STIX Schema Development
Python
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Failed to load latest commit information.
cybox @ 3976ac9
extensions
external
samples
.gitignore
.gitmodules
.travis.yml
README.md
campaign.xsd
common.xsd
core.xsd
course-of-action.xsd
data-marking.xsd
exploit-target.xsd
incident.xsd
indicator.xsd
report.xsd
test_manifest.cfg
test_runner.py
threat-actor.xsd
ttp.xsd
vocabularies.xsd

README.md

STIX Schema Development

NOTE: If you are looking for official releases of STIX, please see http://stixproject.github.io/releases/1.2/. The schemas in this respository (even the tagged releases) are NOT OFFICIAL, as there are a couple post-processing steps not covered in the files in this repository. If there are any inconsistencies between the files in this repository and the files on https://stixproject.github.io/, the files there take precedence.

About STIX

Structured Threat Information eXpression (STIX) is a collaborative community-driven effort to define and develop a standardized language to represent structured cyber threat information. The STIX Language intends to convey the full range of potential cyber threat information and strives to be fully expressive, flexible, extensible, automatable, and as human-readable as possible. All interested parties are welcome to participate in evolving STIX as part of its open, collaborative community.

Please visit the STIX website for more information about the STIX Language.

Getting Help

Join the public chat

E-mail the developers at stix@mitre.org

Get started with a STIX tutorial

Cloning the repository

This STIX schemas repository uses git submodules in order to include the CybOX schemas (which are a dependency of the STIX schemas).

A straight git clone command will not retrieve these automatically, you'll end up with an empty cybox directory rather than the schemas. To fix this you need to initialize and then update the submodules by running:

git submodule init
git submodule update

Alternatively, using the --recursive flag when cloning the repository will automatically initialize and update the submodules.

Finally, any time you see that the cybox directory has been modified (when merging or pulling updates) you will need to run git submodule update again to actually update the schemas themselves.