​4.2​ Object Markings

Object Markings apply data markings to an entire STIX Object or Marking Definition and all of its contents. Object Markings are specified as embedded relationships in the object_marking_refs property, which is an optional list of IDs for marking-definition objects. The referenced markings apply to that STIX Object or Marking Definition and all of its contents. Changes to the object_marking_refs property (and therefore the markings applied to the object) are treated the same as changes to any other properties on the object and follow the same rules for versioning.

​

Examples

This example marks the Indicator and all its properties with the Marking Definition referenced by the ID.

{

"type": "indicator",

"id": "indicator--b346b4b3-f4b7-4235-b659-f985f65f0009",

...

"object_marking_refs": ["marking-definition--089a6ecb-cc15-43cc-9494-767639779123"],

...

}