base_profile_1.1.1.yaml

# Copyright (c) 2015 - The MITRE Corporation
# For license information, see the LICENSE.txt file
---
name: Baseline Profile
stix_version: 1.1.1
version: 1
status: Approved
contact: stix@mitre.org
distribution: public
description: "Baseline profile for STIX 1.1.1, for use in generating clean profiles
  and clean comparisons."
groups:
  CybOX Common:
    project: cybox
    constructs:
      AnyURIObjectPropertyType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      Base64BinaryObjectPropertyType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      BaseObjectPropertyGroup:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
      BaseObjectPropertyType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      BuildConfigurationType:
        use: Must Not
        is_vocab: false
        fields:
          Configuration_Setting_Description:
            type: xs:string
            use: Must Not
          Configuration_Settings:
            type: cyboxCommon:ConfigurationSettingsType
            use: Must Not
      BuildInformationType:
        use: Must Not
        is_vocab: false
        fields:
          Build_ID:
            type: xs:string
            use: Must Not
          Build_Project:
            type: xs:string
            use: Must Not
          Build_Utility:
            type: cyboxCommon:BuildUtilityType
            use: Must Not
          Build_Version:
            type: xs:string
            use: Must Not
          Build_Label:
            type: xs:string
            use: Must Not
          Compilers:
            type: cyboxCommon:CompilersType
            use: Must Not
          Compilation_Date:
            type: cyboxCommon:DateTimeWithPrecisionType
            use: Must Not
          Build_Configuration:
            type: cyboxCommon:BuildConfigurationType
            use: Must Not
          Build_Script:
            type: xs:string
            use: Must Not
          Libraries:
            type: cyboxCommon:LibrariesType
            use: Must Not
          Build_Output_Log:
            type: xs:string
            use: Must Not
      BuildUtilityType:
        use: Must Not
        is_vocab: false
        fields:
          Build_Utility_Name:
            type: xs:string
            use: Must Not
          Build_Utility_Platform_Specification:
            type: cyboxCommon:PlatformSpecificationType
            use: Must Not
      ByteRunsType:
        use: Must Not
        is_vocab: false
        fields:
          Byte_Run:
            type: cyboxCommon:ByteRunType
            use: Must Not
      ByteRunType:
        use: Must Not
        is_vocab: false
        fields:
          Offset:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Byte_Order:
            type: cyboxCommon:EndiannessType
            use: Must Not
          File_System_Offset:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Image_Offset:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Length:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Hashes:
            type: cyboxCommon:HashListType
            use: Must Not
          Byte_Run_Data:
            type: xs:anyType
            use: Must Not
      CipherType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      CodeSnippetsType:
        use: Must Not
        is_vocab: false
        fields:
          Code_Snippet:
            type: cyboxCommon:ObjectPropertiesType
            use: Must Not
      CompensationModelType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      CompilerInformalDescriptionType:
        use: Must Not
        is_vocab: false
        fields:
          Compiler_Name:
            type: xs:string
            use: Must Not
          Compiler_Version:
            type: xs:string
            use: Must Not
      CompilersType:
        use: Must Not
        is_vocab: false
        fields:
          Compiler:
            type: cyboxCommon:CompilerType
            use: Must Not
      CompilerType:
        use: Must Not
        is_vocab: false
        fields:
          Compiler_Informal_Description:
            type: cyboxCommon:CompilerInformalDescriptionType
            use: Must Not
          Compiler_Platform_Specification:
            type: cyboxCommon:PlatformSpecificationType
            use: Must Not
      ConfigurationSettingsType:
        use: Must Not
        is_vocab: false
        fields:
          Configuration_Setting:
            type: cyboxCommon:ConfigurationSettingType
            use: Must Not
      ConfigurationSettingType:
        use: Must Not
        is_vocab: false
        fields:
          Item_Name:
            type: xs:string
            use: Must Not
          Item_Value:
            type: xs:string
            use: Must Not
          Item_Type:
            type: xs:string
            use: Must Not
          Item_Description:
            type: xs:string
            use: Must Not
      ContributorType:
        use: Must Not
        is_vocab: false
        fields:
          Role:
            type: xs:string
            use: Must Not
          Name:
            type: xs:string
            use: Must Not
          Email:
            type: xs:string
            use: Must Not
          Phone:
            type: xs:string
            use: Must Not
          Organization:
            type: xs:string
            use: Must Not
          Date:
            type: cyboxCommon:DateRangeType
            use: Must Not
          Contribution_Location:
            type: xs:string
            use: Must Not
      ControlledVocabularyStringType:
        use: Must Not
        is_vocab: false
        attributes:
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
          vocab_name:
            type: xs:string
            use: Must Not
          vocab_reference:
            type: xs:anyURI
            use: Must Not
      CustomPropertiesType:
        use: Must Not
        is_vocab: false
        fields:
          Property:
            type: cyboxCommon:PropertyType
            use: Must Not
      DataSegmentType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
        fields:
          Data_Format:
            type: cyboxCommon:DataFormatEnum
            use: Must Not
          Data_Size:
            type: cyboxCommon:DataSizeType
            use: Must Not
          Byte_Order:
            type: cyboxCommon:EndiannessType
            use: Must Not
          Data_Segment:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Offset:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Search_Distance:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Search_Within:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
      DataSizeType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
          units:
            type: cyboxCommon:DataSizeUnitsEnum
            use: Must Not
      DateObjectPropertyRestrictionType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      DateObjectPropertyType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
          precision:
            type: cyboxCommon:DatePrecisionEnum
            use: Must Not
      DateRangeType:
        use: Must Not
        is_vocab: false
        fields:
          Start_Date:
            type: cyboxCommon:DateWithPrecisionType
            use: Must Not
          End_Date:
            type: cyboxCommon:DateWithPrecisionType
            use: Must Not
      DateTimeObjectPropertyRestrictionType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      DateTimeObjectPropertyType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
          precision:
            type: cyboxCommon:DateTimePrecisionEnum
            use: Must Not
      DateTimeWithPrecisionType:
        use: Must Not
        is_vocab: false
        attributes:
          precision:
            type: cyboxCommon:DateTimePrecisionEnum
            use: Must Not
      DateWithPrecisionType:
        use: Must Not
        is_vocab: false
        attributes:
          precision:
            type: cyboxCommon:DatePrecisionEnum
            use: Must Not
      DependenciesType:
        use: Must Not
        is_vocab: false
        fields:
          Dependency:
            type: cyboxCommon:DependencyType
            use: Must Not
      DependencyType:
        use: Must Not
        is_vocab: false
        fields:
          Dependency_Type:
            type: xs:string
            use: Must Not
          Dependency_Description:
            type: cyboxCommon:StructuredTextType
            use: Must Not
      DigitalSignatureInfoType:
        use: Must Not
        is_vocab: false
        attributes:
          signature_exists:
            type: xs:boolean
            use: Must Not
          signature_verified:
            type: xs:boolean
            use: Must Not
        fields:
          Certificate_Issuer:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Certificate_Subject:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Signature_Description:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      DigitalSignaturesType:
        use: Must Not
        is_vocab: false
        fields:
          Digital_Signature:
            type: cyboxCommon:DigitalSignatureInfoType
            use: Must Not
      DoubleObjectPropertyType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      DurationObjectPropertyType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      EndiannessType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      EnvironmentVariableListType:
        use: Must Not
        is_vocab: false
        fields:
          Environment_Variable:
            type: cyboxCommon:EnvironmentVariableType
            use: Must Not
      EnvironmentVariableType:
        use: Must Not
        is_vocab: false
        fields:
          Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Value:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      ErrorInstancesType:
        use: Must Not
        is_vocab: false
        fields:
          Error_Instance:
            type: xs:string
            use: Must Not
      ErrorsType:
        use: Must Not
        is_vocab: false
        fields:
          Error:
            type: cyboxCommon:ErrorType
            use: Must Not
      ErrorType:
        use: Must Not
        is_vocab: false
        fields:
          Error_Type:
            type: xs:string
            use: Must Not
          Error_Count:
            type: xs:integer
            use: Must Not
          Error_Instances:
            type: cyboxCommon:ErrorInstancesType
            use: Must Not
      ExecutionEnvironmentType:
        use: Must Not
        is_vocab: false
        fields:
          System:
            type: cyboxCommon:ObjectPropertiesType
            use: Must Not
          User_Account_Info:
            type: cyboxCommon:ObjectPropertiesType
            use: Must Not
          Command_Line:
            type: xs:string
            use: Must Not
          Start_Time:
            type: cyboxCommon:DateTimeWithPrecisionType
            use: Must Not
      ExtractedFeaturesType:
        use: Must Not
        is_vocab: false
        fields:
          Strings:
            type: cyboxCommon:ExtractedStringsType
            use: Must Not
          Imports:
            type: cyboxCommon:ImportsType
            use: Must Not
          Functions:
            type: cyboxCommon:FunctionsType
            use: Must Not
          Code_Snippets:
            type: cyboxCommon:CodeSnippetsType
            use: Must Not
      ExtractedStringsType:
        use: Must Not
        is_vocab: false
        fields:
          String:
            type: cyboxCommon:ExtractedStringType
            use: Must Not
      ExtractedStringType:
        use: Must Not
        is_vocab: false
        fields:
          Encoding:
            type: cyboxCommon:ControlledVocabularyStringType
            use: Must Not
          String_Value:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Byte_String_Value:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Hashes:
            type: cyboxCommon:HashListType
            use: Must Not
          Address:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Length:
            type: cyboxCommon:PositiveIntegerObjectPropertyType
            use: Must Not
          Language:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          English_Translation:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      FloatObjectPropertyType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      FunctionsType:
        use: Must Not
        is_vocab: false
        fields:
          Function:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      FuzzyHashBlockType:
        use: Must Not
        is_vocab: false
        fields:
          Block_Hash_Value:
            type: cyboxCommon:HashValueType
            use: Must Not
          Segment_Count:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Segments:
            type: cyboxCommon:HashSegmentsType
            use: Must Not
      FuzzyHashStructureType:
        use: Must Not
        is_vocab: false
        fields:
          Block_Size:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Block_Hash:
            type: cyboxCommon:FuzzyHashBlockType
            use: Must Not
      FuzzyHashValueType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      HashListType:
        use: Must Not
        is_vocab: false
        fields:
          Hash:
            type: cyboxCommon:HashType
            use: Must Not
      HashSegmentsType:
        use: Must Not
        is_vocab: false
        fields:
          Segment:
            type: cyboxCommon:HashSegmentType
            use: Must Not
      HashSegmentType:
        use: Must Not
        is_vocab: false
        fields:
          Trigger_Point:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Segment_Hash:
            type: cyboxCommon:HashValueType
            use: Must Not
          Raw_Segment_Content:
            type: xs:anyType
            use: Must Not
      HashType:
        use: Must Not
        is_vocab: false
        fields:
          Type:
            type: cyboxCommon:ControlledVocabularyStringType
            use: Must Not
          Simple_Hash_Value:
            type: cyboxCommon:SimpleHashValueType
            use: Must Not
          Fuzzy_Hash_Value:
            type: cyboxCommon:FuzzyHashValueType
            use: Must Not
          Fuzzy_Hash_Structure:
            type: cyboxCommon:FuzzyHashStructureType
            use: Must Not
      HashValueType:
        use: Must Not
        is_vocab: false
        fields:
          Simple_Hash_Value:
            type: cyboxCommon:SimpleHashValueType
            use: Must Not
          Fuzzy_Hash_Value:
            type: cyboxCommon:FuzzyHashValueType
            use: Must Not
      HexBinaryObjectPropertyType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      ImportsType:
        use: Must Not
        is_vocab: false
        fields:
          Import:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      IntegerObjectPropertyType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      InternalStringsType:
        use: Must Not
        is_vocab: false
        fields:
          Key:
            type: xs:string
            use: Must Not
          Content:
            type: xs:string
            use: Must Not
      InternationalizationSettingsType:
        use: Must Not
        is_vocab: false
        fields:
          Internal_Strings:
            type: cyboxCommon:InternalStringsType
            use: Must Not
      Layer4ProtocolType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      LibrariesType:
        use: Must Not
        is_vocab: false
        fields:
          Library:
            type: cyboxCommon:LibraryType
            use: Must Not
      LibraryType:
        use: Must Not
        is_vocab: false
        attributes:
          name:
            type: xs:string
            use: Must Not
          version:
            type: xs:string
            use: Must Not
      LocationType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
        fields:
          Name:
            type: xs:string
            use: Must Not
      LongObjectPropertyType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      MeasureSourceType:
        use: Must Not
        is_vocab: false
        attributes:
          class:
            type: cyboxCommon:SourceClassTypeEnum
            use: Must Not
          source_type:
            type: cyboxCommon:SourceTypeEnum
            use: Must Not
          name:
            type: xs:string
            use: Must Not
          sighting_count:
            type: xs:positiveInteger
            use: Must Not
        fields:
          Information_Source_Type:
            type: cyboxCommon:ControlledVocabularyStringType
            use: Must Not
          Tool_Type:
            type: cyboxCommon:ControlledVocabularyStringType
            use: Must Not
          Description:
            type: cyboxCommon:StructuredTextType
            use: Must Not
          Contributors:
            type: cyboxCommon:PersonnelType
            use: Must Not
          Time:
            type: cyboxCommon:TimeType
            use: Must Not
          Observation_Location:
            type: cyboxCommon:LocationType
            use: Must Not
          Tools:
            type: cyboxCommon:ToolsInformationType
            use: Must Not
          Platform:
            type: cyboxCommon:PlatformSpecificationType
            use: Must Not
          System:
            type: cyboxCommon:ObjectPropertiesType
            use: Must Not
          Instance:
            type: cyboxCommon:ObjectPropertiesType
            use: Must Not
          Observable_Location:
            type: cyboxCommon:LocationType
            use: Must Not
      MetadataType:
        use: Must Not
        is_vocab: false
        attributes:
          type:
            type: xs:string
            use: Must Not
        fields:
          Value:
            type: xs:string
            use: Must Not
          SubDatum:
            type: cyboxCommon:MetadataType
            use: Must Not
      NameObjectPropertyType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      NonNegativeIntegerObjectPropertyType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      ObjectPropertiesType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
      PatternableFieldType:
        use: Must Not
        is_vocab: false
        attributes:
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      PatternFieldGroup:
        use: Must Not
        is_vocab: false
        attributes:
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      PersonnelType:
        use: Must Not
        is_vocab: false
        fields:
          Contributor:
            type: cyboxCommon:ContributorType
            use: Must Not
      PlatformIdentifierType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
          system:
            type: xs:string
            use: Must Not
          system-ref:
            type: xs:anyURI
            use: Must Not
      PlatformSpecificationType:
        use: Must Not
        is_vocab: false
        fields:
          Description:
            type: cyboxCommon:StructuredTextType
            use: Must Not
          Identifier:
            type: cyboxCommon:PlatformIdentifierType
            use: Must Not
      PositiveIntegerObjectPropertyType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      PropertyType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
          name:
            type: xs:string
            use: Must Not
          description:
            type: xs:string
            use: Must Not
      RegionalRegistryType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      SIDType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      SimpleHashValueType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      StringObjectPropertyType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      StructuredTextType:
        use: Must Not
        is_vocab: false
        attributes:
          structuring_format:
            type: xs:string
            use: Must Not
      TimeObjectPropertyRestrictionType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      TimeObjectPropertyType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
          precision:
            type: cyboxCommon:TimePrecisionEnum
            use: Must Not
      TimeType:
        use: Must Not
        is_vocab: false
        fields:
          Start_Time:
            type: cyboxCommon:DateTimeWithPrecisionType
            use: Must Not
          End_Time:
            type: cyboxCommon:DateTimeWithPrecisionType
            use: Must Not
          Produced_Time:
            type: cyboxCommon:DateTimeWithPrecisionType
            use: Must Not
          Received_Time:
            type: cyboxCommon:DateTimeWithPrecisionType
            use: Must Not
      ToolConfigurationType:
        use: Must Not
        is_vocab: false
        fields:
          Configuration_Settings:
            type: cyboxCommon:ConfigurationSettingsType
            use: Must Not
          Dependencies:
            type: cyboxCommon:DependenciesType
            use: Must Not
          Usage_Context_Assumptions:
            type: cyboxCommon:UsageContextAssumptionsType
            use: Must Not
          Internationalization_Settings:
            type: cyboxCommon:InternationalizationSettingsType
            use: Must Not
          Build_Information:
            type: cyboxCommon:BuildInformationType
            use: Must Not
      ToolInformationType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
        fields:
          Name:
            type: xs:string
            use: Must Not
          Type:
            type: cyboxCommon:ControlledVocabularyStringType
            use: Must Not
          Description:
            type: cyboxCommon:StructuredTextType
            use: Must Not
          References:
            type: cyboxCommon:ToolReferencesType
            use: Must Not
          Vendor:
            type: xs:string
            use: Must Not
          Version:
            type: xs:string
            use: Must Not
          Service_Pack:
            type: xs:string
            use: Must Not
          Tool_Specific_Data:
            type: cyboxCommon:ToolSpecificDataType
            use: Must Not
          Tool_Hashes:
            type: cyboxCommon:HashListType
            use: Must Not
          Tool_Configuration:
            type: cyboxCommon:ToolConfigurationType
            use: Must Not
          Execution_Environment:
            type: cyboxCommon:ExecutionEnvironmentType
            use: Must Not
          Errors:
            type: cyboxCommon:ErrorsType
            use: Must Not
          Metadata:
            type: cyboxCommon:MetadataType
            use: Must Not
          Compensation_Model:
            type: cyboxCommon:CompensationModelType
            use: Must Not
      ToolReferencesType:
        use: Must Not
        is_vocab: false
        fields:
          Reference:
            type: cyboxCommon:ToolReferenceType
            use: Must Not
      ToolReferenceType:
        use: Must Not
        is_vocab: false
        attributes:
          reference_type:
            type: cyboxCommon:ToolReferenceTypeEnum
            use: Must Not
      ToolsInformationType:
        use: Must Not
        is_vocab: false
        fields:
          Tool:
            type: cyboxCommon:ToolInformationType
            use: Must Not
      ToolSpecificDataType:
        use: Must Not
        is_vocab: false
      UnsignedIntegerObjectPropertyType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      UnsignedLongObjectPropertyType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      UsageContextAssumptionsType:
        use: Must Not
        is_vocab: false
        fields:
          Usage_Context_Assumption:
            type: cyboxCommon:StructuredTextType
            use: Must Not
  CybOX Core:
    project: cybox
    constructs:
      ActionAliasesType:
        use: Must Not
        is_vocab: false
        fields:
          Action_Alias:
            type: xs:string
            use: Must Not
      ActionArgumentsType:
        use: Must Not
        is_vocab: false
        fields:
          Action_Argument:
            type: cybox:ActionArgumentType
            use: Must Not
      ActionArgumentType:
        use: Must Not
        is_vocab: false
        fields:
          Argument_Name:
            type: cyboxCommon:ControlledVocabularyStringType
            use: Must Not
          Argument_Value:
            type: xs:string
            use: Must Not
      ActionPertinentObjectPropertiesType:
        use: Must Not
        is_vocab: false
        fields:
          Property:
            type: cybox:ActionPertinentObjectPropertyType
            use: Must Not
      ActionPertinentObjectPropertyType:
        use: Must Not
        is_vocab: false
        attributes:
          name:
            type: xs:string
            use: Must Not
          xpath:
            type: xs:string
            use: Must Not
      ActionPoolType:
        use: Must Not
        is_vocab: false
        fields:
          Action:
            type: cybox:ActionType
            use: Must Not
      ActionReferenceType:
        use: Must Not
        is_vocab: false
        attributes:
          action_id:
            type: xs:QName
            use: Must Not
      ActionRelationshipsType:
        use: Must Not
        is_vocab: false
        fields:
          Relationship:
            type: cybox:ActionRelationshipType
            use: Must Not
      ActionRelationshipType:
        use: Must Not
        is_vocab: false
        fields:
          Type:
            type: cyboxCommon:ControlledVocabularyStringType
            use: Must Not
          Action_Reference:
            type: cybox:ActionReferenceType
            use: Must Not
      ActionsType:
        use: Must Not
        is_vocab: false
        fields:
          Action:
            type: cybox:ActionType
            use: Must Not
      ActionType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          ordinal_position:
            type: xs:positiveInteger
            use: Must Not
          action_status:
            type: cybox:ActionStatusTypeEnum
            use: Must Not
          context:
            type: cybox:ActionContextTypeEnum
            use: Must Not
          timestamp:
            type: xs:dateTime
            use: Must Not
          timestamp_precision:
            type: cyboxCommon:DateTimePrecisionEnum
            use: Must Not
        fields:
          Type:
            type: cyboxCommon:ControlledVocabularyStringType
            use: Must Not
          Name:
            type: cyboxCommon:ControlledVocabularyStringType
            use: Must Not
          Description:
            type: cyboxCommon:StructuredTextType
            use: Must Not
          Action_Aliases:
            type: cybox:ActionAliasesType
            use: Must Not
          Action_Arguments:
            type: cybox:ActionArgumentsType
            use: Must Not
          Location:
            type: cyboxCommon:LocationType
            use: Must Not
          Discovery_Method:
            type: cyboxCommon:MeasureSourceType
            use: Must Not
          Associated_Objects:
            type: cybox:AssociatedObjectsType
            use: Must Not
          Relationships:
            type: cybox:ActionRelationshipsType
            use: Must Not
          Frequency:
            type: cybox:FrequencyType
            use: Must Not
      AssociatedObjectsType:
        use: Must Not
        is_vocab: false
        fields:
          Associated_Object:
            type: cybox:AssociatedObjectType
            use: Must Not
      AssociatedObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
        fields:
          State:
            type: cyboxCommon:ControlledVocabularyStringType
            use: Must Not
          Description:
            type: cyboxCommon:StructuredTextType
            use: Must Not
          Properties:
            type: cyboxCommon:ObjectPropertiesType
            use: Must Not
          Domain_Specific_Object_Properties:
            type: cybox:DomainSpecificObjectPropertiesType
            use: Must Not
          Location:
            type: cyboxCommon:LocationType
            use: Must Not
          Related_Objects:
            type: cybox:RelatedObjectsType
            use: Must Not
          Defined_Effect:
            type: cybox:DefinedEffectType
            use: Must Not
          Discovery_Method:
            type: cyboxCommon:MeasureSourceType
            use: Must Not
          Association_Type:
            type: cyboxCommon:ControlledVocabularyStringType
            use: Must Not
          Action_Pertinent_Object_Properties:
            type: cybox:ActionPertinentObjectPropertiesType
            use: Must Not
      DataReadEffectType:
        use: Must Not
        is_vocab: false
        attributes:
          effect_type:
            type: cybox:EffectTypeEnum
            use: Must Not
        fields:
          Data:
            type: cyboxCommon:DataSegmentType
            use: Must Not
      DataReceivedEffectType:
        use: Must Not
        is_vocab: false
        attributes:
          effect_type:
            type: cybox:EffectTypeEnum
            use: Must Not
        fields:
          Data:
            type: cyboxCommon:DataSegmentType
            use: Must Not
      DataSentEffectType:
        use: Must Not
        is_vocab: false
        attributes:
          effect_type:
            type: cybox:EffectTypeEnum
            use: Must Not
        fields:
          Data:
            type: cyboxCommon:DataSegmentType
            use: Must Not
      DataWrittenEffectType:
        use: Must Not
        is_vocab: false
        attributes:
          effect_type:
            type: cybox:EffectTypeEnum
            use: Must Not
        fields:
          Data:
            type: cyboxCommon:DataSegmentType
            use: Must Not
      DefinedEffectType:
        use: Must Not
        is_vocab: false
        attributes:
          effect_type:
            type: cybox:EffectTypeEnum
            use: Must Not
      DomainSpecificObjectPropertiesType:
        use: Must Not
        is_vocab: false
      EventPoolType:
        use: Must Not
        is_vocab: false
        fields:
          Event:
            type: cybox:EventType
            use: Must Not
      EventType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
        fields:
          Type:
            type: cyboxCommon:ControlledVocabularyStringType
            use: Must Not
          Description:
            type: cyboxCommon:StructuredTextType
            use: Must Not
          Observation_Method:
            type: cyboxCommon:MeasureSourceType
            use: Must Not
          Actions:
            type: cybox:ActionsType
            use: Must Not
          Location:
            type: cyboxCommon:LocationType
            use: Must Not
          Frequency:
            type: cybox:FrequencyType
            use: Must Not
          Event:
            type: cybox:EventType
            use: Must Not
      FrequencyType:
        use: Must Not
        is_vocab: false
        attributes:
          rate:
            type: xs:float
            use: Must Not
          units:
            type: xs:string
            use: Must Not
          scale:
            type: xs:string
            use: Must Not
          trend:
            type: cybox:TrendEnum
            use: Must Not
      KeywordsType:
        use: Must Not
        is_vocab: false
        fields:
          Keyword:
            type: xs:string
            use: Must Not
      ObfuscationTechniquesType:
        use: Must Not
        is_vocab: false
        fields:
          Obfuscation_Technique:
            type: cybox:ObfuscationTechniqueType
            use: Must Not
      ObfuscationTechniqueType:
        use: Must Not
        is_vocab: false
        fields:
          Description:
            type: cyboxCommon:StructuredTextType
            use: Must Not
          Observables:
            type: cybox:ObservablesType
            use: Must Not
      ObjectPoolType:
        use: Must Not
        is_vocab: false
        fields:
          Object:
            type: cybox:ObjectType
            use: Must Not
      ObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
        fields:
          State:
            type: cyboxCommon:ControlledVocabularyStringType
            use: Must Not
          Description:
            type: cyboxCommon:StructuredTextType
            use: Must Not
          Properties:
            type: cyboxCommon:ObjectPropertiesType
            use: Must Not
          Domain_Specific_Object_Properties:
            type: cybox:DomainSpecificObjectPropertiesType
            use: Must Not
          Location:
            type: cyboxCommon:LocationType
            use: Must Not
          Related_Objects:
            type: cybox:RelatedObjectsType
            use: Must Not
          Defined_Effect:
            type: cybox:DefinedEffectType
            use: Must Not
          Discovery_Method:
            type: cyboxCommon:MeasureSourceType
            use: Must Not
      ObservableCompositionType:
        use: Must Not
        is_vocab: false
        attributes:
          operator:
            type: cybox:OperatorTypeEnum
            use: Must Not
        fields:
          Observable:
            type: cybox:ObservableType
            use: Must Not
      ObservablesType:
        use: Must Not
        is_vocab: false
        attributes:
          cybox_major_version:
            type: xs:string
            use: Must Not
          cybox_minor_version:
            type: xs:string
            use: Must Not
          cybox_update_version:
            type: xs:string
            use: Must Not
        fields:
          Observable_Package_Source:
            type: cyboxCommon:MeasureSourceType
            use: Must Not
          Observable:
            type: cybox:ObservableType
            use: Must Not
          Pools:
            type: cybox:PoolsType
            use: Must Not
      ObservableType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          negate:
            type: xs:boolean
            use: Must Not
          sighting_count:
            type: xs:positiveInteger
            use: Must Not
        fields:
          Title:
            type: xs:string
            use: Must Not
          Description:
            type: cyboxCommon:StructuredTextType
            use: Must Not
          Keywords:
            type: cybox:KeywordsType
            use: Must Not
          Observable_Source:
            type: cyboxCommon:MeasureSourceType
            use: Must Not
          Object:
            type: cybox:ObjectType
            use: Must Not
          Event:
            type: cybox:EventType
            use: Must Not
          Observable_Composition:
            type: cybox:ObservableCompositionType
            use: Must Not
          Pattern_Fidelity:
            type: cybox:PatternFidelityType
            use: Must Not
      PatternFidelityType:
        use: Must Not
        is_vocab: false
        fields:
          Noisiness:
            type: cybox:NoisinessEnum
            use: Must Not
          Ease_of_Evasion:
            type: cybox:EaseOfObfuscationEnum
            use: Must Not
          Evasion_Techniques:
            type: cybox:ObfuscationTechniquesType
            use: Must Not
      PoolsType:
        use: Must Not
        is_vocab: false
        fields:
          Event_Pool:
            type: cybox:EventPoolType
            use: Must Not
          Action_Pool:
            type: cybox:ActionPoolType
            use: Must Not
          Object_Pool:
            type: cybox:ObjectPoolType
            use: Must Not
          Property_Pool:
            type: cybox:PropertyPoolType
            use: Must Not
      PropertiesType:
        use: Must Not
        is_vocab: false
        fields:
          Property:
            type: xs:string
            use: Must Not
      PropertyPoolType:
        use: Must Not
        is_vocab: false
        fields:
          Property:
            type: cyboxCommon:PropertyType
            use: Must Not
      PropertyReadEffectType:
        use: Must Not
        is_vocab: false
        attributes:
          effect_type:
            type: cybox:EffectTypeEnum
            use: Must Not
        fields:
          Name:
            type: xs:string
            use: Must Not
          Value:
            type: xs:string
            use: Must Not
      RelatedObjectsType:
        use: Must Not
        is_vocab: false
        fields:
          Related_Object:
            type: cybox:RelatedObjectType
            use: Must Not
      RelatedObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
        fields:
          State:
            type: cyboxCommon:ControlledVocabularyStringType
            use: Must Not
          Description:
            type: cyboxCommon:StructuredTextType
            use: Must Not
          Properties:
            type: cyboxCommon:ObjectPropertiesType
            use: Must Not
          Domain_Specific_Object_Properties:
            type: cybox:DomainSpecificObjectPropertiesType
            use: Must Not
          Location:
            type: cyboxCommon:LocationType
            use: Must Not
          Related_Objects:
            type: cybox:RelatedObjectsType
            use: Must Not
          Defined_Effect:
            type: cybox:DefinedEffectType
            use: Must Not
          Discovery_Method:
            type: cyboxCommon:MeasureSourceType
            use: Must Not
          Relationship:
            type: cyboxCommon:ControlledVocabularyStringType
            use: Must Not
      SendControlCodeEffectType:
        use: Must Not
        is_vocab: false
        attributes:
          effect_type:
            type: cybox:EffectTypeEnum
            use: Must Not
        fields:
          Control_Code:
            type: xs:string
            use: Must Not
      StateChangeEffectType:
        use: Must Not
        is_vocab: false
        attributes:
          effect_type:
            type: cybox:EffectTypeEnum
            use: Must Not
        fields:
          Old_Object:
            type: cybox:ObjectType
            use: Must Not
          New_Object:
            type: cybox:ObjectType
            use: Must Not
      ValuesType:
        use: Must Not
        is_vocab: false
        fields:
          Value:
            type: xs:string
            use: Must Not
  CybOX Vocabularies:
    project: cybox
    constructs:
      ActionArgumentNameVocab-1.0:
        use: Must Not
        is_vocab: true
      ActionNameVocab-1.0:
        use: Must Not
        is_vocab: true
      ActionNameVocab-1.1:
