Showing:

Annotations
Diagrams
Facets

Table of Contents

Group by:

http://maec.mitre.org/default_vocabularies-1

No namespace

Attributes
Main schema maec_default_vocabularies.xsd
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
This schema was originally developed by The MITRE Corporation. The MAEC XML Schema implementation is maintained by The MITRE Corporation and developed by the open MAEC Community. For more information, including how to get involved in the effort and how to submit change requests, please visit the MAEC website at http://maec.mitre.org.
[ top ]
Complex Type maecVocabs:ActionObjectAssociationTypeVocab-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The ActionObjectAssocationVocab is the default MAEC vocabulary for Action-Object association types, captured via the AssociatedObjectType/Association_Type element in CybOX Core.
It should be used in place of the CybOX ActionObjectAssociationVocab-1.0.
Diagram
Diagram maec_default_vocabularies.tmp#ActionObjectAssociationTypeVocab-1.0_vocab_name maec_default_vocabularies.tmp#ActionObjectAssociationTypeVocab-1.0_vocab_reference
Type restriction of ControlledVocabularyStringType
[ top ]
Simple Type maecVocabs:ActionObjectAssociationTypeEnum-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
ActionObjectAssociationTypeEnum is a (non-exhaustive) enumeration of types of action-object associations.
Diagram
Diagram
Type restriction of xs:string
Facets
enumeration input
Specifies that the associated object serves as an input to the action. This includes cases where an object is used by the action or an existing object is modified by the action.
enumeration output
Specifies that the associated object serves as an output to the action. This includes cases where the object is created anew by the action or otherwise returned by the action.
enumeration side-effect
Specifies that the associated object serves as a side-effect resulting from the action. This includes cases where the object is modified indirectly by the action.
[ top ]
Complex Type maecVocabs:ImportanceTypeVocab-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The ImportanceTypeVocab is the default MAEC vocabulary for relative importance measures, captured via the CandidateIndicatorType/Importance element in the MAEC Bundle.
Diagram
Diagram maec_default_vocabularies.tmp#ImportanceTypeVocab-1.0_vocab_name maec_default_vocabularies.tmp#ImportanceTypeVocab-1.0_vocab_reference
Type restriction of ControlledVocabularyStringType
[ top ]
Simple Type maecVocabs:ImportanceTypeEnum-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The ImportanceTypeEnum is a (non-exhaustive) enumeration of relative importance measures.
Diagram
Diagram
Type restriction of xs:string
Facets
enumeration high
The high value specifies that the entity is of relative high importance.
enumeration medium
The medium value specifies that the entity is of relative medium importance.
enumeration low
The low value specifies that the entity is of relative low importance.
enumeration informational
The informational value specifies that the entity is only informational in its importance.
enumeration numeric
The numeric value specifies that the entity has a numeric importance value, which is defined in another attribute or element.
enumeration unknown
The unknown value specifies that the relative importance for the entity is unknown.
[ top ]
Complex Type maecVocabs:MalwareEntityTypeVocab-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The MalwareEntityTypeVocab is the default MAEC vocabulary for malware entity types, captured via the CandidateIndicatorType/Malware_Entity/Type element in the MAEC Bundle.
Diagram
Diagram maec_default_vocabularies.tmp#MalwareEntityTypeVocab-1.0_vocab_name maec_default_vocabularies.tmp#MalwareEntityTypeVocab-1.0_vocab_reference
Type restriction of ControlledVocabularyStringType
[ top ]
Simple Type maecVocabs:MalwareEntityTypeEnum-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The MalwareEntityTypeEnum is a (non-exhaustive) enumeration of the different types of entities that a malware indicator or signature may be written against.
Diagram
Diagram
Type restriction of xs:string
Facets
enumeration instance
The instance value specifies that the particular malware entity being referred to is a single malware instance.
enumeration family
The family value specifies that the particular malware entity being referred to is a single malware family.
enumeration class
The class value specifies that the particular malware entity being referred to is a single class of malware.
[ top ]
Complex Type maecVocabs:DeviceDriverActionNameVocab-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The DeviceDriverActionNameVocab is the default MAEC vocabulary for device driver action names, captured via the ActionType/Name element in CybOX Core.
For device driver action names, it should be used in place of the CybOX ActionNameVocab-1.0.
Diagram
Diagram maec_default_vocabularies.tmp#DeviceDriverActionNameVocab-1.0_vocab_name maec_default_vocabularies.tmp#DeviceDriverActionNameVocab-1.0_vocab_reference
Type restriction of ControlledVocabularyStringType
[ top ]
Simple Type maecVocabs:DeviceDriverActionNameEnum-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The DeviceDriverActionNameEnum is a (non-exhaustive) enumeration of the different types of actions associated with device drivers.
Diagram
Diagram
Type restriction of xs:string
Facets
enumeration load and call driver
Specifies the defined action of loading a driver into a system and then calling the loaded driver.
enumeration load driver
Specifies the defined action of loading a driver into a system.
enumeration unload driver
Specifies the defined action of unloading a driver from a system.
[ top ]
Complex Type maecVocabs:DebuggingActionNameVocab-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The DebuggingActionNameVocab is the default MAEC vocabulary for debugging action names, captured via the ActionType/Name element in CybOX Core.
For debugging action names, it should be used in place of the CybOX ActionNameVocab-1.0.
Diagram
Diagram maec_default_vocabularies.tmp#DebuggingActionNameVocab-1.0_vocab_name maec_default_vocabularies.tmp#DebuggingActionNameVocab-1.0_vocab_reference
Type restriction of ControlledVocabularyStringType
[ top ]
Simple Type maecVocabs:DebuggingActionNameEnum-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The DebuggingActionNameEnum is a (non-exhaustive) enumeration of the different actions associated with debugging.
Diagram
Diagram
Type restriction of xs:string
Facets
enumeration check for remote debugger
Specifies the defined action of checking for the presence of a remote debugger.
enumeration check for kernel debugger
Specifies the defined action of checking for the presence of a kernel debugger.
[ top ]
Complex Type maecVocabs:LibraryActionNameVocab-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The LibraryActionNameVocab is the default MAEC vocabulary for library action names, captured via the ActionType/Name element in CybOX Core.
For library action names, it should be used in place of the CybOX ActionNameVocab-1.0.
