All Classes and Interfaces

Class	Description
AccountTypes
AllowedParents	Values must be Array of Cyber Observable Object Interfaces!.
ArchiveFileExtension	The Archive File extension specifies a default extension for capturing properties specific to archive files.
ArchiveFileExtension.Builder	Builds instances of type ArchiveFileExtension.
ArchiveFileExtensionExt	The Archive File extension specifies a default extension for capturing properties specific to archive files.
Artifact	Immutable implementation of ArtifactCoo.
Artifact.Builder	Builds instances of type Artifact.
ArtifactCoo
AttackMotivations
AttackPattern	attack-pattern
AttackPattern.Builder	Builds instances of type AttackPattern.
AttackPatternGraphGenerator	Specialized graph generator for Attack Pattern SDO.
AttackPatternSdo	attack-pattern
AttackResourceLevels
AutonomousSystem	autonomous-system
AutonomousSystem.Builder	Builds instances of type AutonomousSystem.
AutonomousSystemCoo	autonomous-system
Bundle	Immutable implementation of BundleObject.
Bundle.Builder	Builds instances of type Bundle.
BundleableObject	This interface is typically inherited by other interfaces that are considered "objects" that are part of a Bundle.
BundleableObjectConverter	Generates a Dehydrated Bundleable Object based on a ID.
BundleableObjectGraphGenerator
BundleableObjectRedactionProcessor
BundleableObjectSetConverter	Generates a Dehydrated Bundleable Object based on a ID from a Set of BundleableObjects.
BundleObject	bundle
BundleObjectGraphGenerator
BusinessRule	The interface Business rule.
BusinessRule.List	The interface List.
Campaign	campaign
Campaign.Builder	Builds instances of type Campaign.
CampaignGraphGenerator	Specialized graph generator for Campaign SDO.
CampaignSdo	campaign
ComparisonExpression	Represents a comparison expression in a STIX pattern.
CompoundExpression	Represents a compound expression in a STIX pattern (AND/OR).
CompoundExpression.Operator
CourseOfAction	course-of-action
CourseOfAction.Builder	Builds instances of type CourseOfAction.
CourseOfActionSdo	course-of-action
CustomObject	Immutable implementation of GenericCustomObject.
CustomObject.Builder	Builds instances of type CustomObject.
CyberObservableExtension	Interface to tag Cyber Observable Extension classes
CyberObservableExtensionCommonProperties
CyberObservableExtensionsFieldDeserializer
CyberObservableExtensionsFieldSerializer
CyberObservableGraphGenerator	Generally used by the Observed Data SDO Graph Generator
CyberObservableObject
CyberObservableObjectCommonProperties
CyberObservableSetFieldDeserializer
CyberObservableSetFieldSerializer
DefaultTypeValue	Sets the default value of the type field for a Bundleable object.
DefaultValuesProcessor
Directory	directory
Directory.Builder	Builds instances of type Directory.
DirectoryCoo	directory
DomainName	domain-name
DomainName.Builder	Builds instances of type DomainName.
DomainNameCoo	domain-name
DomainObject	Base interface used by Immutable STIX Domain Objects
DomainObjectConverter	Generates a Dehydrated Domain Object based on a ID.
DomainObjectGraphGenerator
DomainObjectOptionalConverter	Generates a Dehydrated Domain Object based on a ID.
Edge
EdgeData
EmailAddress	email-addr
EmailAddress.Builder	Builds instances of type EmailAddress.
EmailAddressCoo	email-addr
EmailMessage	The Email Message Object represents an instance of an email message.
EmailMessage.Builder	Builds instances of type EmailMessage.
EmailMessageCoo	The Email Message Object represents an instance of an email message.
EncryptionAlgorithms
ExtensionDefinition	extension-definition
ExtensionDefinitionObject	Immutable implementation of ExtensionDefinition.
ExtensionDefinitionObject.Builder	Builds instances of type ExtensionDefinitionObject.
ExternalReference	external-reference
ExternalReference.Builder	Builds instances of type ExternalReference.
ExternalReferenceType	external-reference
File	file
File.Builder	Builds instances of type File.
FileCoo	file
GenericCustomObject
GenericValidation
GranularMarking	Immutable implementation of GranularMarkingDm.
GranularMarking.Builder	Builds instances of type GranularMarking.
GranularMarkingDm
GraphElement
GraphGenerator
Grouping	grouping
Grouping.Builder	Builds instances of type Grouping.
GroupingContext	Grouping Context is an open vocabulary used to describe the context of a grouping of STIX objects.
GroupingSdo	grouping
HashingAlgorithms
HashingVocab	A modified version of the @StartsWith annotation, where this modified version provides a parameter level control over Map keys, that meet the Hashes spec, and allows x_ key names in addition
HttpRequestExtension	http-request-ext
HttpRequestExtension.Builder	Builds instances of type HttpRequestExtension.
