Showing:

Annotations
Attributes
Diagrams
Facets
Instances

Table of Contents

Group by:
Main schema maec_container_schema.xsd
Namespace http://maec.mitre.org/XMLSchema/maec-container-2
Annotations
The following is a description of the elements, types, and attributes that compose the Malware Attribute Enumeration and Characterization (MAEC) container schema.
The MAEC Container Schema is maintained by The Mitre Corporation. For more information, including how to get involved in the project, please visit the MAEC website at http://maec.mitre.org.
[ top ]
Element maecContainer:MAEC_Container
Namespace http://maec.mitre.org/XMLSchema/maec-container-2
Annotations
The root element of the MAEC Container schema is MAEC_Container, which captures one or more Packages.
Diagram
Diagram maec_container_schema.tmp#ContainerType_id maec_container_schema.tmp#ContainerType_schema_version maec_container_schema.tmp#ContainerType_timestamp maec_container_schema.tmp#ContainerType_Packages maec_container_schema.tmp#ContainerType
Type maecContainer:ContainerType
Instance
<maecContainer:MAEC_Container id="" schema_version="2.0.1" timestamp="" xmlns:maecContainer="http://maec.mitre.org/XMLSchema/maec-container-2">
  <maecContainer:Packages>{1,1}</maecContainer:Packages>
</maecContainer:MAEC_Container>
Attributes
QName Type Fixed Use Annotation
id maecContainer:ContainerIDPattern required
The required id attribute specifies a unique ID for this Container. The ID must follow the pattern defined in the ContainerIDPattern simple type.
schema_version xs:string 2.0.1 required
The required schema_version attribute specifies the version of the MAEC Container Schema that the document has been written in and that should be used for validation.
timestamp xs:dateTime optional
The timestamp attribute specifies the date/time that the Container was generated.
[ top ]
Element maecContainer:ContainerType / maecContainer:Packages
Namespace http://maec.mitre.org/XMLSchema/maec-container-2
Annotations
The Packages element captures a list of MAEC Packages.
Diagram
Diagram maec_container_schema.tmp#PackageListType_Package maec_container_schema.tmp#PackageListType
Type maecContainer:PackageListType
Instance
<maecContainer:Packages xmlns:maecContainer="http://maec.mitre.org/XMLSchema/maec-container-2">
  <maecContainer:Package>{1,unbounded}</maecContainer:Package>
</maecContainer:Packages>
[ top ]
Element maecContainer:PackageListType / maecContainer:Package
Namespace http://maec.mitre.org/XMLSchema/maec-container-2
Annotations
The Package element specifies a single Package, which encompasses 1-n Malware Subjects and any associated metadata.
Diagram
Diagram
Type PackageType
[ top ]
Complex Type maecContainer:ContainerType
Namespace http://maec.mitre.org/XMLSchema/maec-container-2
Annotations
The ContainerType encompasses all forms of MAEC data. Currently, this entails a list of Packages.
Diagram
Diagram maec_container_schema.tmp#ContainerType_id maec_container_schema.tmp#ContainerType_schema_version maec_container_schema.tmp#ContainerType_timestamp maec_container_schema.tmp#ContainerType_Packages
Attributes
QName Type Fixed Use Annotation
id maecContainer:ContainerIDPattern required
The required id attribute specifies a unique ID for this Container. The ID must follow the pattern defined in the ContainerIDPattern simple type.
schema_version xs:string 2.0.1 required
The required schema_version attribute specifies the version of the MAEC Container Schema that the document has been written in and that should be used for validation.
timestamp xs:dateTime optional
The timestamp attribute specifies the date/time that the Container was generated.
[ top ]
Complex Type maecContainer:PackageListType
Namespace http://maec.mitre.org/XMLSchema/maec-container-2
Annotations
The PackageListType captures a list of Packages.
Diagram
Diagram maec_container_schema.tmp#PackageListType_Package
[ top ]
Simple Type maecContainer:ContainerIDPattern
Namespace http://maec.mitre.org/XMLSchema/maec-container-2
Annotations
The ContainerIDPattern defines the format for acceptable MAEC Container ids. A dash-delimited format is used with the id starting with the word maec followed by a unique string, followed by the three letter code 'con', and ending with an integer.
Diagram
Diagram
Type restriction of xs:ID
Facets
pattern (\i\c*) & ([\i-[:]][\c-[:]]*) & (maec-[A-Za-z0-9_\-\.]+-con-[1-9][0-9]*)
[ top ]
Attribute maecContainer:ContainerType / @id
Namespace No namespace
Annotations
The required id attribute specifies a unique ID for this Container. The ID must follow the pattern defined in the ContainerIDPattern simple type.
Type maecContainer:ContainerIDPattern
Facets
pattern (\i\c*) & ([\i-[:]][\c-[:]]*) & (maec-[A-Za-z0-9_\-\.]+-con-[1-9][0-9]*)
[ top ]
Attribute maecContainer:ContainerType / @schema_version
Namespace No namespace
Annotations
The required schema_version attribute specifies the version of the MAEC Container Schema that the document has been written in and that should be used for validation.
Type xs:string
[ top ]
Attribute maecContainer:ContainerType / @timestamp
Namespace No namespace
Annotations
The timestamp attribute specifies the date/time that the Container was generated.
Type xs:dateTime
[ top ]