Interface ToolSdo

All Superinterfaces:
BundleableObject, DomainObject, SdoDefaultValidator, Serializable, Stix, StixCommonProperties, StixCustomProperties, StixLabels, StixModified, StixRevoked, StixSpecVersion
All Known Implementing Classes:
Tool

@Immutable @DefaultTypeValue(value="tool", groups=DefaultValuesProcessor.class) @Redactable public interface ToolSdo extends DomainObject
tool

Tools are legitimate software that can be used by threat actors to perform attacks. This SDO MUST NOT be used to characterize malware. Further, Tool MUST NOT be used to characterise tools used as part of a course of action in response to an attack.