Skip to content

Instantly share code, notes, and snippets.

@sbarnum
Last active December 1, 2015 21:31
Show Gist options
  • Save sbarnum/5870c32f452959fc39df to your computer and use it in GitHub Desktop.
Save sbarnum/5870c32f452959fc39df to your computer and use it in GitHub Desktop.
Simple "pure" JSON serialization of JSON-LD example STIX content from the "Incident Essentials - Who, What, When" idiom
{
"@id": "example:Package-ec96d2a6-5a95-48f2-93c0-b3b2198633ca",
"@type": "stix:Package",
"stix:incidents": [
{
"@id": "example:incident-8236b4a2-abe0-4b56-9347-288005c4bb92",
"@type": "inc:Incident",
"inc:impactEffects": "stixVocabs:IncidentEffectVocab-1.0:Financial_Loss",
"inc:reporter": {
"@id": "example:4cdb58ee3d18966146434adc2ce80d0972b2e991",
"@type": "stixc:InformationSource",
"cyboxc:time.producedDateTime": "2014-03-11T00:00:00",
"stixc:infoSource.description": {"@value": "The person who reported it"},
"stixc:infoSource.identity": {
"@id": "example:Identity-cd64aaa6-b1c0-4026-8ea1-14ff5a19e5fb",
"@type": "stixc:CIQIdentity",
"xnl:partyName": "Sample Investigations, LLC"
}
},
"inc:timeSequence.incidentDiscoveryDateTime": "2012-05-10T00:00:00",
"inc:timeSequence.incidentReportedDateTime": "2012-12-10T00:00:00",
"inc:timeSequence.initialCompromiseDateTime": "2012-01-30T00:00:00",
"inc:timeSequence.restorationAchievedDateTime": "2012-08-10T00:00:00",
"inc:victim": {
"@id": "example:Identity-dd8637b7-51b4-48f0-9e3c-a2b23b3a2dd7",
"@type": "stixc:CIQIdentity",
"xnl:partyName": "Cyber Tech Dynamics"
},
"stixc:confidence": {
"stixc:timestamp": "2014-11-18T23:40:08.061379Z",
"stixc:value": "stixVocabs:HighMediumLowVocab-1.0:High"
},
"stixc:description": {"@value": "Intrusion into enterprise network"},
"stixc:timestamp": "2014-11-18T23:40:08.061362Z",
"stixc:title": "Breach of Cyber Tech Dynamics"
}
]
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment