STIX 2.1 7D

gistfile1.txt

{

  "id": "extension-definition--d83fce45-ef58-4c6c-a3f4-1fbc32e98c6e",
  "type": "extension-definition",
  "spec_version": "2.1",
  "name": "Extension Foo 1",
  "description": "This schema adds two properties to a STIX object",
  "created": "2014-02-20T09:16:08.989000Z",
  "modified": "2014-02-20T09:16:08.989000Z",
  "created_by_ref": "identity--11b76a96-5d2b-45e0-8a5a-f6994f370731",
  "schema": "https://www.example.com/schema-foo-1/v1/",
  "version": "1.0",
  "extension_types": [ "property-extension" ]
},
{
  "type": "course-of-action",
  "spec_version": "2.1",
  "id": "course-of-action--8e2e2d2b-17d4-4cbf-938f-98ee46b3cd3f",
  "created_by_ref": "identity--f431f809-377b-45e0-aa1c-6a4751cae5ff",
  "created": "2016-04-06T20:03:48.000Z",
  "modified": "2016-04-06T20:03:48.000Z",
  "name": "Add TCP port 80 Filter Rule to the existing Block UDP 1434 Filter",
  "description": "This is how to add a filter rule to block inbound access to TCP port 80 to the existing UDP 1434 filter ...",
  "extensions": {
    "extension-definition--d83fce45-ef58-4c6c-a3f4-1fbc32e98c6e" : {
      "extension_type": "property_extension",
      "coa_phases": ["Deny" ]
    }
  }
}