        use: Must Not
        is_vocab: true
      ActionObjectAssociationTypeVocab-1.0:
        use: Must Not
        is_vocab: true
      ActionRelationshipTypeVocab-1.0:
        use: Must Not
        is_vocab: true
      ActionTypeVocab-1.0:
        use: Must Not
        is_vocab: true
      CharacterEncodingVocab-1.0:
        use: Must Not
        is_vocab: true
      EventTypeVocab-1.0:
        use: Must Not
        is_vocab: true
      EventTypeVocab-1.0.1:
        use: Must Not
        is_vocab: false
        attributes:
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
          vocab_name:
            type: xs:string
            use: Must Not
          vocab_reference:
            type: xs:anyURI
            use: Must Not
      HashNameVocab-1.0:
        use: Must Not
        is_vocab: true
      InformationSourceTypeVocab-1.0:
        use: Must Not
        is_vocab: true
      ObjectRelationshipVocab-1.0:
        use: Must Not
        is_vocab: true
      ObjectRelationshipVocab-1.1:
        use: Must Not
        is_vocab: true
      ObjectStateVocab-1.0:
        use: Must Not
        is_vocab: true
      ToolTypeVocab-1.0:
        use: Must Not
        is_vocab: true
      ToolTypeVocab-1.1:
        use: Must Not
        is_vocab: true
  Account Object:
    project: cybox
    constructs:
      AccountObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
          disabled:
            type: xs:boolean
            use: Must Not
          locked_out:
            type: xs:boolean
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Description:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Domain:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Authentication:
            type: AccountObj:AuthenticationType
            use: Must Not
          Creation_Date:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Modified_Date:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Last_Accessed_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
      AuthenticationTokenProtectionMechanismTypeVocab-1.0:
        use: Must Not
        is_vocab: true
      AuthenticationType:
        use: Must Not
        is_vocab: false
        fields:
          Authentication_Type:
            type: cyboxCommon:ControlledVocabularyStringType
            use: Must Not
          Authentication_Data:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Authentication_Token_Protection_Mechanism:
            type: cyboxCommon:ControlledVocabularyStringType
            use: Must Not
          Structured_Authentication_Mechanism:
            type: AccountObj:StructuredAuthenticationMechanismType
            use: Must Not
      AuthenticationTypeVocab-1.0:
        use: Must Not
        is_vocab: true
      StructuredAuthenticationMechanismType:
        use: Must Not
        is_vocab: false
        fields:
          Description:
            type: cyboxCommon:StructuredTextType
            use: Must Not
  Address Object:
    project: cybox
    constructs:
      AddressObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
          category:
            type: AddressObj:CategoryTypeEnum
            use: Must Not
          is_source:
            type: xs:boolean
            use: Must Not
          is_destination:
            type: xs:boolean
            use: Must Not
          is_spoofed:
            type: xs:boolean
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Address_Value:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          VLAN_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          VLAN_Num:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
  API Object:
    project: cybox
    constructs:
      APIObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Description:
            type: cyboxCommon:StructuredTextType
            use: Must Not
          Function_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Normalized_Function_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Platform:
            type: cyboxCommon:PlatformSpecificationType
            use: Must Not
          Address:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
  Archive File Object:
    project: cybox
    constructs:
      ArchiveFileFormatType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      ArchiveFileObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
          is_packed:
            type: xs:boolean
            use: Must Not
          is_masqueraded:
            type: xs:boolean
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          File_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          File_Path:
            type: FileObj:FilePathType
            use: Must Not
          Device_Path:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Full_Path:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          File_Extension:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Size_In_Bytes:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          Magic_Number:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          File_Format:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Hashes:
            type: cyboxCommon:HashListType
            use: Must Not
          Digital_Signatures:
            type: cyboxCommon:DigitalSignaturesType
            use: Must Not
          Modified_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Accessed_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Created_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          File_Attributes_List:
            type: FileObj:FileAttributeType
            use: Must Not
          Permissions:
            type: FileObj:FilePermissionsType
            use: Must Not
          User_Owner:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Packer_List:
            type: FileObj:PackerListType
            use: Must Not
          Peak_Entropy:
            type: cyboxCommon:DoubleObjectPropertyType
            use: Must Not
          Sym_Links:
            type: FileObj:SymLinksListType
            use: Must Not
          Byte_Runs:
            type: cyboxCommon:ByteRunsType
            use: Must Not
          Extracted_Features:
            type: cyboxCommon:ExtractedFeaturesType
            use: Must Not
          Encryption_Algorithm:
            type: cyboxCommon:CipherType
            use: Must Not
          Decryption_Key:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Compression_Method:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Compression_Version:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Compression_Comment:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Archive_Format:
            type: ArchiveFileObj:ArchiveFileFormatType
            use: Must Not
          Version:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          File_Count:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Comment:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Archived_File:
            type: FileObj:FileObjectType
            use: Must Not
  File Object:
    project: cybox
    constructs:
      EntryPointSignatureListType:
        use: Must Not
        is_vocab: false
        fields:
          Entry_Point_Signature:
            type: FileObj:EntryPointSignatureType
            use: Must Not
      EntryPointSignatureType:
        use: Must Not
        is_vocab: false
        fields:
          Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Type:
            type: FileObj:DetectedTypeEnum
            use: Must Not
      EPJumpCodeType:
        use: Must Not
        is_vocab: false
        fields:
          Depth:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Opcodes:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      FileAttributeType:
        use: Must Not
        is_vocab: false
      FileObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
          is_packed:
            type: xs:boolean
            use: Must Not
          is_masqueraded:
            type: xs:boolean
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          File_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          File_Path:
            type: FileObj:FilePathType
            use: Must Not
          Device_Path:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Full_Path:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          File_Extension:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Size_In_Bytes:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          Magic_Number:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          File_Format:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Hashes:
            type: cyboxCommon:HashListType
            use: Must Not
          Digital_Signatures:
            type: cyboxCommon:DigitalSignaturesType
            use: Must Not
          Modified_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Accessed_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Created_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          File_Attributes_List:
            type: FileObj:FileAttributeType
            use: Must Not
          Permissions:
            type: FileObj:FilePermissionsType
            use: Must Not
          User_Owner:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Packer_List:
            type: FileObj:PackerListType
            use: Must Not
          Peak_Entropy:
            type: cyboxCommon:DoubleObjectPropertyType
            use: Must Not
          Sym_Links:
            type: FileObj:SymLinksListType
            use: Must Not
          Byte_Runs:
            type: cyboxCommon:ByteRunsType
            use: Must Not
          Extracted_Features:
            type: cyboxCommon:ExtractedFeaturesType
            use: Must Not
          Encryption_Algorithm:
            type: cyboxCommon:CipherType
            use: Must Not
          Decryption_Key:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Compression_Method:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Compression_Version:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Compression_Comment:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      FilePathType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
          fully_qualified:
            type: xs:boolean
            use: Must Not
      FilePermissionsType:
        use: Must Not
        is_vocab: false
      PackerClassType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      PackerListType:
        use: Must Not
        is_vocab: false
        fields:
          Packer:
            type: FileObj:PackerType
            use: Must Not
      PackerType:
        use: Must Not
        is_vocab: false
        fields:
          Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Version:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Entry_Point:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Signature:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Type:
            type: FileObj:PackerClassType
            use: Must Not
          Detected_Entrypoint_Signatures:
            type: FileObj:EntryPointSignatureListType
            use: Must Not
          EP_Jump_Codes:
            type: FileObj:EPJumpCodeType
            use: Must Not
      SymLinksListType:
        use: Must Not
        is_vocab: false
        fields:
          Sym_Link:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
  ARP Cache Object:
    project: cybox
    constructs:
      ARPCacheEntryType:
        use: Must Not
        is_vocab: false
        fields:
          IP_Address:
            type: AddressObj:AddressObjectType
            use: Must Not
          Physical_Address:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Type:
            type: ARPCacheObj:ARPCacheEntryTypeType
            use: Must Not
          Network_Interface:
            type: SystemObj:NetworkInterfaceType
            use: Must Not
      ARPCacheEntryTypeType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      ARPCacheObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          ARP_Cache_Entry:
            type: ARPCacheObj:ARPCacheEntryType
            use: Must Not
  System Object:
    project: cybox
    constructs:
      BIOSInfoType:
        use: Must Not
        is_vocab: false
        fields:
          BIOS_Date:
            type: cyboxCommon:DateObjectPropertyType
            use: Must Not
          BIOS_Version:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          BIOS_Manufacturer:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          BIOS_Release_Date:
            type: cyboxCommon:DateObjectPropertyType
            use: Must Not
          BIOS_Serial_Number:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      BitnessType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      DHCPServerListType:
        use: Must Not
        is_vocab: false
        fields:
          DHCP_Server_Address:
            type: AddressObj:AddressObjectType
            use: Must Not
      IPGatewayListType:
        use: Must Not
        is_vocab: false
        fields:
          IP_Gateway_Address:
            type: AddressObj:AddressObjectType
            use: Must Not
      IPInfoListType:
        use: Must Not
        is_vocab: false
        fields:
          IP_Info:
            type: SystemObj:IPInfoType
            use: Must Not
      IPInfoType:
        use: Must Not
        is_vocab: false
        fields:
          IP_Address:
            type: AddressObj:AddressObjectType
            use: Must Not
          Subnet_Mask:
            type: AddressObj:AddressObjectType
            use: Must Not
      NetworkInterfaceListType:
        use: Must Not
        is_vocab: false
        fields:
          Network_Interface:
            type: SystemObj:NetworkInterfaceType
            use: Must Not
      NetworkInterfaceType:
        use: Must Not
        is_vocab: false
        fields:
          Adapter:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Description:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          DHCP_Lease_Expires:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          DHCP_Lease_Obtained:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          DHCP_Server_List:
            type: SystemObj:DHCPServerListType
            use: Must Not
          IP_Gateway_List:
            type: SystemObj:IPGatewayListType
            use: Must Not
          IP_List:
            type: SystemObj:IPInfoListType
            use: Must Not
          MAC:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      OSType:
        use: Must Not
        is_vocab: false
        fields:
          Description:
            type: cyboxCommon:StructuredTextType
            use: Must Not
          Identifier:
            type: cyboxCommon:PlatformIdentifierType
            use: Must Not
          Bitness:
            type: SystemObj:BitnessType
            use: Must Not
          Build_Number:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Environment_Variable_List:
            type: cyboxCommon:EnvironmentVariableListType
            use: Must Not
          Install_Date:
            type: cyboxCommon:DateObjectPropertyType
            use: Must Not
          Patch_Level:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Platform:
            type: cyboxCommon:PlatformSpecificationType
            use: Must Not
      ProcessorArchType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      SystemObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Available_Physical_Memory:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          BIOS_Info:
            type: SystemObj:BIOSInfoType
            use: Must Not
          Date:
            type: cyboxCommon:DateObjectPropertyType
            use: Must Not
          Hostname:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Local_Time:
            type: cyboxCommon:TimeObjectPropertyType
            use: Must Not
          Network_Interface_List:
            type: SystemObj:NetworkInterfaceListType
            use: Must Not
          OS:
            type: SystemObj:OSType
            use: Must Not
          Processor:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Processor_Architecture:
            type: SystemObj:ProcessorArchType
            use: Must Not
          System_Time:
            type: cyboxCommon:TimeObjectPropertyType
            use: Must Not
          Timezone_DST:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Timezone_Standard:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Total_Physical_Memory:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          Uptime:
            type: cyboxCommon:DurationObjectPropertyType
            use: Must Not
          Username:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
  Artifact Object:
    project: cybox
    constructs:
      ArtifactObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
          type:
            type: ArtifactObj:ArtifactTypeEnum
            use: Must Not
          content_type:
            type: xs:string
            use: Must Not
          content_type_version:
            type: xs:string
            use: Must Not
          suspected_malicious:
            type: xs:boolean
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Hashes:
            type: cyboxCommon:HashListType
            use: Must Not
          Packaging:
            type: ArtifactObj:PackagingType
            use: Must Not
          Raw_Artifact:
            type: ArtifactObj:RawArtifactType
            use: Must Not
          Raw_Artifact_Reference:
            type: xs:anyURI
            use: Must Not
      CompressionType:
        use: Must Not
        is_vocab: false
        attributes:
          compression_mechanism:
            type: xs:string
            use: Must Not
          compression_mechanism_ref:
            type: xs:anyURI
            use: Must Not
      EncodingType:
        use: Must Not
        is_vocab: false
        attributes:
          algorithm:
            type: xs:string
            use: Must Not
          character_set:
            type: xs:string
            use: Must Not
          custom_character_set_ref:
            type: xs:anyURI
            use: Must Not
      EncryptionType:
        use: Must Not
        is_vocab: false
        attributes:
          encryption_mechanism:
            type: xs:string
            use: Must Not
          encryption_mechanism_ref:
            type: xs:anyURI
            use: Must Not
          encryption_key:
            type: xs:string
            use: Must Not
          encryption_key_ref:
            type: xs:anyURI
            use: Must Not
      PackagingType:
        use: Must Not
        is_vocab: false
        attributes:
          is_encrypted:
            type: xs:boolean
            use: Must Not
          is_compressed:
            type: xs:boolean
            use: Must Not
        fields:
          Compression:
            type: ArtifactObj:CompressionType
            use: Must Not
          Encryption:
            type: ArtifactObj:EncryptionType
            use: Must Not
          Encoding:
            type: ArtifactObj:EncodingType
            use: Must Not
      RawArtifactType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
          byte_order:
            type: cyboxCommon:EndiannessTypeEnum
            use: Must Not
  AS Object:
    project: cybox
    constructs:
      ASObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Number:
            type: cyboxCommon:NonNegativeIntegerObjectPropertyType
            use: Must Not
          Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Handle:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Regional_Internet_Registry:
            type: cyboxCommon:RegionalRegistryType
            use: Must Not
  Code Object:
    project: cybox
    constructs:
      CodeLanguageType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      CodeObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Description:
            type: cyboxCommon:StructuredTextType
            use: Must Not
          Type:
            type: CodeObj:CodeTypeType
            use: Must Not
          Purpose:
            type: CodeObj:CodePurposeType
            use: Must Not
          Code_Language:
            type: CodeObj:CodeLanguageType
            use: Must Not
          Targeted_Platforms:
            type: CodeObj:TargetedPlatformsType
            use: Must Not
          Processor_Family:
            type: CodeObj:ProcessorTypeType
            use: Must Not
          Discovery_Method:
            type: cyboxCommon:MeasureSourceType
            use: Must Not
          Start_Address:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Code_Segment:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Code_Segment_XOR:
            type: CodeObj:CodeSegmentXORType
            use: Must Not
          Digital_Signatures:
            type: cyboxCommon:DigitalSignaturesType
            use: Must Not
          Extracted_Features:
            type: cyboxCommon:ExtractedFeaturesType
            use: Must Not
      CodePurposeType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      CodeSegmentXORType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
          xor_pattern:
            type: xs:hexBinary
            use: Must Not
      CodeTypeType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      ProcessorTypeType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      TargetedPlatformsType:
        use: Must Not
        is_vocab: false
        fields:
          Targeted_Platform:
            type: cyboxCommon:PlatformSpecificationType
            use: Must Not
  Custom Object:
    project: cybox
    constructs:
      CustomObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
          custom_name:
            type: xs:QName
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Description:
            type: xs:string
            use: Must Not
  Device Object:
    project: cybox
    constructs:
      DeviceObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Description:
            type: cyboxCommon:StructuredTextType
            use: Must Not
          Device_Type:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Manufacturer:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Model:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Serial_Number:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Firmware_Version:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          System_Details:
            type: cyboxCommon:ObjectPropertiesType
            use: Must Not
  Disk Object:
    project: cybox
    constructs:
      DiskObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Disk_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Disk_Size:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          Free_Space:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          Partition_List:
            type: DiskObj:PartitionListType
            use: Must Not
          Type:
            type: DiskObj:DiskType
            use: Must Not
      DiskType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      PartitionListType:
        use: Must Not
        is_vocab: false
        fields:
          Partition:
            type: DiskPartitionObj:DiskPartitionObjectType
            use: Must Not
  Disk Partition Object:
    project: cybox
    constructs:
      DiskPartitionObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Created:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Device_Name:
            type: cyboxCommon:NameObjectPropertyType
            use: Must Not
          Mount_Point:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Partition_ID:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Partition_Length:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          Partition_Offset:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          Space_Left:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          Space_Used:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          Total_Space:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          Type:
            type: DiskPartitionObj:PartitionType
            use: Must Not
      PartitionType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
  DNS Cache Object:
    project: cybox
    constructs:
      DNSCacheEntryType:
        use: Must Not
        is_vocab: false
        fields:
          DNS_Entry:
            type: DNSRecordObj:DNSRecordObjectType
            use: Must Not
          TTL:
            type: cyboxCommon:PositiveIntegerObjectPropertyType
            use: Must Not
      DNSCacheObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          DNS_Cache_Entry:
            type: DNSCacheObj:DNSCacheEntryType
            use: Must Not
  DNS Record Object:
    project: cybox
    constructs:
      DNSRecordObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Description:
            type: cyboxCommon:StructuredTextType
            use: Must Not
          Queried_Date:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Domain_Name:
            type: URIObj:URIObjectType
            use: Must Not
          IP_Address:
            type: AddressObj:AddressObjectType
            use: Must Not
          Address_Class:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Entry_Type:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Record_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Record_Type:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          TTL:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Flags:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Data_Length:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Record_Data:
            type: xs:anyType
            use: Must Not
  URI Object:
    project: cybox
    constructs:
      URIObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
          type:
            type: URIObj:URITypeEnum
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Value:
            type: cyboxCommon:AnyURIObjectPropertyType
            use: Must Not
  DNS Query Object:
    project: cybox
    constructs:
      DNSQueryObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
          successful:
            type: xs:boolean
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Transaction_ID:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Question:
            type: DNSQueryObj:DNSQuestionType
            use: Must Not
          Answer_Resource_Records:
            type: DNSQueryObj:DNSResourceRecordsType
            use: Must Not
          Authority_Resource_Records:
            type: DNSQueryObj:DNSResourceRecordsType
            use: Must Not
          Additional_Records:
            type: DNSQueryObj:DNSResourceRecordsType
            use: Must Not
          Date_Ran:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Service_Used:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      DNSQuestionType:
        use: Must Not
        is_vocab: false
        fields:
          QName:
            type: URIObj:URIObjectType
            use: Must Not
          QType:
            type: DNSQueryObj:DNSRecordType
            use: Must Not
          QClass:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      DNSRecordType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      DNSResourceRecordsType:
        use: Must Not
        is_vocab: false
        fields:
          Resource_Record:
            type: DNSRecordObj:DNSRecordObjectType
            use: Must Not
  Domain Name Object:
    project: cybox
    constructs:
      DomainNameObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
          type:
            type: DomainNameObj:DomainNameTypeEnum
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Value:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
  Email Message Object:
    project: cybox
    constructs:
      AttachmentReferenceType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
      AttachmentsType:
        use: Must Not
        is_vocab: false
        fields:
          File:
            type: EmailMessageObj:AttachmentReferenceType
            use: Must Not
      EmailHeaderType:
        use: Must Not
        is_vocab: false
        fields:
          Received_Lines:
            type: EmailMessageObj:EmailReceivedLineListType
            use: Must Not
          To:
            type: EmailMessageObj:EmailRecipientsType
            use: Must Not
          CC:
            type: EmailMessageObj:EmailRecipientsType
            use: Must Not
          BCC:
            type: EmailMessageObj:EmailRecipientsType
            use: Must Not
          From:
            type: AddressObj:AddressObjectType
            use: Must Not
          Subject:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          In_Reply_To:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Date:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Message_ID:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Sender:
            type: AddressObj:AddressObjectType
            use: Must Not
          Reply_To:
            type: AddressObj:AddressObjectType
            use: Must Not
          Errors_To:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Boundary:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Content_Type:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          MIME_Version:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Precedence:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          User_Agent:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          X_Mailer:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          X_Originating_IP:
            type: AddressObj:AddressObjectType
            use: Must Not
          X_Priority:
            type: cyboxCommon:PositiveIntegerObjectPropertyType
            use: Must Not
      EmailMessageObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Header:
            type: EmailMessageObj:EmailHeaderType
            use: Must Not
          Email_Server:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Raw_Body:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Raw_Header:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Attachments:
            type: EmailMessageObj:AttachmentsType
            use: Must Not
          Links:
            type: EmailMessageObj:LinksType
            use: Must Not
      EmailReceivedLineListType:
        use: Must Not
        is_vocab: false
        fields:
          Received:
            type: EmailMessageObj:EmailReceivedLineType
            use: Must Not
      EmailReceivedLineType:
        use: Must Not
        is_vocab: false
        fields:
          From:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          By:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Via:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          With:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          For:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          ID:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Timestamp:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
      EmailRecipientsType:
        use: Must Not
        is_vocab: false
        fields:
          Recipient:
            type: AddressObj:AddressObjectType
            use: Must Not
      LinkReferenceType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
      LinksType:
        use: Must Not
        is_vocab: false
        fields:
          Link:
            type: EmailMessageObj:LinkReferenceType
            use: Must Not
  GUI Dialogbox Object:
    project: cybox
    constructs:
      GUIDialogboxObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Height:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Width:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Box_Caption:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Box_Text:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
  GUI Object:
    project: cybox
    constructs:
      GUIObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Height:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Width:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
  GUI Window Object:
    project: cybox
    constructs:
      GUIWindowObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Height:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Width:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Owner_Window:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Parent_Window:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Window_Display_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
  Hostname Object:
    project: cybox
    constructs:
      HostnameObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
          is_domain_name:
            type: xs:boolean
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Hostname_Value:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Naming_System:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
  HTTP Session Object:
    project: cybox
    constructs:
      HostFieldType:
        use: Must Not
        is_vocab: false
        fields:
          Domain_Name:
            type: URIObj:URIObjectType
            use: Must Not
          Port:
            type: PortObj:PortObjectType
            use: Must Not
      HTTPClientRequestType:
        use: Must Not
        is_vocab: false
        fields:
          HTTP_Request_Line:
            type: HTTPSessionObj:HTTPRequestLineType
            use: Must Not
          HTTP_Request_Header:
            type: HTTPSessionObj:HTTPRequestHeaderType
            use: Must Not
          HTTP_Message_Body:
            type: HTTPSessionObj:HTTPMessageType
            use: Must Not
      HTTPMessageType:
        use: Must Not
        is_vocab: false
        fields:
          Length:
            type: cyboxCommon:PositiveIntegerObjectPropertyType
            use: Must Not
          Message_Body:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      HTTPMethodType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      HTTPRequestHeaderFieldsType:
        use: Must Not
        is_vocab: false
        fields:
          Accept:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Accept_Charset:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Accept_Language:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Accept_Datetime:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Accept_Encoding:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Authorization:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Cache_Control:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Connection:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Cookie:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Content_Length:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Content_MD5:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Content_Type:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Date:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Expect:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          From:
            type: AddressObj:AddressObjectType
            use: Must Not
          Host:
            type: HTTPSessionObj:HostFieldType
            use: Must Not
          If_Match:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          If_Modified_Since:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          If_None_Match:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          If_Range:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          If_Unmodified_Since:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Max_Forwards:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Pragma:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Proxy_Authorization:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Range:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Referer:
            type: URIObj:URIObjectType
            use: Must Not
          TE:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          User_Agent:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Via:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Warning:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          DNT:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          X_Requested_With:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          X_Forwarded_For:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          X_Forwarded_Proto:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          X_ATT_DeviceId:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          X_Wap_Profile:
            type: URIObj:URIObjectType
            use: Must Not
      HTTPRequestHeaderType:
        use: Must Not
        is_vocab: false
        fields:
          Raw_Header:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Parsed_Header:
            type: HTTPSessionObj:HTTPRequestHeaderFieldsType
            use: Must Not
      HTTPRequestLineType:
        use: Must Not
        is_vocab: false
        fields:
          HTTP_Method:
            type: HTTPSessionObj:HTTPMethodType
            use: Must Not
          Value:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Version:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      HTTPRequestResponseType:
        use: Must Not
        is_vocab: false
        attributes:
          ordinal_position:
            type: xs:nonNegativeInteger
            use: Must Not
        fields:
          HTTP_Client_Request:
            type: HTTPSessionObj:HTTPClientRequestType
            use: Must Not
          HTTP_Provisional_Server_Response:
            type: HTTPSessionObj:HTTPServerResponseType
            use: Must Not
          HTTP_Server_Response:
            type: HTTPSessionObj:HTTPServerResponseType
            use: Must Not
      HTTPResponseHeaderFieldsType:
        use: Must Not
        is_vocab: false
        fields:
          Access_Control_Allow_Origin:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Accept_Ranges:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Age:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Cache_Control:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Connection:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Content_Encoding:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Content_Language:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Content_Length:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Content_Location:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Content_MD5:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Content_Disposition:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Content_Range:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Content_Type:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Date:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          ETag:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Expires:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Last_Modified:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Link:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Location:
            type: URIObj:URIObjectType
            use: Must Not
          P3P:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Pragma:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Proxy_Authenticate:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Refresh:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Retry_After:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Server:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Set_Cookie:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Strict_Transport_Security:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Trailer:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Transfer_Encoding:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Vary:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Via:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Warning:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          WWW_Authenticate:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          X_Frame_Options:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          X_XSS_Protection:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          X_Content_Type_Options:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          X_Powered_By:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          X_UA_Compatible:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      HTTPResponseHeaderType:
        use: Must Not
        is_vocab: false
        fields:
          Raw_Header:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Parsed_Header:
            type: HTTPSessionObj:HTTPResponseHeaderFieldsType
            use: Must Not
      HTTPServerResponseType:
        use: Must Not
        is_vocab: false
        fields:
          HTTP_Status_Line:
            type: HTTPSessionObj:HTTPStatusLineType
            use: Must Not
          HTTP_Response_Header:
            type: HTTPSessionObj:HTTPResponseHeaderType
            use: Must Not
          HTTP_Message_Body:
            type: HTTPSessionObj:HTTPMessageType
            use: Must Not
      HTTPSessionObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          HTTP_Request_Response:
            type: HTTPSessionObj:HTTPRequestResponseType
            use: Must Not
      HTTPStatusLineType:
        use: Must Not
        is_vocab: false
        fields:
          Version:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Status_Code:
            type: cyboxCommon:PositiveIntegerObjectPropertyType
            use: Must Not
          Reason_Phrase:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
  Port Object:
    project: cybox
    constructs:
      PortObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Port_Value:
            type: cyboxCommon:PositiveIntegerObjectPropertyType
            use: Must Not
          Layer4_Protocol:
            type: cyboxCommon:Layer4ProtocolType
            use: Must Not
  Image File Object:
    project: cybox
    constructs:
      ImageFileFormatType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      ImageFileObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
          is_packed:
            type: xs:boolean
            use: Must Not
          is_masqueraded:
            type: xs:boolean
            use: Must Not
          image_is_compressed:
            type: xs:boolean
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          File_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          File_Path:
            type: FileObj:FilePathType
            use: Must Not
          Device_Path:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Full_Path:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          File_Extension:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Size_In_Bytes:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          Magic_Number:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          File_Format:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Hashes:
            type: cyboxCommon:HashListType
            use: Must Not
          Digital_Signatures:
            type: cyboxCommon:DigitalSignaturesType
            use: Must Not
          Modified_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Accessed_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Created_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          File_Attributes_List:
            type: FileObj:FileAttributeType
            use: Must Not
          Permissions:
            type: FileObj:FilePermissionsType
            use: Must Not
          User_Owner:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Packer_List:
            type: FileObj:PackerListType
            use: Must Not
          Peak_Entropy:
            type: cyboxCommon:DoubleObjectPropertyType
            use: Must Not
          Sym_Links:
            type: FileObj:SymLinksListType
            use: Must Not
          Byte_Runs:
            type: cyboxCommon:ByteRunsType
            use: Must Not
          Extracted_Features:
            type: cyboxCommon:ExtractedFeaturesType
            use: Must Not
          Encryption_Algorithm:
            type: cyboxCommon:CipherType
            use: Must Not
          Decryption_Key:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Compression_Method:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Compression_Version:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Compression_Comment:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Image_File_Format:
            type: ImageFileObj:ImageFileFormatType
            use: Must Not
          Image_Height:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Image_Width:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Bits_Per_Pixel:
            type: cyboxCommon:PositiveIntegerObjectPropertyType
            use: Must Not
          Compression_Algorithm:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
  Library Object:
    project: cybox
    constructs:
      LibraryObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Path:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Size:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          Type:
            type: LibraryObj:LibraryType
            use: Must Not
          Version:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Base_Address:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Extracted_Features:
            type: cyboxCommon:ExtractedFeaturesType
            use: Must Not
      LibraryType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
  Link Object:
    project: cybox
    constructs:
      LinkObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
          type:
            type: URIObj:URITypeEnum
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Value:
            type: cyboxCommon:AnyURIObjectPropertyType
            use: Must Not
          URL_Label:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
  Linux Package Object:
    project: cybox
    constructs:
      LinuxPackageObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Architecture:
            type: cyboxCommon:ControlledVocabularyStringType
            use: Must Not
          Category:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Description:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Epoch:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          EVR:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Release:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Vendor:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Version:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
  Memory Object:
    project: cybox
    constructs:
      BlockType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      MemoryObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
          is_injected:
            type: xs:boolean
            use: Must Not
          is_mapped:
            type: xs:boolean
            use: Must Not
          is_protected:
            type: xs:boolean
            use: Must Not
          is_volatile:
            type: xs:boolean
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Hashes:
            type: cyboxCommon:HashListType
            use: Must Not
          Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Memory_Source:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Region_Size:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          Block_Type:
            type: MemoryObj:BlockType
            use: Must Not
          Region_Start_Address:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Region_End_Address:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Extracted_Features:
            type: cyboxCommon:ExtractedFeaturesType
            use: Must Not
  Mutex Object:
    project: cybox
    constructs:
      MutexObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
          named:
            type: xs:boolean
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
  Network Connection Object:
    project: cybox
    constructs:
      Layer3ProtocolType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      Layer7ConnectionsType:
        use: Must Not
        is_vocab: false
        fields:
          HTTP_Session:
            type: HTTPSessionObj:HTTPSessionObjectType
            use: Must Not
          DNS_Query:
            type: DNSQueryObj:DNSQueryObjectType
            use: Must Not
      Layer7ProtocolType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      NetworkConnectionObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
          tls_used:
            type: xs:boolean
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Creation_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Layer3_Protocol:
            type: NetworkConnectionObj:Layer3ProtocolType
            use: Must Not
          Layer4_Protocol:
            type: cyboxCommon:Layer4ProtocolType
            use: Must Not
          Layer7_Protocol:
            type: NetworkConnectionObj:Layer7ProtocolType
            use: Must Not
          Source_Socket_Address:
            type: SocketAddressObj:SocketAddressObjectType
            use: Must Not
          Source_TCP_State:
            type: NetworkConnectionObj:TCPStateEnum
            use: Must Not
          Destination_Socket_Address:
            type: SocketAddressObj:SocketAddressObjectType
            use: Must Not
          Destination_TCP_State:
            type: NetworkConnectionObj:TCPStateEnum
            use: Must Not
          Layer7_Connections:
            type: NetworkConnectionObj:Layer7ConnectionsType
            use: Must Not
  Socket Address Object:
    project: cybox
    constructs:
      SocketAddressObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          IP_Address:
            type: AddressObj:AddressObjectType
            use: Must Not
          Hostname:
            type: HostnameObj:HostnameObjectType
            use: Must Not
          Port:
            type: PortObj:PortObjectType
            use: Must Not
  Network Flow Object:
    project: cybox
    constructs:
      BidirectionalRecordType:
        use: Must Not
        is_vocab: false
        fields:
          YAF_Record:
            type: NetFlowObj:YAFRecordType
            use: Must Not
      FlowCollectionElementType:
        use: Must Not
        is_vocab: false
        fields:
          Flow_Record_Field_Value:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      FlowDataRecordType:
        use: Must Not
        is_vocab: false
        fields:
          Flow_Record_Collection_Element:
            type: NetFlowObj:FlowCollectionElementType
            use: Must Not
      IPFIXDataRecordType:
        use: Must Not
        is_vocab: false
        fields:
          Field_Value:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      IPFIXDataSetType:
        use: Must Not
        is_vocab: false
        fields:
          Set_Header:
            type: NetFlowObj:IPFIXSetHeaderType
            use: Must Not
          Data_Record:
            type: NetFlowObj:IPFIXDataRecordType
            use: Must Not
          Padding:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
      IPFIXMessageHeaderType:
        use: Must Not
        is_vocab: false
        fields:
          Version:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Byte_Length:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Export_Timestamp:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Sequence_Number:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Observation_Domain_ID:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
      IPFIXMessageType:
        use: Must Not
        is_vocab: false
        fields:
          Message_Header:
            type: NetFlowObj:IPFIXMessageHeaderType
            use: Must Not
          Set:
            type: NetFlowObj:IPFIXSetType
            use: Must Not
      IPFIXOptionsTemplateRecordFieldSpecifiersType:
        use: Must Not
        is_vocab: false
        fields:
          Scope_Enterprise_Bit:
            type: xs:boolean
            use: Must Not
          Scope_Information_Element_ID:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Scope_Field_Length:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Scope_Enterprise_Number:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Option_Enterprise_Bit:
            type: xs:boolean
            use: Must Not
          Option_Information_Element_ID:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Option_Field_Length:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Option_Enterprise_Number:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      IPFIXOptionsTemplateRecordHeaderType:
        use: Must Not
        is_vocab: false
        fields:
          Template_ID:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Field_Count:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Scope_Field_Count:
            type: cyboxCommon:PositiveIntegerObjectPropertyType
            use: Must Not
      IPFIXOptionsTemplateRecordType:
        use: Must Not
        is_vocab: false
        fields:
          Options_Template_Record_Header:
            type: NetFlowObj:IPFIXOptionsTemplateRecordHeaderType
            use: Must Not
          Field_Specifier:
            type: NetFlowObj:IPFIXOptionsTemplateRecordFieldSpecifiersType
            use: Must Not
      IPFIXOptionsTemplateSetType:
        use: Must Not
        is_vocab: false
        fields:
          Set_Header:
            type: NetFlowObj:IPFIXSetHeaderType
            use: Must Not
          Options_Template_Record:
            type: NetFlowObj:IPFIXOptionsTemplateRecordType
            use: Must Not
          Padding:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
      IPFIXSetHeaderType:
        use: Must Not
        is_vocab: false
        fields:
          Set_ID:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Length:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
      IPFIXSetType:
        use: Must Not
        is_vocab: false
        fields:
          Template_Set:
            type: NetFlowObj:IPFIXTemplateSetType
            use: Must Not
          Options_Template_Set:
            type: NetFlowObj:IPFIXOptionsTemplateSetType
            use: Must Not
          Data_Set:
            type: NetFlowObj:IPFIXDataSetType
            use: Must Not
      IPFIXTemplateRecordFieldSpecifiersType:
        use: Must Not
        is_vocab: false
        fields:
          Enterprise_Bit:
            type: xs:boolean
            use: Must Not
          Information_Element_ID:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Field_Length:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Enterprise_Number:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      IPFIXTemplateRecordHeaderType:
        use: Must Not
        is_vocab: false
        fields:
          Template_ID:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Field_Count:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
      IPFIXTemplateRecordType:
        use: Must Not
        is_vocab: false
        fields:
          Template_Record_Header:
            type: NetFlowObj:IPFIXTemplateRecordHeaderType
            use: Must Not
          Field_Specifier:
            type: NetFlowObj:IPFIXTemplateRecordFieldSpecifiersType
            use: Must Not
      IPFIXTemplateSetType:
        use: Must Not
        is_vocab: false
        fields:
          Set_Header:
            type: NetFlowObj:IPFIXSetHeaderType
            use: Must Not
          Template_Record:
            type: NetFlowObj:IPFIXTemplateRecordType
            use: Must Not
          Padding:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
      NetflowV5FlowHeaderType:
        use: Must Not
        is_vocab: false
        fields:
          Version:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Count:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Sys_Up_Time:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Unix_Secs:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Unix_Nsecs:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Flow_Sequence:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Engine_Type:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Engine_ID:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Sampling_Interval:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
      NetflowV5FlowRecordType:
        use: Must Not
        is_vocab: false
        fields:
          Nexthop_IPv4_Addr:
            type: AddressObj:AddressObjectType
            use: Must Not
          Packet_Count:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Byte_Count:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          SysUpTime_Start:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          SysUpTime_End:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Padding1:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          TCP_Flags:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Src_Autonomous_System:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Dest_Autonomous_System:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Src_IP_Mask_Bit_Count:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Dest_IP_Mask_Bit_Count:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Padding2:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
      NetflowV5PacketType:
        use: Must Not
        is_vocab: false
        fields:
          Flow_Header:
            type: NetFlowObj:NetflowV5FlowHeaderType
            use: Must Not
          Flow_Record:
            type: NetFlowObj:NetflowV5FlowRecordType
            use: Must Not
      NetflowV9DataFlowSetType:
        use: Must Not
        is_vocab: false
        fields:
          Flow_Set_ID_Template_ID:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Length:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Data_Record:
            type: NetFlowObj:NetflowV9DataRecordType
            use: Must Not
          Padding:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
      NetflowV9DataRecordType:
        use: Must Not