Diagram
Diagram maec_default_vocabularies.tmp#LibraryActionNameVocab-1.0_vocab_name maec_default_vocabularies.tmp#LibraryActionNameVocab-1.0_vocab_reference
Type restriction of ControlledVocabularyStringType
[ top ]
Simple Type maecVocabs:LibraryActionNameEnum-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The LibraryActionNameEnum is a (non-exhaustive) enumeration of the different actions associated with libraries.
Diagram
Diagram
Type restriction of xs:string
Facets
enumeration enumerate libraries
Specifies the defined action of enumerating the libraries used by a process.
enumeration free library
Specifies the defined action of freeing a library previously loaded into the address space of the calling process.
enumeration load library
Specifies the defined action of loading a library into the address space of the calling process.
enumeration get function address
Specifies the defined action of getting the address of an exported function or variable from a library.
[ top ]
Complex Type maecVocabs:DirectoryActionNameVocab-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The DirectoryActionNameVocab is the default MAEC vocabulary for directory action names, captured via the ActionType/Name element in CybOX Core.
For directory action names, it should be used in place of the CybOX ActionNameVocab-1.0.
Diagram
Diagram maec_default_vocabularies.tmp#DirectoryActionNameVocab-1.0_vocab_name maec_default_vocabularies.tmp#DirectoryActionNameVocab-1.0_vocab_reference
Type restriction of ControlledVocabularyStringType
[ top ]
Simple Type maecVocabs:DirectoryActionNameEnum-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The DirectoryActionNameEnum is a (non-exhaustive) enumeration of the different actions associated with a file directories.
Diagram
Diagram
Type restriction of xs:string
Facets
enumeration create directory
Specifies the defined action of creating a new directory on the filesystem.
enumeration delete directory
Specifies the defined action of deleting an existing directory on the filesystem.
enumeration monitor directory
Specifies the defined action of monitoring an existing directory on the filesystem for changes.
[ top ]
Complex Type maecVocabs:DiskActionNameVocab-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The DiskActionNameVocab is the default MAEC vocabulary for disk action names, captured via the ActionType/Name element in CybOX Core.
For disk action names, it should be used in place of the CybOX ActionNameVocab-1.0.
Diagram
Diagram maec_default_vocabularies.tmp#DiskActionNameVocab-1.0_vocab_name maec_default_vocabularies.tmp#DiskActionNameVocab-1.0_vocab_reference
Type restriction of ControlledVocabularyStringType
[ top ]
Simple Type maecVocabs:DiskActionNameEnum-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The DiskActionNameEnum is a (non-exhaustive) enumeration of the different actions associated with hard disks.
Diagram
Diagram
Type restriction of xs:string
Facets
enumeration get disk type
Specifies the defined action of getting the disk type.
enumeration get disk attributes
Specifies the defined action of querying the attributes of a disk, such as the amount of available free space.
enumeration mount disk
Specifies the defined action of mounting an existing file system to a mounting point.
enumeration unmount disk
Specifies the defined action of unmounting an existing file system from a mounting point.
[ top ]
Complex Type maecVocabs:FileActionNameVocab-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The FileActionNameVocab is the default MAEC vocabulary for file action names, captured via the ActionType/Name element in CybOX Core.
For file action names, it should be used in place of the CybOX ActionNameVocab-1.0.
Diagram
Diagram maec_default_vocabularies.tmp#FileActionNameVocab-1.0_vocab_name maec_default_vocabularies.tmp#FileActionNameVocab-1.0_vocab_reference
Type restriction of ControlledVocabularyStringType
[ top ]
Simple Type maecVocabs:FileActionNameEnum-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The FileActionNameEnum is a (non-exhaustive) enumeration of the different actions associated with a file.
Diagram
Diagram
Type restriction of xs:string
Facets
enumeration create file
Specifies the defined action of creating a new file.
enumeration delete file
Specifies the defined action of deleting an existing file.
enumeration copy file
Specifies the defined action of copying an existing file from one location to another.
enumeration create file symbolic link
Specifies the defined action of creating a symbolic link to an existing file.
enumeration find file
Specifies the defined action of searching for an existing file.
enumeration get file attributes
Specifies the defined action of getting the attributes of an existing file.
enumeration set file attributes
Specifies the defined action of setting the file attributes for an existing file.
enumeration lock file
Specifies the defined action of locking an existing file.
enumeration unlock file
Specifies the defined action of unlocking an existing file.
enumeration modify file
Specifies the defined action of modifying an existing file in some manner.
enumeration move file
Specifies the defined action of moving an existing file from one location to another.
enumeration open file
Specifies the defined action of opening an existing file for reading or writing.
enumeration read from file
Specifies the defined action of reading from an existing file.
enumeration write to file
Specifies the defined action of writing to an existing file.
enumeration rename file
Specifies the defined action of renaming an existing file.
enumeration create file alternate data stream
Specifies the defined action of creating an alternate data stream in an existing file.
enumeration send control code to file
Specifies the defined action of sending a control code to a file.
enumeration create file mapping
Specifies the defined action of creating a new file mapping object.
enumeration open file mapping
Specifies the defined action of opening an existing file mapping object.
[ top ]
Complex Type maecVocabs:HookingActionNameVocab-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The HookingActionNameVocab is the default MAEC vocabulary for hooking action names, captured via the ActionType/Name element in CybOX Core.
For hooking action names, it should be used in place of the CybOX ActionNameVocab-1.0.
Diagram
Diagram maec_default_vocabularies.tmp#HookingActionNameVocab-1.0_vocab_name maec_default_vocabularies.tmp#HookingActionNameVocab-1.0_vocab_reference
Type restriction of ControlledVocabularyStringType
[ top ]
Simple Type maecVocabs:HookingActionNameEnum-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The HookingActionNameEnum is a (non-exhaustive) enumeration of the different actions associated with various kinds of hooking.
Diagram
Diagram
Type restriction of xs:string
Facets
enumeration add system call hook
Specifies the defined action of adding a new system call hook.
enumeration add windows hook
Specifies the defined action of adding a new Windows application-defined hook procedure.
[ top ]
Complex Type maecVocabs:DNSActionNameVocab-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The DNSActionNameVocab is the default MAEC vocabulary for DNS action names, captured via the ActionType/Name element in CybOX Core.
For DNS action names, it should be used in place of the CybOX ActionNameVocab-1.0.