HttpRequestExtensionExt	http-request-ext
IcmpExtension	icmp-ext
IcmpExtension.Builder	Builds instances of type IcmpExtension.
IcmpExtensionExt	icmp-ext
Identity	identity
Identity.Builder	Builds instances of type Identity.
IdentityClasses
IdentitySdo	identity
ImplementationLanguage	Implementation Language is an open vocabulary that describes programming languages that might be used to implement malware or other software.
Incident	incident
Incident.Builder	Builds instances of type Incident.
IncidentSdo	incident
Indicator	indicator
Indicator.Builder	Builds instances of type Indicator.
IndicatorGraphGenerator	Specialized graph generator for Indicator SDO.
IndicatorLabels
IndicatorSdo	indicator
IndicatorTypes	Indicator Type is an open vocabulary used to categorize indicators.
IndustrySectors
Infrastructure	infrastructure
Infrastructure.Builder	Builds instances of type Infrastructure.
InfrastructureGraphGenerator	Specialized graph generator for Infrastructure SDO.
InfrastructureSdo	infrastructure
InfrastructureTypes	Infrastructure Type is an open vocabulary used to describe the type of infrastructure.
IntrusionSet	intrusion-set
IntrusionSet.Builder	Builds instances of type IntrusionSet.
IntrusionSetGraphGenerator	Specialized graph generator for Intrusion Set SDO.
IntrusionSetSdo	intrusion-set
Ipv4Address	ipv4-addr
Ipv4Address.Builder	Builds instances of type Ipv4Address.
Ipv4AddressCoo	ipv4-addr
Ipv6Address	ipv6-addr
Ipv6Address.Builder	Builds instances of type Ipv6Address.
Ipv6AddressCoo	ipv6-addr
KillChainPhase	kill-chain-phase
KillChainPhase.Builder	Builds instances of type KillChainPhase.
KillChainPhaseType	kill-chain-phase
KillChainPhaseType.LockheedMartinKillChain	Create an Enumeration of the most common one: Lockheed-Martin
LanguageContent	language-content
LanguageContentObject	Immutable implementation of LanguageContent.
LanguageContentObject.Builder	Builds instances of type LanguageContentObject.
ListExpression	Represents a list of values in a STIX pattern.
LiteralExpression	Represents a literal value expression in a STIX pattern.
LiteralExpression.LiteralType
Location	location
Location.Builder	Builds instances of type Location.
LocationSdo	location
MacAddress	mac-addr
MacAddress.Builder	Builds instances of type MacAddress.
MacAddressCoo	mac-addr
Malware	malware
Malware.Builder	Builds instances of type Malware.
MalwareAnalysis	malware-analysis
MalwareAnalysis.Builder	Builds instances of type MalwareAnalysis.
MalwareAnalysisSdo	malware-analysis
MalwareCapabilities	Malware Capabilities is an open vocabulary that describes capabilities that a piece of malware may possess.
MalwareGraphGenerator	Specialized graph generator for Malware SDO.
MalwareLabels
MalwareResult	Malware Result is an open vocabulary used to describe the result of a malware analysis.
MalwareSdo	malware
MarkingDefinition	Immutable implementation of MarkingDefinitionDm.
MarkingDefinition.Builder	Builds instances of type MarkingDefinition.
MarkingDefinitionConverter	Generates a Dehydrated Domain Object based on a ID.
MarkingDefinitionDm
MarkingDefinitionGraphGenerator
MarkingDefinitionSetConverter	Generates a Dehydrated Marking Definition Set used for Deserialization
MarkingDefinitionTypeLimit	To only be used on STIX MarkingDefinition class.
MarkingDefinitionTypeLimit.List
MimePartType	Specifies a component of a multi-part email body.
MimePartType.Builder	Builds instances of type MimePartType.
MimePartTypeObj	Specifies a component of a multi-part email body.
Mutex	mutex
Mutex.Builder	Builds instances of type Mutex.
MutexCoo	mutex
NetworkSocketAddressFamilies
NetworkSocketExtension	socket-ext
NetworkSocketExtension.Builder	Builds instances of type NetworkSocketExtension.
NetworkSocketExtensionExt	socket-ext
NetworkSocketProtocolFamilies
NetworkSocketTypes
NetworkTraffic	network-traffic
NetworkTraffic.Builder	Builds instances of type NetworkTraffic.
NetworkTrafficCoo	network-traffic
Node
NodeData
Note	note
Note.Builder	Builds instances of type Note.
NoteSdo	note
NoValidation
NtfsAlternateDataStream	The Alternate Data Stream type represents an NTFS alternate data stream.
NtfsAlternateDataStream.Builder	Builds instances of type NtfsAlternateDataStream.
NtfsAlternateDataStreamObj	The Alternate Data Stream type represents an NTFS alternate data stream.