        is_vocab: false
        fields:
          Flow_Data_Record:
            type: NetFlowObj:FlowDataRecordType
            use: Must Not
          Options_Data_Record:
            type: NetFlowObj:OptionsDataRecordType
            use: Must Not
      NetflowV9ExportPacketType:
        use: Must Not
        is_vocab: false
        fields:
          Packet_Header:
            type: NetFlowObj:NetflowV9PacketHeaderType
            use: Must Not
          Flow_Set:
            type: NetFlowObj:NetflowV9FlowSetType
            use: Must Not
      NetflowV9FieldType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      NetflowV9FlowSetType:
        use: Must Not
        is_vocab: false
        fields:
          Template_Flow_Set:
            type: NetFlowObj:NetflowV9TemplateFlowSetType
            use: Must Not
          Options_Template_Flow_Set:
            type: NetFlowObj:NetflowV9OptionsTemplateFlowSetType
            use: Must Not
          Data_Flow_Set:
            type: NetFlowObj:NetflowV9DataFlowSetType
            use: Must Not
      NetflowV9OptionsTemplateFlowSetType:
        use: Must Not
        is_vocab: false
        fields:
          Flow_Set_ID:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Length:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Options_Template_Record:
            type: NetFlowObj:NetflowV9OptionsTemplateRecordType
            use: Must Not
          Padding:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
      NetflowV9OptionsTemplateRecordType:
        use: Must Not
        is_vocab: false
        fields:
          Template_ID:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Option_Scope_Length:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Option_Length:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Scope_Field_Type:
            type: NetFlowObj:NetflowV9ScopeFieldType
            use: Must Not
          Scope_Field_Length:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Option_Field_Type:
            type: NetFlowObj:NetflowV9FieldType
            use: Must Not
          Option_Field_Length:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
      NetflowV9PacketHeaderType:
        use: Must Not
        is_vocab: false
        fields:
          Version:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Record_Count:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Sys_Up_Time:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Unix_Secs:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Sequence_Number:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Source_ID:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
      NetflowV9ScopeFieldType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      NetflowV9TemplateFlowSetType:
        use: Must Not
        is_vocab: false
        fields:
          Flow_Set_ID:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Length:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Template_Record:
            type: NetFlowObj:NetflowV9TemplateRecordType
            use: Must Not
      NetflowV9TemplateRecordType:
        use: Must Not
        is_vocab: false
        fields:
          Template_ID:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Field_Count:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Field_Type:
            type: NetFlowObj:NetflowV9FieldType
            use: Must Not
          Field_Length:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
      NetworkFlowLabelType:
        use: Must Not
        is_vocab: false
        fields:
          Src_Socket_Address:
            type: SocketAddressObj:SocketAddressObjectType
            use: Must Not
          Dest_Socket_Address:
            type: SocketAddressObj:SocketAddressObjectType
            use: Must Not
          IP_Protocol:
            type: PacketObj:IANAAssignedIPNumbersType
            use: Must Not
          Ingress_Interface_Index:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Egress_Interface_Index:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          IP_Type_Of_Service:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
      NetworkFlowObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Network_Flow_Label:
            type: NetFlowObj:NetworkFlowLabelType
            use: Must Not
          Unidirectional_Flow_Record:
            type: NetFlowObj:UnidirectionalRecordType
            use: Must Not
          Bidirectional_Flow_Record:
            type: NetFlowObj:BidirectionalRecordType
            use: Must Not
      NetworkLayerInfoType:
        use: Must Not
        is_vocab: false
        fields:
          Src_Socket_Address:
            type: SocketAddressObj:SocketAddressObjectType
            use: Must Not
          Dest_Socket_Address:
            type: SocketAddressObj:SocketAddressObjectType
            use: Must Not
          IP_Protocol:
            type: PacketObj:IANAAssignedIPNumbersType
            use: Must Not
      OptionCollectionElementType:
        use: Must Not
        is_vocab: false
        fields:
          Option_Record_Field_Value:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      OptionsDataRecordType:
        use: Must Not
        is_vocab: false
        fields:
          Scope_Field_Value:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Option_Record_Collection_Element:
            type: NetFlowObj:OptionCollectionElementType
            use: Must Not
      SiLKAddressType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      SiLKCountryCodeType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      SiLKDirectionType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      SiLKFlowAttributesType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      SiLKRecordType:
        use: Must Not
        is_vocab: false
        fields:
          Packet_Count:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Byte_Count:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          TCP_Flags:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Start_Time:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Duration:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          End_Time:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Sensor_Info:
            type: NetFlowObj:SiLKSensorInfoType
            use: Must Not
          ICMP_Type:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          ICMP_Code:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Router_Next_Hop_IP:
            type: AddressObj:AddressObjectType
            use: Must Not
          Initial_TCP_Flags:
            type: PacketObj:TCPFlagsType
            use: Must Not
          Session_TCP_Flags:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Flow_Attributes:
            type: NetFlowObj:SiLKFlowAttributesType
            use: Must Not
          Flow_Application:
            type: PacketObj:IANAPortNumberRegistryType
            use: Must Not
          Src_IP_Type:
            type: NetFlowObj:SiLKAddressType
            use: Must Not
          Dest_IP_Type:
            type: NetFlowObj:SiLKAddressType
            use: Must Not
          Src_Country_Code:
            type: NetFlowObj:SiLKCountryCodeType
            use: Must Not
          Dest_Country_Code:
            type: NetFlowObj:SiLKCountryCodeType
            use: Must Not
          Src_MAPNAME:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Dest_MAPNAME:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      SiLKSensorClassType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      SiLKSensorInfoType:
        use: Must Not
        is_vocab: false
        fields:
          Sensor_ID:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Class:
            type: NetFlowObj:SiLKSensorClassType
            use: Must Not
          Type:
            type: NetFlowObj:SiLKDirectionType
            use: Must Not
      UnidirectionalRecordType:
        use: Must Not
        is_vocab: false
        fields:
          IPFIX_Message:
            type: NetFlowObj:IPFIXMessageType
            use: Must Not
          NetflowV9_Export_Packet:
            type: NetFlowObj:NetflowV9ExportPacketType
            use: Must Not
          NetflowV5_Packet:
            type: NetFlowObj:NetflowV5PacketType
            use: Must Not
          SiLK_Record:
            type: NetFlowObj:SiLKRecordType
            use: Must Not
      YAFFlowType:
        use: Must Not
        is_vocab: false
        fields:
          Flow_Start_Milliseconds:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Flow_End_Milliseconds:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Octet_Total_Count:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Packet_Total_Count:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Flow_End_Reason:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          SiLK_App_Label:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Payload_Entropy:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          ML_App_Label:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          TCP_Flow:
            type: NetFlowObj:YAFTCPFlowType
            use: Must Not
          Vlan_ID_MAC_Addr:
            type: AddressObj:AddressObjectType
            use: Must Not
          Passive_OS_Fingerprinting:
            type: cyboxCommon:PlatformSpecificationType
            use: Must Not
          First_Packet_Banner:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Second_Packet_Banner:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          N_Bytes_Payload:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
      YAFRecordType:
        use: Must Not
        is_vocab: false
        fields:
          Flow:
            type: NetFlowObj:YAFFlowType
            use: Must Not
          Reverse_Flow:
            type: NetFlowObj:YAFReverseFlowType
            use: Must Not
      YAFReverseFlowType:
        use: Must Not
        is_vocab: false
        fields:
          Reverse_Octet_Total_Count:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Reverse_Packet_Total_Count:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Reverse_Payload_Entropy:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Reverse_Flow_Delta_Milliseconds:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          TCP_Reverse_Flow:
            type: NetFlowObj:YAFTCPFlowType
            use: Must Not
          Reverse_Vlan_ID_MAC_Addr:
            type: AddressObj:AddressObjectType
            use: Must Not
          Reverse_Passive_OS_Fingerprinting:
            type: cyboxCommon:PlatformSpecificationType
            use: Must Not
          Reverse_First_Packet:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Reverse_N_Bytes_Payload:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
      YAFTCPFlowType:
        use: Must Not
        is_vocab: false
        fields:
          TCP_Sequence_Number:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Initial_TCP_Flags:
            type: PacketObj:TCPFlagsType
            use: Must Not
          Union_TCP_Flags:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
  Network Packet Object:
    project: cybox
    constructs:
      ARPOpType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      ARPType:
        use: Must Not
        is_vocab: false
        fields:
          Hardware_Addr_Type:
            type: PacketObj:IANAHardwareType
            use: Must Not
          Proto_Addr_Type:
            type: PacketObj:IANAEtherType
            use: Must Not
          Hardware_Addr_Size:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Proto_Addr_Size:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Op_Type:
            type: PacketObj:ARPOpType
            use: Must Not
          Sender_Hardware_Addr:
            type: AddressObj:AddressObjectType
            use: Must Not
          Sender_Protocol_Addr:
            type: AddressObj:AddressObjectType
            use: Must Not
          Recip_Hardware_Addr:
            type: AddressObj:AddressObjectType
            use: Must Not
          Recip_Protocol_Addr:
            type: AddressObj:AddressObjectType
            use: Must Not
      AuthenticationHeaderType:
        use: Must Not
        is_vocab: false
        fields:
          Next_Header:
            type: PacketObj:IANAAssignedIPNumbersType
            use: Must Not
          Header_Ext_Len:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Security_Parameters_Index:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Sequence_Number:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Authentication_Data:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
      DestinationOptionsType:
        use: Must Not
        is_vocab: false
        fields:
          Next_Header:
            type: PacketObj:IANAAssignedIPNumbersType
            use: Must Not
          Header_Ext_Len:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Option_Data:
            type: PacketObj:OptionDataType
            use: Must Not
      DoNotFragmentType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      EncapsulatingSecurityPayloadType:
        use: Must Not
        is_vocab: false
        fields:
          Security_Parameters_Index:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Sequence_Number:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Payload_Data:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Padding:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Padding_Len:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Next_Header:
            type: PacketObj:IANAAssignedIPNumbersType
            use: Must Not
          Authentication_Data:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
      EthernetHeaderType:
        use: Must Not
        is_vocab: false
        fields:
          Destination_MAC_Addr:
            type: AddressObj:AddressObjectType
            use: Must Not
          Source_MAC_Addr:
            type: AddressObj:AddressObjectType
            use: Must Not
          Type_Or_Length:
            type: PacketObj:TypeLengthType
            use: Must Not
          Checksum:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
      EthernetInterfaceType:
        use: Must Not
        is_vocab: false
        fields:
          Ethernet_Header:
            type: PacketObj:EthernetHeaderType
            use: Must Not
      FragmentationRequiredType:
        use: Must Not
        is_vocab: false
        fields:
          Fragmentation_Required:
            type: xs:boolean
            use: Must Not
          Next_Hop_MTU:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
      FragmentHeaderType:
        use: Must Not
        is_vocab: false
        fields:
          Next_Header:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Fragment_Offset:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          M_Flag:
            type: PacketObj:MFlagType
            use: Must Not
          Identification:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
      FragmentType:
        use: Must Not
        is_vocab: false
        fields:
          Fragment_Header:
            type: PacketObj:FragmentHeaderType
            use: Must Not
          Fragment:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
      HopByHopOptionsType:
        use: Must Not
        is_vocab: false
        fields:
          Next_Header:
            type: PacketObj:IANAAssignedIPNumbersType
            use: Must Not
          Header_Ext_Len:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Option_Data:
            type: PacketObj:OptionDataType
            use: Must Not
      IANAAssignedIPNumbersType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      IANAEtherType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      IANAHardwareType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      IANAPortNumberRegistryType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      ICMPv4AddressMaskReplyType:
        use: Must Not
        is_vocab: false
        fields:
          Address_Mask_Reply:
            type: xs:boolean
            use: Must Not
          Address_Mask:
            type: AddressObj:AddressObjectType
            use: Must Not
      ICMPv4AddressMaskRequestType:
        use: Must Not
        is_vocab: false
        fields:
          Address_Mask_Request:
            type: xs:boolean
            use: Must Not
          Address_Mask:
            type: AddressObj:AddressObjectType
            use: Must Not
      ICMPv4DestinationUnreachableType:
        use: Must Not
        is_vocab: false
        fields:
          Destination_Network_Unreachable:
            type: xs:boolean
            use: Must Not
          Destination_Host_Unreachable:
            type: xs:boolean
            use: Must Not
          Destination_Protocol_Unreachable:
            type: xs:boolean
            use: Must Not
          Destination_Port_Unreachable:
            type: xs:boolean
            use: Must Not
          Fragmentation_Required:
            type: PacketObj:FragmentationRequiredType
            use: Must Not
          Source_Route_Failed:
            type: xs:boolean
            use: Must Not
          Destination_Network_Unknown:
            type: xs:boolean
            use: Must Not
          Destination_Host_Unknown:
            type: xs:boolean
            use: Must Not
          Source_Host_Isolated:
            type: xs:boolean
            use: Must Not
          Network_Administratively_Prohibited:
            type: xs:boolean
            use: Must Not
          Host_Administratively_Prohibited:
            type: xs:boolean
            use: Must Not
          Network_Unreachable_For_TOS:
            type: xs:boolean
            use: Must Not
          Host_Unreachable_For_TOS:
            type: xs:boolean
            use: Must Not
          Communication_Administratively_Prohibited:
            type: xs:boolean
            use: Must Not
          Host_Precedence_Violation:
            type: xs:boolean
            use: Must Not
          Precedence_Cutoff_In_Effect:
            type: xs:boolean
            use: Must Not
      ICMPv4EchoReplyType:
        use: Must Not
        is_vocab: false
        fields:
          Echo_Reply:
            type: xs:boolean
            use: Must Not
          Data:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
      ICMPv4EchoRequestType:
        use: Must Not
        is_vocab: false
        fields:
          Echo_Request:
            type: xs:boolean
            use: Must Not
          Data:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
      ICMPv4ErrorMessageContentType:
        use: Must Not
        is_vocab: false
        fields:
          IP_Header:
            type: PacketObj:IPv4HeaderType
            use: Must Not
          First_Eight_Bytes:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
      ICMPv4ErrorMessageType:
        use: Must Not
        is_vocab: false
        fields:
          Destination_Unreachable:
            type: PacketObj:ICMPv4DestinationUnreachableType
            use: Must Not
          Source_Quench:
            type: PacketObj:ICMPv4SourceQuenchType
            use: Must Not
          Redirect_Message:
            type: PacketObj:ICMPv4RedirectMessageType
            use: Must Not
          Time_Exceeded:
            type: PacketObj:ICMPv4TimeExceededType
            use: Must Not
          Error_Msg_Content:
            type: PacketObj:ICMPv4ErrorMessageContentType
            use: Must Not
      ICMPv4HeaderType:
        use: Must Not
        is_vocab: false
        fields:
          Type:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Code:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Checksum:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
      ICMPv4InfoMessageContentType:
        use: Must Not
        is_vocab: false
        fields:
          Identifier:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Sequence_Number:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
      ICMPv4InfoMessageType:
        use: Must Not
        is_vocab: false
        fields:
          Echo_Reply:
            type: PacketObj:ICMPv4EchoReplyType
            use: Must Not
          Echo_Request:
            type: PacketObj:ICMPv4EchoRequestType
            use: Must Not
          Timestamp_Request:
            type: PacketObj:ICMPv4TimestampRequestType
            use: Must Not
          Timestamp_Reply:
            type: PacketObj:ICMPv4TimestampReplyType
            use: Must Not
          Address_Mask_Request:
            type: PacketObj:ICMPv4AddressMaskRequestType
            use: Must Not
          Address_Mask_Reply:
            type: PacketObj:ICMPv4AddressMaskReplyType
            use: Must Not
          Info_Msg_Content:
            type: PacketObj:ICMPv4InfoMessageContentType
            use: Must Not
      ICMPv4PacketType:
        use: Must Not
        is_vocab: false
        fields:
          ICMPv4_Header:
            type: PacketObj:ICMPv4HeaderType
            use: Must Not
          Error_Msg:
            type: PacketObj:ICMPv4ErrorMessageType
            use: Must Not
          Info_Msg:
            type: PacketObj:ICMPv4InfoMessageType
            use: Must Not
          Traceroute:
            type: PacketObj:ICMPv4TracerouteType
            use: Must Not
      ICMPv4RedirectMessageType:
        use: Must Not
        is_vocab: false
        fields:
          Network_Redirect:
            type: xs:boolean
            use: Must Not
          Host_Redirect:
            type: xs:boolean
            use: Must Not
          ToS_Network_Redirect:
            type: xs:boolean
            use: Must Not
          ToS_Host_Redirect:
            type: xs:boolean
            use: Must Not
          IP_Address:
            type: AddressObj:AddressObjectType
            use: Must Not
      ICMPv4SourceQuenchType:
        use: Must Not
        is_vocab: false
        fields:
          Source_Quench:
            type: xs:boolean
            use: Must Not
      ICMPv4TimeExceededType:
        use: Must Not
        is_vocab: false
        fields:
          TTL_Exceeded_In_Transit:
            type: xs:boolean
            use: Must Not
          Frag_Reassembly_Time_Exceeded:
            type: xs:boolean
            use: Must Not
      ICMPv4TimestampReplyType:
        use: Must Not
        is_vocab: false
        fields:
          Timestamp_Reply:
            type: xs:boolean
            use: Must Not
          Originate_Timestamp:
            type: cyboxCommon:UnsignedIntegerObjectPropertyType
            use: Must Not
          Receive_Timestamp:
            type: cyboxCommon:UnsignedIntegerObjectPropertyType
            use: Must Not
          Transmit_Timestamp:
            type: cyboxCommon:UnsignedIntegerObjectPropertyType
            use: Must Not
      ICMPv4TimestampRequestType:
        use: Must Not
        is_vocab: false
        fields:
          Timestamp:
            type: xs:boolean
            use: Must Not
          Originate_Timestamp:
            type: cyboxCommon:UnsignedIntegerObjectPropertyType
            use: Must Not
      ICMPv4TracerouteType:
        use: Must Not
        is_vocab: false
        fields:
          Outbound_Packet_Forward_Success:
            type: xs:boolean
            use: Must Not
          Outbound_Packet_no_Route:
            type: xs:boolean
            use: Must Not
          Identifier:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Outbound_Hop_Count:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Return_Hop_Count:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Output_Link_Speed:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Output_Link_MTU:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
      ICMPv6DestinationUnreachableType:
        use: Must Not
        is_vocab: false
        fields:
          No_Route:
            type: xs:boolean
            use: Must Not
          Comm_Prohibited:
            type: xs:boolean
            use: Must Not
          Beyond_Scope:
            type: xs:boolean
            use: Must Not
          Address_Unreachable:
            type: xs:boolean
            use: Must Not
          Port_Unreachable:
            type: xs:boolean
            use: Must Not
          Src_Addr_Failed_Policy:
            type: xs:boolean
            use: Must Not
          Reject_Route:
            type: xs:boolean
            use: Must Not
      ICMPv6EchoReplyType:
        use: Must Not
        is_vocab: false
        fields:
          Echo_Reply:
            type: xs:boolean
            use: Must Not
          Data:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
      ICMPv6EchoRequestType:
        use: Must Not
        is_vocab: false
        fields:
          Echo_Request:
            type: xs:boolean
            use: Must Not
          Data:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
      ICMPv6ErrorMessageType:
        use: Must Not
        is_vocab: false
        fields:
          Destination_Unreachable:
            type: PacketObj:ICMPv6DestinationUnreachableType
            use: Must Not
          Packet_Too_Big:
            type: PacketObj:ICMPv6PacketTooBigType
            use: Must Not
          Time_Exceeded:
            type: PacketObj:ICMPv6TimeExceededType
            use: Must Not
          Parameter_Problem:
            type: PacketObj:ICMPv6ParameterProblemType
            use: Must Not
          Invoking_Packet:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
      ICMPv6HeaderType:
        use: Must Not
        is_vocab: false
        fields:
          Type:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Code:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Checksum:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
      ICMPv6InfoMessageContentType:
        use: Must Not
        is_vocab: false
        fields:
          Identifier:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Sequence_Number:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
      ICMPv6InfoMessageType:
        use: Must Not
        is_vocab: false
        fields:
          Echo_Request:
            type: PacketObj:ICMPv6EchoRequestType
            use: Must Not
          Echo_Reply:
            type: PacketObj:ICMPv6EchoReplyType
            use: Must Not
          Info_Msg_Content:
            type: PacketObj:ICMPv6InfoMessageContentType
            use: Must Not
      ICMPv6PacketTooBigType:
        use: Must Not
        is_vocab: false
        fields:
          Packet_Too_Big:
            type: xs:boolean
            use: Must Not
          MTU:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
      ICMPv6PacketType:
        use: Must Not
        is_vocab: false
        fields:
          ICMPv6_Header:
            type: PacketObj:ICMPv6HeaderType
            use: Must Not
          Error_Msg:
            type: PacketObj:ICMPv6ErrorMessageType
            use: Must Not
          Info_Msg:
            type: PacketObj:ICMPv6InfoMessageType
            use: Must Not
      ICMPv6ParameterProblemType:
        use: Must Not
        is_vocab: false
        fields:
          Erroneous_Header_Field:
            type: xs:boolean
            use: Must Not
          Unrecognized_Next_Header_Type:
            type: xs:boolean
            use: Must Not
          Unrecognized_IPv6_Option:
            type: xs:boolean
            use: Must Not
          Pointer:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
      ICMPv6TimeExceededType:
        use: Must Not
        is_vocab: false
        fields:
          Hop_Limit_Exceeded:
            type: xs:boolean
            use: Must Not
          Fragment_Reassem_Time_Exceeded:
            type: xs:boolean
            use: Must Not
      InternetLayerType:
        use: Must Not
        is_vocab: false
        fields:
          IPv4:
            type: PacketObj:IPv4PacketType
            use: Must Not
          ICMPv4:
            type: PacketObj:ICMPv4PacketType
            use: Must Not
          IPv6:
            type: PacketObj:IPv6PacketType
            use: Must Not
          ICMPv6:
            type: PacketObj:ICMPv6PacketType
            use: Must Not
      IPv4ClassType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      IPv4CopyFlagType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      IPv4FlagsType:
        use: Must Not
        is_vocab: false
        fields:
          Reserved:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Do_Not_Fragment:
            type: PacketObj:DoNotFragmentType
            use: Must Not
          More_Fragments:
            type: PacketObj:MoreFragmentsType
            use: Must Not
      IPv4HeaderType:
        use: Must Not
        is_vocab: false
        fields:
          IP_Version:
            type: PacketObj:IPVersionType
            use: Must Not
          Header_Length:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          DSCP:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          ECN:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Total_Length:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Identification:
            type: cyboxCommon:PositiveIntegerObjectPropertyType
            use: Must Not
          Flags:
            type: PacketObj:IPv4FlagsType
            use: Must Not
          Fragment_Offset:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          TTL:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Protocol:
            type: PacketObj:IANAAssignedIPNumbersType
            use: Must Not
          Checksum:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Src_IPv4_Addr:
            type: AddressObj:AddressObjectType
            use: Must Not
          Dest_IPv4_Addr:
            type: AddressObj:AddressObjectType
            use: Must Not
          Option:
            type: PacketObj:IPv4OptionType
            use: Must Not
      IPv4OptionsType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      IPv4OptionType:
        use: Must Not
        is_vocab: false
        fields:
          Copy_Flag:
            type: PacketObj:IPv4CopyFlagType
            use: Must Not
          Class:
            type: PacketObj:IPv4ClassType
            use: Must Not
          Option:
            type: PacketObj:IPv4OptionsType
            use: Must Not
      IPv4PacketType:
        use: Must Not
        is_vocab: false
        fields:
          IPv4_Header:
            type: PacketObj:IPv4HeaderType
            use: Must Not
          Data:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
      IPv6DoNotRecogActionType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      IPv6ExtHeaderType:
        use: Must Not
        is_vocab: false
        fields:
          Hop_by_Hop_Options:
            type: PacketObj:HopByHopOptionsType
            use: Must Not
          Routing:
            type: PacketObj:RoutingType
            use: Must Not
          Fragment:
            type: PacketObj:FragmentType
            use: Must Not
          Destination_Options:
            type: PacketObj:DestinationOptionsType
            use: Must Not
          Authentication_Header:
            type: PacketObj:AuthenticationHeaderType
            use: Must Not
          Encapsulating_Security_Payload:
            type: PacketObj:EncapsulatingSecurityPayloadType
            use: Must Not
      IPv6HeaderType:
        use: Must Not
        is_vocab: false
        fields:
          IP_Version:
            type: PacketObj:IPVersionType
            use: Must Not
          Traffic_Class:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Flow_Label:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Payload_Length:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Next_Header:
            type: PacketObj:IANAAssignedIPNumbersType
            use: Must Not
          TTL:
            type: cyboxCommon:PositiveIntegerObjectPropertyType
            use: Must Not
          Src_IPv6_Addr:
            type: AddressObj:AddressObjectType
            use: Must Not
          Dest_IPv6_Addr:
            type: AddressObj:AddressObjectType
            use: Must Not
      IPv6OptionType:
        use: Must Not
        is_vocab: false
        fields:
          Do_Not_Recogn_Action:
            type: PacketObj:IPv6DoNotRecogActionType
            use: Must Not
          Packet_Change:
            type: PacketObj:IPv6PacketChangeType
            use: Must Not
          Option_Byte:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
      IPv6PacketChangeType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      IPv6PacketType:
        use: Must Not
        is_vocab: false
        fields:
          IPv6_Header:
            type: PacketObj:IPv6HeaderType
            use: Must Not
          Ext_Headers:
            type: PacketObj:IPv6ExtHeaderType
            use: Must Not
          Data:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
      IPVersionType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      LinkLayerType:
        use: Must Not
        is_vocab: false
        fields:
          Physical_Interface:
            type: PacketObj:PhysicalInterfaceType
            use: Must Not
          Logical_Protocols:
            type: PacketObj:LogicalProtocolType
            use: Must Not
      LogicalProtocolType:
        use: Must Not
        is_vocab: false
        fields:
          ARP_RARP:
            type: PacketObj:ARPType
            use: Must Not
          NDP:
            type: PacketObj:NDPType
            use: Must Not
      MFlagType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      MoreFragmentsType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      NDPLinkAddrType:
        use: Must Not
        is_vocab: false
        fields:
          Length:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Link_Layer_MAC_Addr:
            type: AddressObj:AddressObjectType
            use: Must Not
      NDPMTUType:
        use: Must Not
        is_vocab: false
        fields:
          Length:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          MTU:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
      NDPPrefixInfoType:
        use: Must Not
        is_vocab: false
        attributes:
          link_flag:
            type: xs:boolean
            use: Must Not
          addr_config_flag:
            type: xs:boolean
            use: Must Not
        fields:
          Length:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Prefix_Length:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Valid_Lifetime:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Preferred_Lifetime:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Prefix:
            type: PacketObj:PrefixType
            use: Must Not
      NDPRedirectedHeaderType:
        use: Must Not
        is_vocab: false
        fields:
          Length:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          IPHeader_And_Data:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
      NDPType:
        use: Must Not
        is_vocab: false
        fields:
          ICMPv6_Header:
            type: PacketObj:ICMPv6HeaderType
            use: Must Not
          Router_Solicitation:
            type: PacketObj:RouterSolicitationType
            use: Must Not
          Router_Advertisement:
            type: PacketObj:RouterAdvertisementType
            use: Must Not
          Neighbor_Solicitation:
            type: PacketObj:NeighborSolicitationType
            use: Must Not
          Neighbor_Advertisement:
            type: PacketObj:NeighborAdvertisementType
            use: Must Not
          Redirect:
            type: PacketObj:RedirectType
            use: Must Not
      NeighborAdvertisementType:
        use: Must Not
        is_vocab: false
        attributes:
          router_flag:
            type: xs:boolean
            use: Must Not
          solicited_flag:
            type: xs:boolean
            use: Must Not
          override_flag:
            type: xs:boolean
            use: Must Not
        fields:
          Target_IPv6_Addr:
            type: AddressObj:AddressObjectType
            use: Must Not
          Options:
            type: PacketObj:NeighborOptionsType
            use: Must Not
      NeighborOptionsType:
        use: Must Not
        is_vocab: false
        fields:
          Target_Link_Addr:
            type: PacketObj:NDPLinkAddrType
            use: Must Not
      NeighborSolicitationOptionsType:
        use: Must Not
        is_vocab: false
        fields:
          Src_Link_Addr:
            type: PacketObj:NDPLinkAddrType
            use: Must Not
      NeighborSolicitationType:
        use: Must Not
        is_vocab: false
        fields:
          Target_IPv6_Addr:
            type: AddressObj:AddressObjectType
            use: Must Not
          Options:
            type: PacketObj:NeighborSolicitationOptionsType
            use: Must Not
      NetworkPacketObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Link_Layer:
            type: PacketObj:LinkLayerType
            use: Must Not
          Internet_Layer:
            type: PacketObj:InternetLayerType
            use: Must Not
          Transport_Layer:
            type: PacketObj:TransportLayerType
            use: Must Not
      OptionDataType:
        use: Must Not
        is_vocab: false
        fields:
          Option_Type:
            type: PacketObj:IPv6OptionType
            use: Must Not
          Option_Data_Len:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Pad1:
            type: PacketObj:Pad1Type
            use: Must Not
          PadN:
            type: PacketObj:PadNType
            use: Must Not
      Pad1Type:
        use: Must Not
        is_vocab: false
        fields:
          Octet:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
      PadNType:
        use: Must Not
        is_vocab: false
        fields:
          Octet:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Option_Data_Length:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Option_Data:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
      PhysicalInterfaceType:
        use: Must Not
        is_vocab: false
        fields:
          Ethernet:
            type: PacketObj:EthernetInterfaceType
            use: Must Not
      PrefixType:
        use: Must Not
        is_vocab: false
        fields:
          IPv6_Addr:
            type: AddressObj:AddressObjectType
            use: Must Not
          IP_Addr_Prefix:
            type: AddressObj:AddressObjectType
            use: Must Not
      RedirectOptionsType:
        use: Must Not
        is_vocab: false
        fields:
          Target_Link_Addr:
            type: PacketObj:NDPLinkAddrType
            use: Must Not
          Redirected_Header:
            type: PacketObj:NDPRedirectedHeaderType
