ├── simple-marking.xsd │ ├── terms-of-use-marking.xsd │ └── tlp-marking.xsd ├── structured-coa │ └── generic-structured-coa.xsd ├── test-mechanism │ ├── generic-test-mechanism.xsd │ ├── openioc-2010-test-mechanism.xsd │ ├── oval-5.10-test-mechanism.xsd │ ├── snort-test-mechanism.xsd │ └── yara-test-mechanism.xsd └── vulnerability │ ├── cvrf-1.1-vulnerability.xsd │ └── readme.txt ├── external ├── capec_2.7 │ └── ap_schema_v2.7.xsd ├── cvrf_1.1 │ ├── common.xsd │ ├── cpe-language_2.2a.xsd │ ├── cvrf.xsd │ ├── cvss-v2_0.9.xsd │ ├── dc.xsd │ ├── prod.xsd │ ├── scap-core_0.9.xsd │ ├── vuln.xsd │ └── xml.xsd ├── maec_4.1 │ ├── maec_bundle_schema.xsd │ ├── maec_container_schema.xsd │ ├── maec_default_vocabularies.xsd │ ├── maec_package_schema.xsd │ └── metadataSharing.xsd ├── oasis_ciq_3.0 │ ├── CommonTypes.xsd │ ├── xAL-types.xsd │ ├── xAL.xsd │ ├── xNAL-types.xsd │ ├── xNAL.xsd │ ├── xNL-types.xsd │ ├── xNL.xsd │ ├── xPIL-types.xsd │ ├── xPIL.xsd │ └── xlink-2003-12-31.xsd ├── open_ioc_2010 │ ├── ioc-TR.xsd │ └── ioc.xsd └── oval_5.10 │ ├── oval-common-schema.xsd │ ├── oval-definitions-schema.xsd │ ├── oval-variables-schema.xsd │ └── xmldsig-core-schema.xsd ├── incident.xsd ├── indicator.xsd ├── report.xsd ├── samples ├── APT1 │ ├── Appendix_D_FQDNs.xml │ ├── Appendix_E_MD5s.xml │ ├── Appendix_F_SSLCertificates.xml │ ├── Appendix_G_IOCs_Full.xml │ ├── Appendix_G_IOCs_No_Observables.xml │ ├── Appendix_G_IOCs_No_OpenIOC.xml │ ├── Mandiant_APT1_Report.xml │ └── README.txt ├── MAEC_CybOX_STIX_Flow_Example │ ├── README.md │ ├── flow_example(1of3)-maec_anubis_output.xml │ ├── flow_example(2of3)-cybox_observable_pattern.xml │ └── flow_example(3of3)-stix_indicator_combined.xml ├── Poison Ivy │ ├── README.txt │ ├── fireeye-pivy-indicators.xml │ ├── fireeye-pivy-observables.xml │ ├── fireeye-pivy-report-with-indicators.xml │ └── fireeye-pivy-report.xml ├── STIX Use Case Examples content │ └── Phishing │ │ ├── Phishing_Attachment_PDF_Artifact_Example.xml │ │ ├── STIX-CybOX_Phishing_CybOX_Pattern.xml │ │ ├── STIX-CybOX_Phishing_Email_Structured_Output_Example(with_Attached_File_Artifact_Object_Included_by_Reference).xml │ │ ├── STIX-CybOX_Phishing_Email_Structured_Output_Example(with_Attached_File_Artifact_object).xml │ │ ├── STIX-Indicator_Multiple_Sightings_Example.xml │ │ ├── STIX-Indicator_Phishing_Indicator_Example(with_Observables_Embedded_Inline).xml │ │ ├── STIX-Indicator_Phishing_Indicator_Example(with_Observables_by_Reference).xml │ │ ├── STIX-LMCO_KillChain_Specification.xml │ │ └── spear_phishing_email.txt ├── STIX_Domain_Watchlist.xml ├── STIX_Email_wAttachment.xml ├── STIX_Email_wFullAttachment.xml ├── STIX_Email_wLink.xml ├── STIX_FileHash_Watchlist.xml ├── STIX_IP_Watchlist.xml ├── STIX_Indicator_Snort.xml ├── STIX_Malware_Sample.xml ├── STIX_Phishing_Indicator.xml └── STIX_URL_Watchlist.xml ├── test_manifest.cfg ├── test_runner.py ├── threat-actor.xsd ├── ttp.xsd └── vocabularies.xsd /.gitignore: -------------------------------------------------------------------------------- 1 | *.swp 2 | tests/ 3 | -------------------------------------------------------------------------------- /.gitmodules: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/.gitmodules -------------------------------------------------------------------------------- /.travis.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/.travis.yml -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/README.md -------------------------------------------------------------------------------- /campaign.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/campaign.xsd -------------------------------------------------------------------------------- /common.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/common.xsd -------------------------------------------------------------------------------- /core.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/core.xsd -------------------------------------------------------------------------------- /course-of-action.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/course-of-action.xsd -------------------------------------------------------------------------------- /data-marking.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/data-marking.xsd -------------------------------------------------------------------------------- /exploit-target.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/exploit-target.xsd -------------------------------------------------------------------------------- /extensions/address/ciq-3.0-address.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/extensions/address/ciq-3.0-address.xsd -------------------------------------------------------------------------------- /extensions/address/readme.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/extensions/address/readme.txt -------------------------------------------------------------------------------- /extensions/attack-pattern/capec-2.7-attack-pattern.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/extensions/attack-pattern/capec-2.7-attack-pattern.xsd -------------------------------------------------------------------------------- /extensions/attack-pattern/readme.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/extensions/attack-pattern/readme.txt -------------------------------------------------------------------------------- /extensions/identity/ciq-3.0-identity.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/extensions/identity/ciq-3.0-identity.xsd -------------------------------------------------------------------------------- /extensions/identity/readme.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/extensions/identity/readme.txt -------------------------------------------------------------------------------- /extensions/malware/maec-4.1-malware.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/extensions/malware/maec-4.1-malware.xsd -------------------------------------------------------------------------------- /extensions/malware/readme.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/extensions/malware/readme.txt -------------------------------------------------------------------------------- /extensions/marking/simple-marking.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/extensions/marking/simple-marking.xsd -------------------------------------------------------------------------------- /extensions/marking/terms-of-use-marking.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/extensions/marking/terms-of-use-marking.xsd -------------------------------------------------------------------------------- /extensions/marking/tlp-marking.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/extensions/marking/tlp-marking.xsd -------------------------------------------------------------------------------- /extensions/structured-coa/generic-structured-coa.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/extensions/structured-coa/generic-structured-coa.xsd -------------------------------------------------------------------------------- /extensions/test-mechanism/generic-test-mechanism.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/extensions/test-mechanism/generic-test-mechanism.xsd -------------------------------------------------------------------------------- /extensions/test-mechanism/openioc-2010-test-mechanism.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/extensions/test-mechanism/openioc-2010-test-mechanism.xsd -------------------------------------------------------------------------------- /extensions/test-mechanism/oval-5.10-test-mechanism.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/extensions/test-mechanism/oval-5.10-test-mechanism.xsd -------------------------------------------------------------------------------- /extensions/test-mechanism/snort-test-mechanism.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/extensions/test-mechanism/snort-test-mechanism.xsd -------------------------------------------------------------------------------- /extensions/test-mechanism/yara-test-mechanism.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/extensions/test-mechanism/yara-test-mechanism.xsd -------------------------------------------------------------------------------- /extensions/vulnerability/cvrf-1.1-vulnerability.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/extensions/vulnerability/cvrf-1.1-vulnerability.xsd -------------------------------------------------------------------------------- /extensions/vulnerability/readme.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/extensions/vulnerability/readme.txt -------------------------------------------------------------------------------- /external/capec_2.7/ap_schema_v2.7.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/external/capec_2.7/ap_schema_v2.7.xsd -------------------------------------------------------------------------------- /external/cvrf_1.1/common.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/external/cvrf_1.1/common.xsd -------------------------------------------------------------------------------- /external/cvrf_1.1/cpe-language_2.2a.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/external/cvrf_1.1/cpe-language_2.2a.xsd -------------------------------------------------------------------------------- /external/cvrf_1.1/cvrf.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/external/cvrf_1.1/cvrf.xsd -------------------------------------------------------------------------------- /external/cvrf_1.1/cvss-v2_0.9.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/external/cvrf_1.1/cvss-v2_0.9.xsd -------------------------------------------------------------------------------- /external/cvrf_1.1/dc.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/external/cvrf_1.1/dc.xsd -------------------------------------------------------------------------------- /external/cvrf_1.1/prod.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/external/cvrf_1.1/prod.xsd -------------------------------------------------------------------------------- /external/cvrf_1.1/scap-core_0.9.