Diagram
Diagram maec_default_vocabularies.tmp#DNSActionNameVocab-1.0_vocab_name maec_default_vocabularies.tmp#DNSActionNameVocab-1.0_vocab_reference
Type restriction of ControlledVocabularyStringType
[ top ]
Simple Type maecVocabs:DNSActionNameEnum-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The DNSActionNameEnum is a (non-exhaustive) enumeration of the different actions associated with the Domain Name System (DNS).
Diagram
Diagram
Type restriction of xs:string
Facets
enumeration send dns query
Specifies the defined action of sending a DNS query.
enumeration send reverse dns lookup
Specifies the defined action of sending a reverse DNS lookup.
[ top ]
Complex Type maecVocabs:IRCActionNameVocab-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The IRCActionNameVocab is the default MAEC vocabulary for IRC action names, captured via the ActionType/Name element in CybOX Core.
For IRC action names, it should be used in place of the CybOX ActionNameVocab-1.0.
Diagram
Diagram maec_default_vocabularies.tmp#IRCActionNameVocab-1.0_vocab_name maec_default_vocabularies.tmp#IRCActionNameVocab-1.0_vocab_reference
Type restriction of ControlledVocabularyStringType
[ top ]
Simple Type maecVocabs:IRCActionNameEnum-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The IRCActionNameEnum is a (non-exhaustive) enumeration of the different actions associated with the Internet Relay Chat (IRC).
Diagram
Diagram
Type restriction of xs:string
Facets
enumeration connect to irc server
Specifies the defined action of connecting to an existing IRC server.
enumeration disconnect from irc server
Specifies the defined action of disconnecting from an existing IRC server.
enumeration set irc nickname
Specifies the defined action of setting an IRC nickname on an IRC server.
enumeration join irc channel
Specifies the defined action of joining a channel on an IRC server.
enumeration leave irc channel
Specifies the defined action of leaving a channel on an IRC server.
enumeration send irc private message
Specifies the defined action of sending a private message to another user on an IRC server.
enumeration receive irc private message
Specifies the defined action of receiving a private message from another user on an IRC server.
[ top ]
Complex Type maecVocabs:FTPActionNameVocab-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The FTPActionNameVocab is the default MAEC vocabulary for FTP action names, captured via the ActionType/Name element in CybOX Core.
For FTP action names, it should be used in place of the CybOX ActionNameVocab-1.0.
Diagram
Diagram maec_default_vocabularies.tmp#FTPActionNameVocab-1.0_vocab_name maec_default_vocabularies.tmp#FTPActionNameVocab-1.0_vocab_reference
Type restriction of ControlledVocabularyStringType
[ top ]
Simple Type maecVocabs:FTPActionNameEnum-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The FTPActionNameEnum is a (non-exhaustive) enumeration of the different actions associated with the File Transfer Protocol (FTP).
Diagram
Diagram
Type restriction of xs:string
Facets
enumeration connect to ftp server
Specifies the defined action of connecting to an existing FTP server.
enumeration disconnect from ftp server
Specifies the defined action of disconnecting from an existing FTP server.
enumeration send ftp command
Specifies the defined action of sending a command on an FTP server connection.
[ top ]
Complex Type maecVocabs:HTTPActionNameVocab-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The HTTPActionNameVocab is the default MAEC vocabulary for HTTP action names, captured via the ActionType/Name element in CybOX Core.
For HTTP action names, it should be used in place of the CybOX ActionNameVocab-1.0.
Diagram
Diagram maec_default_vocabularies.tmp#HTTPActionNameVocab-1.0_vocab_name maec_default_vocabularies.tmp#HTTPActionNameVocab-1.0_vocab_reference
Type restriction of ControlledVocabularyStringType
[ top ]
Simple Type maecVocabs:HTTPActionNameEnum-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The HTTPActionNameEnum is a (non-exhaustive) enumeration of the different actions associated with the Hypertext Transfer Protocol (HTTP).
Diagram
Diagram
Type restriction of xs:string
Facets
enumeration send http get request
Specifies the defined action of sending an HTTP GET client request to an existing server.
enumeration send http head request
Specifies the defined action of sending an HTTP HEAD client request to an existing server.
enumeration send http post request
Specifies the defined action of sending an HTTP HEAD client request to an existing server.
enumeration send http put request
Specifies the defined action of sending an HTTP PUT client request to an existing server.
enumeration send http delete request
Specifies the defined action of sending an HTTP DELETE client request to an existing server.
enumeration send http trace request
Specifies the defined action of sending an HTTP TRACE client request to an existing server.
enumeration send http options request
Specifies the defined action of sending an HTTP OPTIONS client request to an existing server.
enumeration send http connect request
Specifies the defined action of sending an HTTP CONNECT client request to an existing server.
enumeration send http patch request
Specifies the defined action of sending an HTTP PATCH client request to an existing server.
enumeration receive http response
Specifies the defined action of receiving an HTTP server response for a prior HTTP request.
[ top ]
Complex Type maecVocabs:NetworkActionNameVocab-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The NetworkActionNameVocab is the default MAEC vocabulary for network action names, captured via the ActionType/Name element in CybOX Core.
For network action names, it should be used in place of the CybOX ActionNameVocab-1.0.
Diagram
Diagram maec_default_vocabularies.tmp#NetworkActionNameVocab-1.0_vocab_name maec_default_vocabularies.tmp#NetworkActionNameVocab-1.0_vocab_reference
Type restriction of ControlledVocabularyStringType
[ top ]
Simple Type maecVocabs:NetworkActionNameEnum-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The NetworkActionNameEnum is a (non-exhaustive) enumeration of the different actions associated with networking.
Diagram
Diagram
Type restriction of xs:string
Facets
enumeration open port
Specifies the defined action of opening a network port.
enumeration close port
Specifies the defined action of closing a network port.
enumeration connect to ip
Specifies the defined action of connecting to an IP address.
enumeration disconnect from ip
Specifies the defined action of disconnecting from a previously established connection with an IP address.
enumeration connect to url
Specifies the defined action of connecting to a URL.
enumeration connect to socket address
Specifies the defined action of connecting to a socket address, consisting of an IP address and port number.
enumeration download file
Specifies the defined action of downloading a file from a remote location.
enumeration upload file
Specifies the defined action of uploading a file to a remote location.
enumeration listen on port
Specifies the defined action of listening on a specific port.
enumeration send email message
Specifies the defined action of sending an email message.
enumeration send icmp request
Specifies the defined action of sending an ICMP request.