NtfsFileExtenstion	The NTFS file extension specifies a default extension for capturing properties specific to the storage of the file on the NTFS file system.
NtfsFileExtenstion.Builder	Builds instances of type NtfsFileExtenstion.
NtfsFileExtenstionExt	The NTFS file extension specifies a default extension for capturing properties specific to the storage of the file on the NTFS file system.
ObjectPathExpression	Represents an object path expression in a STIX pattern.
ObservationExpression	Represents an observation expression in a STIX pattern.
ObservedData	observed-data
ObservedData.Builder	Builds instances of type ObservedData.
ObservedDataGraphGenerator
ObservedDataSdo	observed-data
Opinion	opinion
Opinion.Builder	Builds instances of type Opinion.
OpinionEnum	Opinion Enum is an enumeration that captures different levels of agreement or disagreement.
OpinionSdo	opinion
PatternExpression	Base interface for STIX pattern expressions.
PatternExpression.ExpressionType	Expression types in STIX patterns
PatternType	Pattern Type is an open vocabulary that describes the pattern language used in an indicator pattern.
PatternVisitor<T>	Visitor interface for traversing STIX pattern expression trees.
PdfFileExtension	The PDF file extension specifies a default extension for capturing properties specific to PDF files.
PdfFileExtension.Builder	Builds instances of type PdfFileExtension.
PdfFileExtensionExt	The PDF file extension specifies a default extension for capturing properties specific to PDF files.
Process	process
Process.Builder	Builds instances of type Process.
ProcessCoo	process
ProcessorArchitecture	Processor Architecture is an open vocabulary that describes different processor architectures for systems that malware or other software might be compiled for or that might be targeted.
QualifiedExpression	Represents a qualified observation expression in a STIX pattern.
QualifiedExpression.Qualifier
RasterImageFileExtension	The Raster Image file extension specifies a default extension for capturing properties specific to image files.
RasterImageFileExtension.Builder	Builds instances of type RasterImageFileExtension.
RasterImageFileExtensionExt	The Raster Image file extension specifies a default extension for capturing properties specific to image files.
Redactable	Marker to indicate which classes and methods are Redactable.
Region	Region is an open vocabulary that describes geographical regions.
Relationship	relationship
Relationship.Builder	Builds instances of type Relationship.
RelationshipLimit
RelationshipLimit.List
RelationshipObject
RelationshipSro	relationship
RelationshipSroGraphGenerator
RelationshipTypeLimit	To only be used on STIX Relationship class.
RelationshipTypeLimit.List
RelationshipTypes
Report	report
Report.Builder	Builds instances of type Report.
ReportLabels
ReportSdo	report
ReportTypes	Report Types is an open vocabulary that describes the primary purpose or subject of a report.
SdoDefaultValidator
SequenceDefault
SequenceValidationIdOnly
Sighting	sighting
Sighting.Builder	Builds instances of type Sighting.
SightingSro	sighting
SightingSroGraphGenerator
Software	software
Software.Builder	Builds instances of type Software.
SoftwareCoo	software
StartsWith	Provides a Starts With validator of String values.
Statement	Immutable implementation of StatementMarkingObject.
Statement.Builder	Builds instances of type Statement.
StatementMarkingObject
Stix	Base generic interface used for indentifying that a object is a Stix based object (a Bundle or Bundleable object) Used mainly for generics and parsing.
StixBoolean	Wrapper for boolean that is used in Stix to track if the boolean value was User provided.
StixBooleanDeserializer
StixBooleanSerializer
StixCommonProperties	Base interface used by Immutable STIX Bundleable Objects
StixCustomObject	Provides a Generic STIX Custom Object to use for Bundleable objects when the object is not included in the mappings.
StixCustomObjectId
StixCustomObjectType
StixCustomProperties	Stix Custom Properties
StixCustomPropertiesConfig	STIX Custom properties configuration
StixDataFormats
StixDefaultTypeValueBundleableValidator	This is used on any class that implements BundleableObject.
StixDefaultTypeValueBundleObjectValidator	This is used solely for a STIX Bundle.
StixDefaultTypeValueCyberObservableExtensionValidator	This is used on any class that implements CyberObservableObject.
StixDefaultTypeValueCyberObservableValidator	This is used on any class that implements CyberObservableObject.
StixGraphGenerator
StixHashingVocabValidatorString
StixInstant	Stores a Java.time Instant and stores the original sub-second precision digital count.
StixInstantDeserializer
StixInstantSerializer
StixLabels
StixMarkingDefinitionTypeLimitValidator
StixMarkingObject
StixModified
StixParsers	Default JSON Mapper is configured with JsonMapperBase configs + StixSubTypesModule + StixInstantModule
StixParserValidationException
StixPattern	Represents a parsed STIX pattern.
StixPatternParser	Parser for STIX pattern strings.