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/external/cvrf_1.1/scap-core_0.9.xsd -------------------------------------------------------------------------------- /external/cvrf_1.1/vuln.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/external/cvrf_1.1/vuln.xsd -------------------------------------------------------------------------------- /external/cvrf_1.1/xml.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/external/cvrf_1.1/xml.xsd -------------------------------------------------------------------------------- /external/maec_4.1/maec_bundle_schema.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/external/maec_4.1/maec_bundle_schema.xsd -------------------------------------------------------------------------------- /external/maec_4.1/maec_container_schema.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/external/maec_4.1/maec_container_schema.xsd -------------------------------------------------------------------------------- /external/maec_4.1/maec_default_vocabularies.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/external/maec_4.1/maec_default_vocabularies.xsd -------------------------------------------------------------------------------- /external/maec_4.1/maec_package_schema.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/external/maec_4.1/maec_package_schema.xsd -------------------------------------------------------------------------------- /external/maec_4.1/metadataSharing.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/external/maec_4.1/metadataSharing.xsd -------------------------------------------------------------------------------- /external/oasis_ciq_3.0/CommonTypes.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/external/oasis_ciq_3.0/CommonTypes.xsd -------------------------------------------------------------------------------- /external/oasis_ciq_3.0/xAL-types.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/external/oasis_ciq_3.0/xAL-types.xsd -------------------------------------------------------------------------------- /external/oasis_ciq_3.0/xAL.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/external/oasis_ciq_3.0/xAL.xsd -------------------------------------------------------------------------------- /external/oasis_ciq_3.0/xNAL-types.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/external/oasis_ciq_3.0/xNAL-types.xsd -------------------------------------------------------------------------------- /external/oasis_ciq_3.0/xNAL.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/external/oasis_ciq_3.0/xNAL.xsd -------------------------------------------------------------------------------- /external/oasis_ciq_3.0/xNL-types.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/external/oasis_ciq_3.0/xNL-types.xsd -------------------------------------------------------------------------------- /external/oasis_ciq_3.0/xNL.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/external/oasis_ciq_3.0/xNL.xsd -------------------------------------------------------------------------------- /external/oasis_ciq_3.0/xPIL-types.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/external/oasis_ciq_3.0/xPIL-types.xsd -------------------------------------------------------------------------------- /external/oasis_ciq_3.0/xPIL.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/external/oasis_ciq_3.0/xPIL.xsd -------------------------------------------------------------------------------- /external/oasis_ciq_3.0/xlink-2003-12-31.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/external/oasis_ciq_3.0/xlink-2003-12-31.xsd -------------------------------------------------------------------------------- /external/open_ioc_2010/ioc-TR.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/external/open_ioc_2010/ioc-TR.xsd -------------------------------------------------------------------------------- /external/open_ioc_2010/ioc.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/external/open_ioc_2010/ioc.xsd -------------------------------------------------------------------------------- /external/oval_5.10/oval-common-schema.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/external/oval_5.10/oval-common-schema.xsd -------------------------------------------------------------------------------- /external/oval_5.10/oval-definitions-schema.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/external/oval_5.10/oval-definitions-schema.xsd -------------------------------------------------------------------------------- /external/oval_5.10/oval-variables-schema.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/external/oval_5.10/oval-variables-schema.xsd -------------------------------------------------------------------------------- /external/oval_5.10/xmldsig-core-schema.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/external/oval_5.10/xmldsig-core-schema.xsd -------------------------------------------------------------------------------- /incident.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/incident.xsd -------------------------------------------------------------------------------- /indicator.