[ top ]
Complex Type maecVocabs:NetworkShareActionNameVocab-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The NetworkShareActionNameVocab is the default MAEC vocabulary for Windows network share action names, captured via the ActionType/Name element in CybOX Core.
For network share action names, it should be used in place of the CybOX ActionNameVocab-1.0.
Diagram
Diagram maec_default_vocabularies.tmp#NetworkShareActionNameVocab-1.0_vocab_name maec_default_vocabularies.tmp#NetworkShareActionNameVocab-1.0_vocab_reference
Type restriction of ControlledVocabularyStringType
[ top ]
Simple Type maecVocabs:NetworkShareActionNameEnum-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The NetworkShareActionNameEnum is a (non-exhaustive) enumeration of the different actions associated with Windows network shares.
Diagram
Diagram
Type restriction of xs:string
Facets
enumeration add connection to network share
Specifies the defined action of adding a connection to an existing network share.
enumeration add network share
Specifies the defined action of adding a new network share on a server.
enumeration delete network share
Specifies the defined action of deleting an existing network share on a server.
enumeration connect to network share
Specifies the defined action of connecting to an existing network share.
enumeration disconnect from network share
Specifies the defined action of disconnecting from an existing network share.
enumeration enumerate network shares
Specifies the defined action of enumerating the available shared resources on a server.
[ top ]
Complex Type maecVocabs:SocketActionNameVocab-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The SocketActionNameVocab is the default MAEC vocabulary for socket action names, captured via the ActionType/Name element in CybOX Core.
For socket action names, it should be used in place of the CybOX ActionNameVocab-1.0.
Diagram
Diagram maec_default_vocabularies.tmp#SocketActionNameVocab-1.0_vocab_name maec_default_vocabularies.tmp#SocketActionNameVocab-1.0_vocab_reference
Type restriction of ControlledVocabularyStringType
[ top ]
Simple Type maecVocabs:SocketActionNameEnum-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The SocketActionNameEnum is a (non-exhaustive) enumeration of the different actions associated with network sockets.
Diagram
Diagram
Type restriction of xs:string
Facets
enumeration accept socket connection
Specifies the defined action of accepting a socket connection.
enumeration bind address to socket
Specifies the defined action of binding a socket address to a socket.
enumeration create socket
Specifies the defined action of creating a new socket.
enumeration close socket
Specifies the defined action of closing an existing socket.
enumeration connect to socket
Specifies the defined action of connecting to an existing socket.
enumeration disconnect from socket
Specifies the defined action of disconnecting from an existing socket.
enumeration listen on socket
Specifies the defined action of listening on an existing socket.
enumeration send data on socket
Specifies the defined action of sending data on an existing, connected socket.
enumeration receive data on socket
Specifies the defined action of receiving data on an existing socket.
enumeration send data to address on socket
Specifies the defined action of sending data to a specified IP address on an existing, unconnected socket.
enumeration get host by address
Specifies the defined action of getting information on a host from a local or remote host database by its IP address.
enumeration get host by name
Specifies the defined action of getting information on a host from a local or remote host database by its name.
[ top ]
Complex Type maecVocabs:RegistryActionNameVocab-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The RegistryActionNameVocab is the default MAEC vocabulary for registry action names, captured via the ActionType/Name element in CybOX Core.
For registry action names, it should be used in place of the CybOX ActionNameVocab-1.0.
Diagram
Diagram maec_default_vocabularies.tmp#RegistryActionNameVocab-1.0_vocab_name maec_default_vocabularies.tmp#RegistryActionNameVocab-1.0_vocab_reference
Type restriction of ControlledVocabularyStringType
[ top ]
Simple Type maecVocabs:RegistryActionNameEnum-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The RegistryActionNameEnum is a (non-exhaustive) enumeration of the different actions associated with the Windows registry.
Diagram
Diagram
Type restriction of xs:string
Facets
enumeration create registry key
Specifies the defined action of creating a new registry key.
enumeration delete registry key
Specifies the defined action of deleting an existing registry key.
enumeration open registry key
Specifies the defined action of opening an existing registry key.
enumeration close registry key
Specifies the defined action of closing a handle to an existing registry key.
enumeration create registry key value
Specifies the defined action of creating a new named value under an existing registry key.
enumeration delete registry key value
Specifies the defined action of deleting an existing named value under an existing registry key.
enumeration enumerate registry key subkeys
Specifies the defined action of enumerating the registry key subkeys under an existing registry key.
enumeration enumerate registry key values
Specifies the defined action of enumerating the named values under an existing registry key.
enumeration get registry key attributes
Specifies the defined action of getting the attributes of an existing registry key.
enumeration read registry key value
Specifies the defined action of reading an existing named value of an existing registry key.
enumeration modify registry key value
Specifies the defined action of modifying an existing named value of an existing registry key.
enumeration modify registry key
Specifies the defined action of modifying an existing registry key.
enumeration monitor registry key
Specifies the defined action of monitoring an existing registry key for changes.
[ top ]
Complex Type maecVocabs:UserActionNameVocab-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The UserActionNameVocab is the default MAEC vocabulary for user action names, captured via the ActionType/Name element in CybOX Core.
For user action names, it should be used in place of the CybOX ActionNameVocab-1.0.
Diagram
Diagram maec_default_vocabularies.tmp#UserActionNameVocab-1.0_vocab_name maec_default_vocabularies.tmp#UserActionNameVocab-1.0_vocab_reference
Type restriction of ControlledVocabularyStringType
[ top ]
Simple Type maecVocabs:UserActionNameEnum-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The UserActionNameEnum is a (non-exhaustive) enumeration of the different actions associated with users.
Diagram
Diagram
Type restriction of xs:string
Facets
enumeration add user
Specifies the defined action of adding a new user.
enumeration delete user
Specifies the defined action of deleting an existing user.
enumeration enumerate users
Specifies the defined action of enumerating all users.
enumeration get user attributes
Specifies the defined action of getting the attributes of an existing user.
enumeration logon as user
Specifies the defined action of logging on as a specific user.
[ top ]
Complex Type maecVocabs:IPCActionNameVocab-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The IPCActionNameVocab is the default MAEC vocabulary for inter-process communication action names, captured via the ActionType/Name element in CybOX Core.
