Skip to main content

STIX Bundle Schema

StixBundle

Object containing the following properties:

PropertyDescriptionType
id (*)any
type (*)'bundle'
spec_version (*)The version of the STIX specification used to represent this object. The value of this property MUST be 2.1 for STIX Objects defined according to this specification. If objects are found where this property is not present, the implicit value for all STIX Objects other than SCOs is 2.0. Since SCOs are now top-level objects in STIX 2.1, the default value for SCOs is 2.1.'2.0' | '2.1'
objects (*)AttackObjects

(*) Required.

AttackObjects

Array of at least 1 Asset | Campaign | Collection | DataComponent | DataSource | Group | Identity | Malware | Matrix | Mitigation | Tactic | Technique | Tool | MarkingDefinition | Relationship objects.