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/indicator.xsd -------------------------------------------------------------------------------- /report.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/report.xsd -------------------------------------------------------------------------------- /samples/APT1/Appendix_D_FQDNs.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/samples/APT1/Appendix_D_FQDNs.xml -------------------------------------------------------------------------------- /samples/APT1/Appendix_E_MD5s.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/samples/APT1/Appendix_E_MD5s.xml -------------------------------------------------------------------------------- /samples/APT1/Appendix_F_SSLCertificates.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/samples/APT1/Appendix_F_SSLCertificates.xml -------------------------------------------------------------------------------- /samples/APT1/Appendix_G_IOCs_Full.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/samples/APT1/Appendix_G_IOCs_Full.xml -------------------------------------------------------------------------------- /samples/APT1/Appendix_G_IOCs_No_Observables.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/samples/APT1/Appendix_G_IOCs_No_Observables.xml -------------------------------------------------------------------------------- /samples/APT1/Appendix_G_IOCs_No_OpenIOC.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/samples/APT1/Appendix_G_IOCs_No_OpenIOC.xml -------------------------------------------------------------------------------- /samples/APT1/Mandiant_APT1_Report.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/samples/APT1/Mandiant_APT1_Report.xml -------------------------------------------------------------------------------- /samples/APT1/README.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/samples/APT1/README.txt -------------------------------------------------------------------------------- /samples/MAEC_CybOX_STIX_Flow_Example/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/samples/MAEC_CybOX_STIX_Flow_Example/README.md -------------------------------------------------------------------------------- /samples/MAEC_CybOX_STIX_Flow_Example/flow_example(1of3)-maec_anubis_output.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/samples/MAEC_CybOX_STIX_Flow_Example/flow_example(1of3)-maec_anubis_output.xml -------------------------------------------------------------------------------- /samples/MAEC_CybOX_STIX_Flow_Example/flow_example(2of3)-cybox_observable_pattern.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/samples/MAEC_CybOX_STIX_Flow_Example/flow_example(2of3)-cybox_observable_pattern.xml -------------------------------------------------------------------------------- /samples/MAEC_CybOX_STIX_Flow_Example/flow_example(3of3)-stix_indicator_combined.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/samples/MAEC_CybOX_STIX_Flow_Example/flow_example(3of3)-stix_indicator_combined.xml -------------------------------------------------------------------------------- /samples/Poison Ivy/README.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/samples/Poison Ivy/README.txt -------------------------------------------------------------------------------- /samples/Poison Ivy/fireeye-pivy-indicators.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/samples/Poison Ivy/fireeye-pivy-indicators.xml -------------------------------------------------------------------------------- /samples/Poison Ivy/fireeye-pivy-observables.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/samples/Poison Ivy/fireeye-pivy-observables.xml -------------------------------------------------------------------------------- /samples/Poison Ivy/fireeye-pivy-report-with-indicators.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/samples/Poison Ivy/fireeye-pivy-report-with-indicators.xml -------------------------------------------------------------------------------- /samples/Poison Ivy/fireeye-pivy-report.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/samples/Poison Ivy/fireeye-pivy-report.xml -------------------------------------------------------------------------------- /samples/STIX Use Case Examples content/Phishing/Phishing_Attachment_PDF_Artifact_Example.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/samples/STIX Use Case Examples content/Phishing/Phishing_Attachment_PDF_Artifact_Example.xml -------------------------------------------------------------------------------- /samples/STIX Use Case Examples content/Phishing/STIX-CybOX_Phishing_CybOX_Pattern.