For IPC action names, it should be used in place of the CybOX ActionNameVocab-1.0.
Diagram
Diagram maec_default_vocabularies.tmp#IPCActionNameVocab-1.0_vocab_name maec_default_vocabularies.tmp#IPCActionNameVocab-1.0_vocab_reference
Type restriction of ControlledVocabularyStringType
[ top ]
Simple Type maecVocabs:IPCActionNameEnum-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The IPCActionNameEnum is a (non-exhaustive) enumeration of the different actions associated with entities related to Inter-Process Communication (IPC).
Diagram
Diagram
Type restriction of xs:string
Facets
enumeration create named pipe
Specifies the defined action of creating a new named pipe.
enumeration delete named pipe
Specifies the defined action of deleting an existing named pipe.
enumeration connect to named pipe
Specifies the defined action of connecting to an existing named pipe.
enumeration disconnect from named pipe
Specifies the defined action of disconnecting from an existing named pipe.
enumeration read from named pipe
Specifies the defined action of reading some data from an existing named pipe.
enumeration write to named pipe
Specifies the defined action of writing some data to an existing named pipe.
enumeration create mailslot
Specifies the defined action of creating a new named mailslot.
enumeration read from mailslot
Specifies the defined action of reading some data from an existing named mailslot.
enumeration write to mailslot
Specifies the defined action of writing some data to an existing named mailslot.
[ top ]
Complex Type maecVocabs:ProcessMemoryActionNameVocab-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The ProcessMemoryActionNameVocab is the default MAEC vocabulary for process memory action names, captured via the ActionType/Name element in CybOX Core.
For process memory action names, it should be used in place of the CybOX ActionNameVocab-1.0.
Diagram
Diagram maec_default_vocabularies.tmp#ProcessMemoryActionNameVocab-1.0_vocab_name maec_default_vocabularies.tmp#ProcessMemoryActionNameVocab-1.0_vocab_reference
Type restriction of ControlledVocabularyStringType
[ top ]
Simple Type maecVocabs:ProcessMemoryActionNameEnum-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The ProcessMemoryActionNameEnum is a (non-exhaustive) enumeration of the different actions associated with the memory regions of a process.
Diagram
Diagram
Type restriction of xs:string
Facets
enumeration allocate process virtual memory
Specifies the defined action of allocating some virtual memory region in an existing process.
enumeration free process virtual memory
Specifies the defined action of freeing some virtual memory region from an existing process.
enumeration modify process virtual memory protection
Specifies the defined action of modifying the protection on a memory region in the virtual address space of an existing process.
enumeration read from process memory
Specifies the defined action of reading from a memory region of an existing process.
enumeration write to process memory
Specifies the defined action of writing to a memory region of an existing process.
enumeration map file into process
Specifies the defined action of mapping an existing file into the address space of the calling process.
enumeration unmap file from process
Specifies the defined action of unmapping an existing file from the address space of the calling process.
enumeration map library into process
Specifies the defined action of mapping a library into the address space of the calling process.
[ top ]
Complex Type maecVocabs:ProcessActionNameVocab-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The ProcessActionNameVocab is the default MAEC vocabulary for process action names, captured via the ActionType/Name element in CybOX Core.
For process action names, it should be used in place of the CybOX ActionNameVocab-1.0.
Diagram
Diagram maec_default_vocabularies.tmp#ProcessActionNameVocab-1.0_vocab_name maec_default_vocabularies.tmp#ProcessActionNameVocab-1.0_vocab_reference
Type restriction of ControlledVocabularyStringType
[ top ]
Simple Type maecVocabs:ProcessActionNameEnum-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The ProcessActionNameEnum is a (non-exhaustive) enumeration of the different actions associated with processes.
Diagram
Diagram
Type restriction of xs:string
Facets
enumeration create process
Specifies the defined action of creating a new process.
enumeration kill process
Specifies the defined action of killing an existing process.
enumeration create process as user
Specifies the defined action of creating a new process in the security context of a specified user.
enumeration enumerate processes
Specifies the defined action of enumerating all of the running processes on a system.
enumeration open process
Specifies the defined action of opening an existing process.
enumeration flush process instruction cache
Specifies the defined action of flushing the instruction cache of an existing process.
enumeration get process current directory
Specifies the defined action of getting the current directory of an existing process.
enumeration set process current directory
Specifies the defined action of setting the current directory of an existing process.
enumeration get process environment variable
Specifies the defined action of getting an environment variable used by an existing process.
enumeration set process environment variable
Specifies the defined action of setting an environment variable used by an existing process.
enumeration sleep process
Specifies the defined action of sleeping an existing process for some period of time.
enumeration get process startupinfo
Specifies the defined action of getting the STARTUPINFO struct associated with an existing process.
[ top ]
Complex Type maecVocabs:ProcessThreadActionNameVocab-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The ProcessThreadActionNameVocab is the default MAEC vocabulary for process thread action names, captured via the ActionType/Name element in CybOX Core.
For process thread action names, it should be used in place of the CybOX ActionNameVocab-1.0.
Diagram
Diagram maec_default_vocabularies.tmp#ProcessThreadActionNameVocab-1.0_vocab_name maec_default_vocabularies.tmp#ProcessThreadActionNameVocab-1.0_vocab_reference
Type restriction of ControlledVocabularyStringType
[ top ]
Simple Type maecVocabs:ProcessThreadActionNameEnum-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The ProcessThreadActionNameEnum is a (non-exhaustive) enumeration of the different actions associated with process threads.
Diagram
Diagram
Type restriction of xs:string
Facets
enumeration create thread
Specifies the defined action of creating a new thread in the virtual address space of the calling process.
enumeration kill thread
Specifies the defined action of killing a thread existing in the virtual address space of the calling process.
enumeration create remote thread in process
Specifies the defined action of creating a thread that runs in the virtual address space of another existing process.
enumeration enumerate threads
Specifies the defined action of enumerating all threads in the calling process.
enumeration get thread username
Specifies the defined action of getting the name or ID of the user associated with an existing thread.
enumeration impersonate process
Specifies the defined action of a thread in the calling process impersonating the security context of another existing process.
enumeration revert thread to self
Specifies the defined action of reverting an existing thread to its own security context.
enumeration get thread context
Specifies the defined action of getting the context structure (containing processor-specific register data) of an existing thread.
enumeration set thread context
Specifies the defined action of setting the context structure (containing processor-specific register data) for an existing thread.
enumeration queue apc in thread
Specifies the defined action of queing a new Asynchronized Procedure Call (APC) in the context of an existing thread.
