3.1 Common Properties
| Property Name | Type | Description |
|---|---|---|
| type (required) | string | The type property identifies the type of STIX Object. The value of the type property MUST be the name of one of the types of STIX Object defined in sections 2 and 3 of |
STIX™ Version 2.0. Part 2: STIX Objects
(e.g., indicator) or the name of a custom object as defined by section 7.2. | | id (required) | identifier | The id property universally and uniquely identifies this object. All objects with the same id are considered different versions of the same object. | | created_by_ref (optional) | identifier | The created_by_ref property specifies the ID of the Identity object that describes the entity that created this object. | | created (required) | timestamp | The created property represents the time at which the first version of this object was created. The object creator can use the time it deems most appropriate as the time the object was created. | | modified (required) | timestamp | The modified property represents the time that this particular version of the object was created. The object creator can use the time it deems most appropriate as the time this version of the object was modified. The value of the modified property for a given object version MUST be later than or equal to the value of the created property. | | revoked (optional) | boolean | The revoked property indicates whether the object has been revoked. Revoked objects are no longer considered valid by the object creator. Revoking an object is permanent; future versions of the object with this id MUST NOT be created. | | labels (optional) | list of type string | The labels property specifies a set of classifications. | | external_references | list of type external-reference | The external_references property specifies a list of external references which refers to non-STIX information. This property is used to provide one or more URLs, descriptions, or IDs to records in other systems. | | object_marking_refs (optional) | list of type identifier | The object_marking_refs property specifies a list of IDs of marking-definition objects that apply to this object. | | granular_markings (optional) | list of type granular-marking | The granular_markings property specifies a list of granular markings applied to this object. |