Skip to main content

Table 2 STIX extensions

From: Human-as-a-security-sensor for harvesting threat intelligence

ClassificationBase entityAdditional EntityAdditional attribute
IntelligenceTTPStructural EventStructuralEventTypeVocab
 TTPEnvironmental EventEnvironmentalEventTypeVocab
 TTPLegal EventLegalEventTypeVocab
AttributionThreat ActorStructural SourceStructuralSourceTypeVocab
 Incident  
IndicatorObservable Observation