[ top ]
Complex Type maecVocabs:ServiceActionNameVocab-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The ServiceActionNameVocab is the default MAEC vocabulary for service action names, captured via the ActionType/Name element in CybOX Core.
For service action names, it should be used in place of the CybOX ActionNameVocab-1.0.
Diagram
Diagram maec_default_vocabularies.tmp#ServiceActionNameVocab-1.0_vocab_name maec_default_vocabularies.tmp#ServiceActionNameVocab-1.0_vocab_reference
Type restriction of ControlledVocabularyStringType
[ top ]
Simple Type maecVocabs:ServiceActionNameEnum-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The ServiceActionNameEnum is a (non-exhaustive) enumeration of the different actions associated with services or daemons.
Diagram
Diagram
Type restriction of xs:string
Facets
enumeration create service
Specifies the defined action of creating a new service.
enumeration delete service
Specifies the defined action of deleting an existing service.
enumeration start service
Specifies the defined action of starting an existing service.
enumeration enumerate services
Specifies the defined action of enumerating a specific set of services on a system.
enumeration modify service configuration
Specifies the defined action of modifying the configuration parameters of an existing service.
enumeration open service
Specifies the defined action of opening an existing service.
enumeration send control code to service
Specifies the defined action of sending a control code to an existing service.
[ top ]
Complex Type maecVocabs:SynchronizationActionNameVocab-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The SynchronizationActionNameVocab is the default MAEC vocabulary for synchronization action names, captured via the ActionType/Name element in CybOX Core.
For synchronization action names, it should be used in place of the CybOX ActionNameVocab-1.0.
Diagram
Diagram maec_default_vocabularies.tmp#SynchronizationActionNameVocab-1.0_vocab_name maec_default_vocabularies.tmp#SynchronizationActionNameVocab-1.0_vocab_reference
Type restriction of ControlledVocabularyStringType
[ top ]
Simple Type maecVocabs:SynchronizationActionNameEnum-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The SynchronizationActionNameEnum is a (non-exhaustive) enumeration of the different actions associated with process and thread synchronization-related entities.
Diagram
Diagram
Type restriction of xs:string
Facets
enumeration create mutex
Specifies the defined action of creating a new named mutex.
enumeration delete mutex
Specifies the defined action of deleting an existing named mutex.
enumeration open mutex
Specifies the defined action of opening an existing named mutex.
enumeration release mutex
Specifies the defined action of releasing ownership of an existing named mutex.
enumeration create semaphore
Specifies the defined action of creating a new named semaphore.
enumeration delete semaphore
Specifies the defined action of deleting an existing named semaphore.
enumeration open semaphore
Specifies the defined action of opening an existing named semaphore.
enumeration release semaphore
Specifies the defined action of releasing ownership of an existing named semaphore.
enumeration create event
Specifies the defined action of creating a new named event object.
enumeration delete event
Specifies the defined action of deleting an existing named event object.
enumeration open event
Specifies the defined action of opening an existing named event object.
enumeration reset event
Specifies the defined action of resetting an existing named event object to the non-signaled state.
enumeration create critical section
Specifies the defined action of creating a new critical section.
enumeration delete critical section
Specifies the defined action of deleting an existing critical section object.
enumeration open critical section
Specifies the defined action of opening an existing critical section object.
enumeration release critical section
Specifies the defined action of releasing an existing critical section object.
[ top ]
Complex Type maecVocabs:SystemActionNameVocab-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The SystemActionNameVocab is the default MAEC vocabulary for system action names, captured via the ActionType/Name element in CybOX Core.
For system action names, it should be used in place of the CybOX ActionNameVocab-1.0.
Diagram
Diagram maec_default_vocabularies.tmp#SystemActionNameVocab-1.0_vocab_name maec_default_vocabularies.tmp#SystemActionNameVocab-1.0_vocab_reference
Type restriction of ControlledVocabularyStringType
[ top ]
Simple Type maecVocabs:SystemActionNameEnum-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The SystemInfoActionNameEnum is a (non-exhaustive) enumeration of the different actions associated with system-related entities.
Diagram
Diagram
Type restriction of xs:string
Facets
enumeration add scheduled task
Specifies the defined action of adding a scheduled task to a system.
enumeration shutdown system
Specifies the defined action of shutting down a system.
enumeration sleep system
Specifies the defined action of sleeping a system for some period of time.
enumeration get elapsed system up time
Specifies the defined action of getting the elapsed up-time for a system.
enumeration get netbios name
Specifies the defined action of getting the NetBIOS name of a system.
enumeration set netbios name
Specifies the defined action of setting the NetBIOS name of a system.
enumeration get system host name
Specifies the defined action of getting the host name of a system.
enumeration set system host name
Specifies the defined action of setting the system host name of a system.
enumeration get system time
Specifies the defined action of getting the system time of a system, represented in Coordinated Universal Time (UTC).
enumeration set system time
Specifies the defined action of setting the system time for a system, represented in Coordinated Universal Time (UTC).
enumeration get system local time
Specifies the defined action of getting the local time of a system.
enumeration set system local time
Specifies the defined action of setting the local time of a system.
enumeration get username
Specifies the defined action of getting the username of the currently logged in user of a system.
enumeration enumerate system handles
Specifies the defined action of enumerating all open handles on a system.
enumeration get system global flags
Specifies the defined action of getting the enabled global flags on a system.
enumeration set system global flags
Specifies the defined action of setting system global flags on a system.
enumeration get windows directory
Specifies the defined action of getting the Windows installation directory on a system.
enumeration get windows system directory
Specifies the defined action of getting the Windows \System directory on a system.
enumeration get windows temporary files directory
Specifies the defined action of getting the Windows Temporary Files Directory on a System.
[ top ]
Complex Type maecVocabs:GUIActionNameVocab-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The GUIActionNameVocab is the default MAEC vocabulary for GUI action names, captured via the ActionType/Name element in CybOX Core.
For GUI action names, it should be used in place of the CybOX ActionNameVocab-1.0.
