Last active
December 1, 2015 21:35
-
-
Save sbarnum/4eafbd96b42b45482236 to your computer and use it in GitHub Desktop.
XML serialization of example STIX IP Watchlist
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
<stix:STIX_Package id="example:STIXPackage-33fe3b22-0201-47cf-85d0-97c02164528d" timestamp="2014-05-08T09:00:00.000000Z" version="1.1.1"> | |
<stix:STIX_Header> | |
<stix:Title>Example watchlist that contains IP information.</stix:Title> | |
<stix:Package_Intent xsi:type="stixVocabs:PackageIntentVocab-1.0">Indicators - Watchlist</stix:Package_Intent> | |
</stix:STIX_Header> | |
<stix:Indicators> | |
<stix:Indicator xsi:type="indicator:IndicatorType" id="example:Indicator-33fe3b22-0201-47cf-85d0-97c02164528d" timestamp="2014-05-08T09:00:00.000000Z"> | |
<indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type> | |
<indicator:Description>Sample IP Address Indicator for this watchlist. This contains one indicator with a set of three IP addresses in the watchlist.</indicator:Description> | |
<indicator:Observable id="example:Observable-1c798262-a4cd-434d-a958-884d6980c459"> | |
<cybox:Object id="example:Object-1980ce43-8e03-490b-863a-ea404d12242e"> | |
<cybox:Properties xsi:type="AddressObject:AddressObjectType" category="ipv4-addr"> | |
<AddressObject:Address_Value condition="Equals" apply_condition="ANY">10.0.0.0##comma##10.0.0.1##comma##10.0.0.2</AddressObject:Address_Value> | |
</cybox:Properties> | |
</cybox:Object> | |
</indicator:Observable> | |
</stix:Indicator> | |
</stix:Indicators> | |
</stix:STIX_Package> |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment