Version 4.1 (Official)

This page provides information on the current official release of the MAEC Language. All information about the new version is included in this centralized location. Join the MAEC Community to participate in the next version of MAEC.

Specifications

The MAEC Language Specifications provide detailed descriptions of the data model used in the MAEC Language. Please submit any comments or questions about the current versions of these specifications to maec-discussion-list@lists.mitre.org and/or directly to maec@mitre.org.

Back to top

Downloads

Includes downloads for the Version 4.1 Schemas, Version 4.1 Example Files, and related documentation.

KEY

  • Complete Schema — has all documentation embedded.
  • Documentation html — element dictionaries, which users can elect to view in a browser or save.
  • Documentation pdf — a diagram demonstrating the MAEC Capabilities and Objectives hierarchy, as implemented in this version. High-level Capabilities are in light blue, Strategic Objectives are in orange, and Tactical Objectives are in peach.
  • All files zip — all the files in a section zipped together to allow for one simple download.
  • xsd/xml/sch — a user can either right click to download the file or left click to open the file in their default viewer.

MAEC Schema Downloads

File Name Schema Version Complete Schema Documentation
All Files n/a zip n/a
All Files (offline, with examples and documentation) n/a zip n/a
MAEC Bundle 4.1 xsd html
MAEC Package 2.1 xsd html
MAEC Container 2.1 xsd html
MAEC Default Vocabularies 1.1 xsd html
MAEC Capabilities Hierarchy Diagram n/a n/a pdf
Back to top

Release Notes

The major highlights of Version 4.1 are listed below:

  • Added support for Cyber Observable eXpression (CybOX™) Version 2.1.
  • Added implementation of MAEC Capabilities, for capturing the set of high-level abilities that a malware instance may possess (please see the detailed release notes for details).
  • Added ability to "label" a Malware Subject with common terms, e.g., "worm".
  • Added ability to capture details of configuration parameters used by a malware instance.
  • Added ability to capture details of the development environment used in the development of a malware instance.
  • Made numerous vocabulary updates, tweaks, and changes.

For more information please see the detailed Release Notes or schema annotations contained in the links above.

Back to top

Examples

  • Please see the MAEC Examples page for up-to-date examples for this release.
Back to top

Timeline

PLANNING DRAFT(S) RELEASE CANDIDATE OFFICIAL
26 April 2013 9 January 2014 4 February 2014 11 February 2014

Status Reports

Back to top

Status updates are included below. You may also review the MAEC Community Discussion Archive for discussions about Version 4.1.

[2014-06-12]
Four (4) specification documents have been released for MAEC Version 4.1—the "MAEC Bundle Specification," "MAEC Package Specification," "MAEC Container Specification," and "MAEC Default Vocabularies Specification"—all of which are available for download from the Specifications section above.
[2014-02-11]
The Official release of Version 4.1 of the MAEC Language is now available. Many thanks to all in the MAEC Community who helped with this release.
[2014-02-04]
A Release Candidate of Version 4.1 of the MAEC Language is now available. Please send any comments or concerns about this release to the MAEC Community Discussion List, or directly to maec@mitre.org.
[2014-01-09]
A Draft of Version 4.1 of the MAEC Language is now available. If you have any suggestions for changes that should be included, please send them to the MAEC Community Discussion List, or directly to maec@mitre.org.
[2013-04-26]
Version 4.1 of the MAEC Language in the planning stage. If you have any suggestions for changes that should be included, please send them to the MAEC Community Discussion List, or directly to maec@mitre.org.
Back to top

Page Last Updated: June 12, 2014