CybOX_Simple_File_Pattern.xml

<?xml version="1.0" encoding="UTF-8"?>
<cybox:Observables xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xmlns:cybox="http://docs.oasis-open.org/cti/ns/cybox/core-2"
    xmlns:cyboxCommon="http://docs.oasis-open.org/cti/ns/cybox/common-2"
    xmlns:FileObj="http://docs.oasis-open.org/cti/ns/cybox/objects/file-2"
    xmlns:cyboxVocabs="http://docs.oasis-open.org/cti/ns/cybox/vocabularies-2"
    xmlns:example="http://example.com/"
    xsi:schemaLocation="
    http://docs.oasis-open.org/cti/ns/cybox/core-2 ../core.xsd
    http://docs.oasis-open.org/cti/ns/cybox/objects/file-2 ../objects/File_Object.xsd
    http://docs.oasis-open.org/cti/ns/cybox/vocabularies-2 ../default_vocabularies.xsd"
    cybox_major_version="2" cybox_minor_version="1" cybox_update_version="1">
    <cybox:Observable id="example:Observable-58115a77-e24a-42b5-bb29-7bd66fa9655f">
        <cybox:Description>This observable specifies a specific file observation.</cybox:Description>
        <cybox:Object id="example:Object-17e97e7c-d3e6-4139-891b-291576dc5d41">
            <cybox:Properties xsi:type="FileObj:FileObjectType">
                <FileObj:File_Name condition="Contains">Paris</FileObj:File_Name>
                <FileObj:File_Extension>.exe</FileObj:File_Extension>
            </cybox:Properties>
        </cybox:Object>
    </cybox:Observable>
</cybox:Observables>