Diagram
Diagram maec_default_vocabularies.tmp#GUIActionNameVocab-1.0_vocab_name maec_default_vocabularies.tmp#GUIActionNameVocab-1.0_vocab_reference
Type restriction of ControlledVocabularyStringType
[ top ]
Simple Type maecVocabs:GUIActionNameEnum-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The GUIActionNameEnum is a (non-exhaustive) enumeration of the different actions associated with graphical user interfaces (GUIs).
Diagram
Diagram
Type restriction of xs:string
Facets
enumeration create window
Specifies the defined action of creating a new window.
enumeration kill window
Specifies the defined action of killing an existing window.
enumeration create dialog box
Specifies the defined action of creating a new dialog box.
enumeration enumerate windows
Specifies the defined action of enumerating all open windows.
enumeration find window
Specifies the defined action of search for a particular window.
enumeration hide window
Specifies the defined action of hiding an existing window.
enumeration show window
Specifies the defined action of showing an existing window.
[ top ]
Complex Type maecVocabs:GroupingRelationshipTypeVocab-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The GroupingRelationshipTypeVocab is the default MAEC vocabulary for the grouping relatonships in a Package, captured via the GroupingRelationshipType/Type element in the MAEC Package.
Diagram
Diagram maec_default_vocabularies.tmp#GroupingRelationshipTypeVocab-1.0_vocab_name maec_default_vocabularies.tmp#GroupingRelationshipTypeVocab-1.0_vocab_reference
Type restriction of ControlledVocabularyStringType
[ top ]
Simple Type maecVocabs:GroupingRelationshipEnum-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The GroupingRelationshipEnum is a non-exhaustive enumeration of Malware Subject grouping relationships.
Diagram
Diagram
Type restriction of xs:string
Facets
enumeration same malware family
The same malware family value indicates that the Malware Subjects in the Package are all part of the same malware family.
enumeration clustered together
The clustered together value indicates that the Malware Subjects in the Package were clustered together by some algorithm or other mechanism.
enumeration observed together
The observed together value indicates that the Malware Subjects in the Package were abstractly observed together, such as on a host system, in some archive, etc.
enumeration part of intrusion set
The part of intrusion set value indicates that the Malware Subjects in the Package were found as part of the same malware intrusion set.
enumeration same malware toolkit
The same malware toolkit value indicates that the Malware Subjects in the Package were all created using the same malware toolkit, independent of toolkit version.
[ top ]
Complex Type maecVocabs:MalwareSubjectRelationshipTypeVocab-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The GroupingRelationshipTypeVocab is the default MAEC vocabulary for the Malware Subject relatonships in a Package, captured via the MalwareSubjectRelationshipType/Type element in the MAEC Package.
Diagram
Diagram maec_default_vocabularies.tmp#MalwareSubjectRelationshipTypeVocab-1.0_vocab_name maec_default_vocabularies.tmp#MalwareSubjectRelationshipTypeVocab-1.0_vocab_reference
Type restriction of ControlledVocabularyStringType
[ top ]
Simple Type maecVocabs:MalwareSubjectRelationshipEnum-1.0
Namespace http://maec.mitre.org/default_vocabularies-1
Annotations
The MalwareSubjectRelationshipEnum is a non-exhaustive enumeration of relationships between Malware Subjects.
Diagram
Diagram
Type restriction of xs:string
Facets
enumeration downloads
The downloads value specifies that the Malware Subject downloads one or more other Malware Subject(s).
enumeration downloaded by
The downloaded by value specifies that the current Malware Subject was downloaded by one or more other Malware Subject(s).
enumeration drops
The drops value specifies that the Malware Subject drops (or writes to disk) one or more other Malware Subject(s).
enumeration dropped by
The dropped by value specifies that the current Malware Subject was dropped (or written to disk) by one or more other Malware Subject(s).
enumeration extracts
The extracts value specifies that the Malware Subject extracts (from an embedded archive or another container) one or more other Malware Subject(s).
enumeration extracted from
The extracts value specifies that the current Malware Subject was extracted from one or more other Malware Subject(s).
[ top ]
Attribute maecVocabs:ActionObjectAssociationTypeVocab-1.0 / @vocab_name
Namespace No namespace
Type xs:string
[ top ]
Attribute maecVocabs:ActionObjectAssociationTypeVocab-1.0 / @vocab_reference
Namespace No namespace
Type xs:anyURI
[ top ]
Attribute maecVocabs:ImportanceTypeVocab-1.0 / @vocab_name
Namespace No namespace
Type xs:string
[ top ]
Attribute maecVocabs:ImportanceTypeVocab-1.0 / @vocab_reference
Namespace No namespace
Type xs:anyURI
[ top ]
Attribute maecVocabs:MalwareEntityTypeVocab-1.0 / @vocab_name
Namespace No namespace
Type xs:string
[ top ]
Attribute maecVocabs:MalwareEntityTypeVocab-1.0 / @vocab_reference
Namespace No namespace
Type xs:anyURI
[ top ]
Attribute maecVocabs:DeviceDriverActionNameVocab-1.0 / @vocab_name
Namespace No namespace
Type xs:string
[ top ]
Attribute maecVocabs:DeviceDriverActionNameVocab-1.0 / @vocab_reference
Namespace No namespace
Type xs:anyURI
[ top ]
Attribute maecVocabs:DebuggingActionNameVocab-1.0 / @vocab_name