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/samples/STIX Use Case Examples content/Phishing/STIX-CybOX_Phishing_CybOX_Pattern.xml -------------------------------------------------------------------------------- /samples/STIX Use Case Examples content/Phishing/STIX-CybOX_Phishing_Email_Structured_Output_Example(with_Attached_File_Artifact_Object_Included_by_Reference).xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/samples/STIX Use Case Examples content/Phishing/STIX-CybOX_Phishing_Email_Structured_Output_Example(with_Attached_File_Artifact_Object_Included_by_Reference).xml -------------------------------------------------------------------------------- /samples/STIX Use Case Examples content/Phishing/STIX-CybOX_Phishing_Email_Structured_Output_Example(with_Attached_File_Artifact_object).xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/samples/STIX Use Case Examples content/Phishing/STIX-CybOX_Phishing_Email_Structured_Output_Example(with_Attached_File_Artifact_object).xml -------------------------------------------------------------------------------- /samples/STIX Use Case Examples content/Phishing/STIX-Indicator_Multiple_Sightings_Example.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/samples/STIX Use Case Examples content/Phishing/STIX-Indicator_Multiple_Sightings_Example.xml -------------------------------------------------------------------------------- /samples/STIX Use Case Examples content/Phishing/STIX-Indicator_Phishing_Indicator_Example(with_Observables_Embedded_Inline).xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/samples/STIX Use Case Examples content/Phishing/STIX-Indicator_Phishing_Indicator_Example(with_Observables_Embedded_Inline).xml -------------------------------------------------------------------------------- /samples/STIX Use Case Examples content/Phishing/STIX-Indicator_Phishing_Indicator_Example(with_Observables_by_Reference).xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/samples/STIX Use Case Examples content/Phishing/STIX-Indicator_Phishing_Indicator_Example(with_Observables_by_Reference).xml -------------------------------------------------------------------------------- /samples/STIX Use Case Examples content/Phishing/STIX-LMCO_KillChain_Specification.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/samples/STIX Use Case Examples content/Phishing/STIX-LMCO_KillChain_Specification.xml -------------------------------------------------------------------------------- /samples/STIX Use Case Examples content/Phishing/spear_phishing_email.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/samples/STIX Use Case Examples content/Phishing/spear_phishing_email.txt -------------------------------------------------------------------------------- /samples/STIX_Domain_Watchlist.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/samples/STIX_Domain_Watchlist.xml -------------------------------------------------------------------------------- /samples/STIX_Email_wAttachment.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/samples/STIX_Email_wAttachment.xml -------------------------------------------------------------------------------- /samples/STIX_Email_wFullAttachment.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/samples/STIX_Email_wFullAttachment.xml -------------------------------------------------------------------------------- /samples/STIX_Email_wLink.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/samples/STIX_Email_wLink.xml -------------------------------------------------------------------------------- /samples/STIX_FileHash_Watchlist.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/samples/STIX_FileHash_Watchlist.xml -------------------------------------------------------------------------------- /samples/STIX_IP_Watchlist.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/samples/STIX_IP_Watchlist.xml -------------------------------------------------------------------------------- /samples/STIX_Indicator_Snort.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/samples/STIX_Indicator_Snort.xml -------------------------------------------------------------------------------- /samples/STIX_Malware_Sample.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/samples/STIX_Malware_Sample.xml -------------------------------------------------------------------------------- /samples/STIX_Phishing_Indicator.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/samples/STIX_Phishing_Indicator.xml -------------------------------------------------------------------------------- /samples/STIX_URL_Watchlist.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/samples/STIX_URL_Watchlist.xml -------------------------------------------------------------------------------- /test_manifest.cfg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/test_manifest.cfg -------------------------------------------------------------------------------- /test_runner.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/test_runner.py -------------------------------------------------------------------------------- /threat-actor.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/threat-actor.xsd -------------------------------------------------------------------------------- /ttp.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/ttp.xsd -------------------------------------------------------------------------------- /vocabularies.xsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/STIXProject/schemas/HEAD/vocabularies.xsd --------------------------------------------------------------------------------