StixPatternValidator	Validator for STIX patterns.
StixPatternValidator.ValidationResult	Result of pattern validation
StixRelationshipLimitValidator
StixRelationshipTypeLimitValidator
StixRevoked
StixSpecVersion
StixSpecVersion
StixStartsWithValidatorString
StixValidateBusinessRuleValidator
StixValidateParentCooValidator
StixValidateParentCooValidator
StixVocabulary
StixVocabValidatorCollection
StixVocabValidatorOptionalString
StixVocabValidatorString
TcpExtension	tcp-ext
TcpExtension.Builder	Builds instances of type TcpExtension.
TcpExtensionExt	tcp-ext
ThreatActor	threat-actor
ThreatActor.Builder	Builds instances of type ThreatActor.
ThreatActorGraphGenerator	Specialized graph generator for Threat Actor SDO.
ThreatActorLabels
ThreatActorRoles
ThreatActorSdo	threat-actor
ThreatActorSophistication
ThreatActorTypes	Threat Actor Types is an open vocabulary that describes different types of threat actors.
Tlp	Immutable implementation of TlpMarkingObject.
Tlp.Builder	Builds instances of type Tlp.
TlpLevels
TlpMarkingObject
Tool	tool
Tool.Builder	Builds instances of type Tool.
ToolLabels
ToolSdo	tool
ToolTypes	Tool Types is an open vocabulary that describes the type or classification of tools.
UnixAccountExtension	unix-account-ext
UnixAccountExtension.Builder	Builds instances of type UnixAccountExtension.
UnixAccountExtensionExt	unix-account-ext
Url	url
Url.Builder	Builds instances of type Url.
UrlCoo	url
UserAccount	user-account
UserAccount.Builder	Builds instances of type UserAccount.
UserAccountCoo	user-account
ValidateExtensions	Used to Validation Cyber Observable Extensions Should only be placed on Cyber Observable Object classes.
ValidateIdOnly	Validate ID Only Group used by javax.validation
ValidateReferences	Used to Validation Cyber Observable Extensions Should only be placed on Cyber Observable Object classes.
Vocab	Provides STIX Vocabulary validation for String and Set<String> fields.
Vulnerability	vulnerability
Vulnerability.Builder	Builds instances of type Vulnerability.
VulnerabilitySdo	vulnerability
VulnerabilityTypes	Vulnerability Types is an open vocabulary that describes types of vulnerabilities.
WindowsPeBinaryFileExtension	The Windows PE Binary File extension specifies a default extension for capturing properties specific to Windows portable executable (PE) files.
WindowsPeBinaryFileExtension.Builder	Builds instances of type WindowsPeBinaryFileExtension.
WindowsPeBinaryFileExtensionExt	The Windows PE Binary File extension specifies a default extension for capturing properties specific to Windows portable executable (PE) files.
WindowsPeBinaryTypes
WindowsPeOptionalHeader	The Windows PE Optional Header type represents the properties of the PE optional header.
WindowsPeOptionalHeader.Builder	Builds instances of type WindowsPeOptionalHeader.
WindowsPeOptionalHeaderObj	The Windows PE Optional Header type represents the properties of the PE optional header.
WindowsPeSection	The PE Section type specifies metadata about a PE file section.
WindowsPeSection.Builder	Builds instances of type WindowsPeSection.
WindowsPeSectionObj	The PE Section type specifies metadata about a PE file section.
WindowsProcessExtension	The Windows Process extension specifies a default extension for capturing properties specific to Windows processes.
WindowsProcessExtension.Builder	Builds instances of type WindowsProcessExtension.
WindowsProcessExtensionExt	The Windows Process extension specifies a default extension for capturing properties specific to Windows processes.
WindowsRegistryKey	windows-registry-key
WindowsRegistryKey.Builder	Builds instances of type WindowsRegistryKey.
WindowsRegistryKeyCoo	windows-registry-key
WindowsRegistryValue	The Windows Registry Value type captures the properties of a Windows Registry Key Value.
WindowsRegistryValue.Builder	Builds instances of type WindowsRegistryValue.
WindowsRegistryValueDataTypes
WindowsRegistryValueObj	The Windows Registry Value type captures the properties of a Windows Registry Key Value.
WindowsServiceExtension	windows-service-ext
WindowsServiceExtension.Builder	Builds instances of type WindowsServiceExtension.
WindowsServiceExtensionExt	windows-service-ext
WindowsServiceStartTypes
WindowsServiceStatuses
WindowsServiceTypes
X509Certificate	x509-certificate
X509Certificate.Builder	Builds instances of type X509Certificate.
X509CertificateCoo	x509-certificate
X509v3Extensions	x509-certificate
X509v3Extensions.Builder	Builds instances of type X509v3Extensions.
X509v3ExtensionsObj	x509-certificate