Namespace No namespace
Type xs:string
[ top ]
Attribute maecVocabs:DebuggingActionNameVocab-1.0 / @vocab_reference
Namespace No namespace
Type xs:anyURI
[ top ]
Attribute maecVocabs:LibraryActionNameVocab-1.0 / @vocab_name
Namespace No namespace
Type xs:string
[ top ]
Attribute maecVocabs:LibraryActionNameVocab-1.0 / @vocab_reference
Namespace No namespace
Type xs:anyURI
[ top ]
Attribute maecVocabs:DirectoryActionNameVocab-1.0 / @vocab_name
Namespace No namespace
Type xs:string
[ top ]
Attribute maecVocabs:DirectoryActionNameVocab-1.0 / @vocab_reference
Namespace No namespace
Type xs:anyURI
[ top ]
Attribute maecVocabs:DiskActionNameVocab-1.0 / @vocab_name
Namespace No namespace
Type xs:string
[ top ]
Attribute maecVocabs:DiskActionNameVocab-1.0 / @vocab_reference
Namespace No namespace
Type xs:anyURI
[ top ]
Attribute maecVocabs:FileActionNameVocab-1.0 / @vocab_name
Namespace No namespace
Type xs:string
[ top ]
Attribute maecVocabs:FileActionNameVocab-1.0 / @vocab_reference
Namespace No namespace
Type xs:anyURI
[ top ]
Attribute maecVocabs:HookingActionNameVocab-1.0 / @vocab_name
Namespace No namespace
Type xs:string
[ top ]
Attribute maecVocabs:HookingActionNameVocab-1.0 / @vocab_reference
Namespace No namespace
Type xs:anyURI
[ top ]
Attribute maecVocabs:DNSActionNameVocab-1.0 / @vocab_name
Namespace No namespace
Type xs:string
[ top ]
Attribute maecVocabs:DNSActionNameVocab-1.0 / @vocab_reference
Namespace No namespace
Type xs:anyURI
[ top ]
Attribute maecVocabs:IRCActionNameVocab-1.0 / @vocab_name
Namespace No namespace
Type xs:string
[ top ]
Attribute maecVocabs:IRCActionNameVocab-1.0 / @vocab_reference
Namespace No namespace
Type xs:anyURI
[ top ]
Attribute maecVocabs:FTPActionNameVocab-1.0 / @vocab_name
Namespace No namespace
Type xs:string
[ top ]
Attribute maecVocabs:FTPActionNameVocab-1.0 / @vocab_reference
Namespace No namespace
Type xs:anyURI
[ top ]
Attribute maecVocabs:HTTPActionNameVocab-1.0 / @vocab_name
Namespace No namespace
Type xs:string
[ top ]
Attribute maecVocabs:HTTPActionNameVocab-1.0 / @vocab_reference
Namespace No namespace
Type xs:anyURI
[ top ]
Attribute maecVocabs:NetworkActionNameVocab-1.0 / @vocab_name
Namespace No namespace
Type xs:string
[ top ]
Attribute maecVocabs:NetworkActionNameVocab-1.0 / @vocab_reference
Namespace No namespace
Type xs:anyURI
[ top ]
Attribute maecVocabs:NetworkShareActionNameVocab-1.0 / @vocab_name
Namespace No namespace
Type xs:string
[ top ]
Attribute maecVocabs:NetworkShareActionNameVocab-1.0 / @vocab_reference
Namespace No namespace
Type xs:anyURI
[ top ]
Attribute maecVocabs:SocketActionNameVocab-1.0 / @vocab_name
Namespace No namespace
Type xs:string
[ top ]
Attribute maecVocabs:SocketActionNameVocab-1.0 / @vocab_reference
Namespace No namespace
Type xs:anyURI
[ top ]
Attribute maecVocabs:RegistryActionNameVocab-1.0 / @vocab_name
Namespace No namespace
Type xs:string
[ top ]
Attribute maecVocabs:RegistryActionNameVocab-1.0 / @vocab_reference
Namespace No namespace
Type xs:anyURI
[ top ]
Attribute maecVocabs:UserActionNameVocab-1.0 / @vocab_name
Namespace No namespace
Type xs:string
[ top ]
Attribute maecVocabs:UserActionNameVocab-1.0 / @vocab_reference
Namespace No namespace
Type xs:anyURI
[ top ]
Attribute maecVocabs:IPCActionNameVocab-1.0 / @vocab_name
Namespace No namespace
Type xs:string
[ top ]
Attribute maecVocabs:IPCActionNameVocab-1.0 / @vocab_reference
Namespace No namespace
Type xs:anyURI
[ top ]
Attribute maecVocabs:ProcessMemoryActionNameVocab-1.0 / @vocab_name
Namespace No namespace
Type xs:string
[ top ]
Attribute maecVocabs:ProcessMemoryActionNameVocab-1.0 / @vocab_reference
Namespace No namespace
Type xs:anyURI
[ top ]
Attribute maecVocabs:ProcessActionNameVocab-1.0 / @vocab_name
Namespace No namespace
Type xs:string
[ top ]
Attribute maecVocabs:ProcessActionNameVocab-1.0 / @vocab_reference
Namespace No namespace
Type xs:anyURI
[ top ]
Attribute maecVocabs:ProcessThreadActionNameVocab-1.0 / @vocab_name
Namespace No namespace
Type xs:string
[ top ]
Attribute maecVocabs:ProcessThreadActionNameVocab-1.0 / @vocab_reference
Namespace No namespace
Type xs:anyURI
[ top ]
Attribute maecVocabs:ServiceActionNameVocab-1.0 / @vocab_name
Namespace No namespace
Type xs:string
[ top ]
Attribute maecVocabs:ServiceActionNameVocab-1.0 / @vocab_reference
Namespace No namespace
Type xs:anyURI
[ top ]
Attribute maecVocabs:SynchronizationActionNameVocab-1.0 / @vocab_name
Namespace No namespace
Type xs:string
[ top ]
Attribute maecVocabs:SynchronizationActionNameVocab-1.0 / @vocab_reference
Namespace No namespace
Type xs:anyURI
[ top ]
Attribute maecVocabs:SystemActionNameVocab-1.0 / @vocab_name
Namespace No namespace
Type xs:string
[ top ]
Attribute maecVocabs:SystemActionNameVocab-1.0 / @vocab_reference
Namespace No namespace
Type xs:anyURI
[ top ]
Attribute maecVocabs:GUIActionNameVocab-1.0 / @vocab_name
Namespace No namespace
Type xs:string
[ top ]
Attribute maecVocabs:GUIActionNameVocab-1.0 / @vocab_reference
Namespace No namespace
Type xs:anyURI
[ top ]
Attribute maecVocabs:GroupingRelationshipTypeVocab-1.0 / @vocab_name
Namespace No namespace
Type xs:string
[ top ]
Attribute maecVocabs:GroupingRelationshipTypeVocab-1.0 / @vocab_reference
Namespace No namespace
Type xs:anyURI
[ top ]
Attribute maecVocabs:MalwareSubjectRelationshipTypeVocab-1.0 / @vocab_name
Namespace No namespace
Type xs:string
[ top ]
Attribute maecVocabs:MalwareSubjectRelationshipTypeVocab-1.0 / @vocab_reference
Namespace No namespace
Type xs:anyURI
[ top ]