            use: Must Not
      RedirectType:
        use: Must Not
        is_vocab: false
        fields:
          Target_IPv6_Addr:
            type: AddressObj:AddressObjectType
            use: Must Not
          Dest_IPv6_Addr:
            type: AddressObj:AddressObjectType
            use: Must Not
          Options:
            type: PacketObj:RedirectOptionsType
            use: Must Not
      RouterAdvertisementOptionsType:
        use: Must Not
        is_vocab: false
        fields:
          Src_Link_Addr:
            type: PacketObj:NDPLinkAddrType
            use: Must Not
          MTU:
            type: PacketObj:NDPMTUType
            use: Must Not
          Prefix_Info:
            type: PacketObj:NDPPrefixInfoType
            use: Must Not
      RouterAdvertisementType:
        use: Must Not
        is_vocab: false
        attributes:
          managed_address_config_flag:
            type: xs:boolean
            use: Must Not
          other_config_flag:
            type: xs:boolean
            use: Must Not
        fields:
          Cur_Hop_Limit:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Router_Lifetime:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Reachable_Time:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Retrans_Timer:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Options:
            type: PacketObj:RouterAdvertisementOptionsType
            use: Must Not
      RouterSolicitationOptionsType:
        use: Must Not
        is_vocab: false
        fields:
          Src_Link_Addr:
            type: PacketObj:NDPLinkAddrType
            use: Must Not
      RouterSolicitationType:
        use: Must Not
        is_vocab: false
        fields:
          Options:
            type: PacketObj:RouterSolicitationOptionsType
            use: Must Not
      RoutingType:
        use: Must Not
        is_vocab: false
        fields:
          Next_Header:
            type: PacketObj:IANAAssignedIPNumbersType
            use: Must Not
          Header_Ext_Len:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Routing_Type:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Segments_Left:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Type_Specific_Data:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      TCPFlagsType:
        use: Must Not
        is_vocab: false
        attributes:
          ns:
            type: xs:boolean
            use: Must Not
          cwr:
            type: xs:boolean
            use: Must Not
          ece:
            type: xs:boolean
            use: Must Not
          urg:
            type: xs:boolean
            use: Must Not
          ack:
            type: xs:boolean
            use: Must Not
          psh:
            type: xs:boolean
            use: Must Not
          rst:
            type: xs:boolean
            use: Must Not
          syn:
            type: xs:boolean
            use: Must Not
          fin:
            type: xs:boolean
            use: Must Not
      TCPHeaderType:
        use: Must Not
        is_vocab: false
        fields:
          Src_Port:
            type: PortObj:PortObjectType
            use: Must Not
          Dest_Port:
            type: PortObj:PortObjectType
            use: Must Not
          Seq_Num:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          ACK_Num:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Data_Offset:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Reserved:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          TCP_Flags:
            type: PacketObj:TCPFlagsType
            use: Must Not
          Window:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Checksum:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Urg_Ptr:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
      TCPType:
        use: Must Not
        is_vocab: false
        fields:
          TCP_Header:
            type: PacketObj:TCPHeaderType
            use: Must Not
          Options:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Data:
            type: cyboxCommon:DataSegmentType
            use: Must Not
      TransportLayerType:
        use: Must Not
        is_vocab: false
        fields:
          TCP:
            type: PacketObj:TCPType
            use: Must Not
          UDP:
            type: PacketObj:UDPType
            use: Must Not
      TypeLengthType:
        use: Must Not
        is_vocab: false
        fields:
          Length:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Internet_Layer_Type:
            type: PacketObj:IANAEtherType
            use: Must Not
      UDPHeaderType:
        use: Must Not
        is_vocab: false
        fields:
          SrcPort:
            type: PortObj:PortObjectType
            use: Must Not
          DestPort:
            type: PortObj:PortObjectType
            use: Must Not
          Length:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Checksum:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
      UDPType:
        use: Must Not
        is_vocab: false
        fields:
          UDP_Header:
            type: PacketObj:UDPHeaderType
            use: Must Not
          Data:
            type: cyboxCommon:DataSegmentType
            use: Must Not
  Network Route Entry Object:
    project: cybox
    constructs:
      NetworkRouteEntryObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
          is_ipv6:
            type: xs:boolean
            use: Must Not
          is_autoconfigure_address:
            type: xs:boolean
            use: Must Not
          is_immortal:
            type: xs:boolean
            use: Must Not
          is_loopback:
            type: xs:boolean
            use: Must Not
          is_publish:
            type: xs:boolean
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Destination_Address:
            type: AddressObj:AddressObjectType
            use: Must Not
          Origin:
            type: AddressObj:AddressObjectType
            use: Must Not
          Netmask:
            type: AddressObj:AddressObjectType
            use: Must Not
          Gateway_Address:
            type: AddressObj:AddressObjectType
            use: Must Not
          Metric:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          Type:
            type: NetworkRouteEntryObj:RouteType
            use: Must Not
          Protocol:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Interface:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Preferred_Lifetime:
            type: cyboxCommon:DurationObjectPropertyType
            use: Must Not
          Valid_Lifetime:
            type: cyboxCommon:DurationObjectPropertyType
            use: Must Not
          Route_Age:
            type: cyboxCommon:DurationObjectPropertyType
            use: Must Not
      RouteType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
  Network Route Object:
    project: cybox
    constructs:
      NetRouteObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
          is_ipv6:
            type: xs:boolean
            use: Must Not
          is_autoconfigure_address:
            type: xs:boolean
            use: Must Not
          is_immortal:
            type: xs:boolean
            use: Must Not
          is_loopback:
            type: xs:boolean
            use: Must Not
          is_publish:
            type: xs:boolean
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Description:
            type: cyboxCommon:StructuredTextType
            use: Must Not
          Network_Route_Entries:
            type: NetworkRouteObj:NetworkRouteEntriesType
            use: Must Not
          Preferred_Lifetime:
            type: cyboxCommon:DurationObjectPropertyType
            use: Must Not
          Valid_Lifetime:
            type: cyboxCommon:DurationObjectPropertyType
            use: Must Not
          Route_Age:
            type: cyboxCommon:DurationObjectPropertyType
            use: Must Not
      NetworkRouteEntriesType:
        use: Must Not
        is_vocab: false
        fields:
          Network_Route_Entry:
            type: NetworkRouteEntryObj:NetworkRouteEntryObjectType
            use: Must Not
  Network Socket Object:
    project: cybox
    constructs:
      AddressFamilyType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      DomainFamilyType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      NetworkSocketObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
          is_blocking:
            type: xs:boolean
            use: Must Not
          is_listening:
            type: xs:boolean
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Address_Family:
            type: NetworkSocketObj:AddressFamilyType
            use: Must Not
          Domain:
            type: NetworkSocketObj:DomainFamilyType
            use: Must Not
          Local_Address:
            type: SocketAddressObj:SocketAddressObjectType
            use: Must Not
          Options:
            type: NetworkSocketObj:SocketOptionsType
            use: Must Not
          Protocol:
            type: NetworkSocketObj:ProtocolType
            use: Must Not
          Remote_Address:
            type: SocketAddressObj:SocketAddressObjectType
            use: Must Not
          Type:
            type: NetworkSocketObj:SocketType
            use: Must Not
          Socket_Descriptor:
            type: cyboxCommon:NonNegativeIntegerObjectPropertyType
            use: Must Not
      ProtocolType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      SocketOptionsType:
        use: Must Not
        is_vocab: false
        fields:
          IP_MULTICAST_IF:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          IP_MULTICAST_IF2:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          IP_MULTICAST_LOOP:
            type: xs:boolean
            use: Must Not
          IP_TOS:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          SO_BROADCAST:
            type: xs:boolean
            use: Must Not
          SO_CONDITIONAL_ACCEPT:
            type: xs:boolean
            use: Must Not
          SO_KEEPALIVE:
            type: xs:boolean
            use: Must Not
          SO_DONTROUTE:
            type: xs:boolean
            use: Must Not
          SO_LINGER:
            type: cyboxCommon:UnsignedIntegerObjectPropertyType
            use: Must Not
          SO_DONTLINGER:
            type: xs:boolean
            use: Must Not
          SO_OOBINLINE:
            type: xs:boolean
            use: Must Not
          SO_RCVBUF:
            type: cyboxCommon:UnsignedIntegerObjectPropertyType
            use: Must Not
          SO_GROUP_PRIORITY:
            type: cyboxCommon:UnsignedIntegerObjectPropertyType
            use: Must Not
          SO_REUSEADDR:
            type: xs:boolean
            use: Must Not
          SO_DEBUG:
            type: xs:boolean
            use: Must Not
          SO_RCVTIMEO:
            type: cyboxCommon:UnsignedIntegerObjectPropertyType
            use: Must Not
          SO_SNDBUF:
            type: cyboxCommon:UnsignedIntegerObjectPropertyType
            use: Must Not
          SO_SNDTIMEO:
            type: cyboxCommon:UnsignedIntegerObjectPropertyType
            use: Must Not
          SO_UPDATE_ACCEPT_CONTEXT:
            type: cyboxCommon:UnsignedIntegerObjectPropertyType
            use: Must Not
          SO_TIMEOUT:
            type: cyboxCommon:UnsignedIntegerObjectPropertyType
            use: Must Not
          TCP_NODELAY:
            type: xs:boolean
            use: Must Not
      SocketType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
  Network Subnet Object:
    project: cybox
    constructs:
      NetworkSubnetObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Description:
            type: cyboxCommon:StructuredTextType
            use: Must Not
          Number_Of_IP_Addresses:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Routes:
            type: NetworkSubnetObj:RoutesType
            use: Must Not
      RoutesType:
        use: Must Not
        is_vocab: false
        fields:
          Route:
            type: NetworkRouteEntryObj:NetworkRouteEntryObjectType
            use: Must Not
  PDF File Object:
    project: cybox
    constructs:
      PDFDictionaryType:
        use: Must Not
        is_vocab: false
        fields:
          Object_Reference:
            type: PDFFileObj:PDFIndirectObjectIDType
            use: Must Not
          Raw_Contents:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      PDFDocumentInformationDictionaryType:
        use: Must Not
        is_vocab: false
        fields:
          Title:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Author:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Subject:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Keywords:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Creator:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Producer:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          CreationDate:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          ModDate:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Trapped:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      PDFFileIDType:
        use: Must Not
        is_vocab: false
        fields:
          ID_String:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      PDFFileMetadataType:
        use: Must Not
        is_vocab: false
        attributes:
          encrypted:
            type: xs:boolean
            use: Must Not
          optimized:
            type: xs:boolean
            use: Must Not
        fields:
          Document_Information_Dictionary:
            type: PDFFileObj:PDFDocumentInformationDictionaryType
            use: Must Not
          Number_Of_Indirect_Objects:
            type: cyboxCommon:PositiveIntegerObjectPropertyType
            use: Must Not
          Number_Of_Trailers:
            type: cyboxCommon:PositiveIntegerObjectPropertyType
            use: Must Not
          Number_Of_Cross_Reference_Tables:
            type: cyboxCommon:PositiveIntegerObjectPropertyType
            use: Must Not
          Keyword_Counts:
            type: PDFFileObj:PDFKeywordCountsType
            use: Must Not
      PDFFileObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
          is_packed:
            type: xs:boolean
            use: Must Not
          is_masqueraded:
            type: xs:boolean
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          File_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          File_Path:
            type: FileObj:FilePathType
            use: Must Not
          Device_Path:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Full_Path:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          File_Extension:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Size_In_Bytes:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          Magic_Number:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          File_Format:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Hashes:
            type: cyboxCommon:HashListType
            use: Must Not
          Digital_Signatures:
            type: cyboxCommon:DigitalSignaturesType
            use: Must Not
          Modified_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Accessed_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Created_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          File_Attributes_List:
            type: FileObj:FileAttributeType
            use: Must Not
          Permissions:
            type: FileObj:FilePermissionsType
            use: Must Not
          User_Owner:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Packer_List:
            type: FileObj:PackerListType
            use: Must Not
          Peak_Entropy:
            type: cyboxCommon:DoubleObjectPropertyType
            use: Must Not
          Sym_Links:
            type: FileObj:SymLinksListType
            use: Must Not
          Byte_Runs:
            type: cyboxCommon:ByteRunsType
            use: Must Not
          Extracted_Features:
            type: cyboxCommon:ExtractedFeaturesType
            use: Must Not
          Encryption_Algorithm:
            type: cyboxCommon:CipherType
            use: Must Not
          Decryption_Key:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Compression_Method:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Compression_Version:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Compression_Comment:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Metadata:
            type: PDFFileObj:PDFFileMetadataType
            use: Must Not
          Version:
            type: cyboxCommon:DoubleObjectPropertyType
            use: Must Not
          Indirect_Objects:
            type: PDFFileObj:PDFIndirectObjectListType
            use: Must Not
          Cross_Reference_Tables:
            type: PDFFileObj:PDFXRefTableListType
            use: Must Not
          Trailers:
            type: PDFFileObj:PDFTrailerListType
            use: Must Not
      PDFIndirectObjectContentsType:
        use: Must Not
        is_vocab: false
        fields:
          Non_Stream_Contents:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Stream_Contents:
            type: PDFFileObj:PDFStreamType
            use: Must Not
      PDFIndirectObjectIDType:
        use: Must Not
        is_vocab: false
        fields:
          Object_Number:
            type: cyboxCommon:PositiveIntegerObjectPropertyType
            use: Must Not
          Generation_Number:
            type: cyboxCommon:NonNegativeIntegerObjectPropertyType
            use: Must Not
      PDFIndirectObjectListType:
        use: Must Not
        is_vocab: false
        fields:
          Indirect_Object:
            type: PDFFileObj:PDFIndirectObjectType
            use: Must Not
      PDFIndirectObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          type:
            type: PDFFileObj:PDFObjectTypeEnum
            use: Must Not
        fields:
          ID:
            type: PDFFileObj:PDFIndirectObjectIDType
            use: Must Not
          Contents:
            type: PDFFileObj:PDFIndirectObjectContentsType
            use: Must Not
          Offset:
            type: cyboxCommon:PositiveIntegerObjectPropertyType
            use: Must Not
          Hashes:
            type: cyboxCommon:HashListType
            use: Must Not
      PDFKeywordCountsType:
        use: Must Not
        is_vocab: false
        fields:
          Page_Count:
            type: PDFFileObj:PDFKeywordCountType
            use: Must Not
          Encrypt_Count:
            type: PDFFileObj:PDFKeywordCountType
            use: Must Not
          ObjStm_Count:
            type: PDFFileObj:PDFKeywordCountType
            use: Must Not
          JS_Count:
            type: PDFFileObj:PDFKeywordCountType
            use: Must Not
          JavaScript_Count:
            type: PDFFileObj:PDFKeywordCountType
            use: Must Not
          AA_Count:
            type: PDFFileObj:PDFKeywordCountType
            use: Must Not
          OpenAction_Count:
            type: PDFFileObj:PDFKeywordCountType
            use: Must Not
          ASCIIHexDecode_Count:
            type: PDFFileObj:PDFKeywordCountType
            use: Must Not
          ASCII85Decode_Count:
            type: PDFFileObj:PDFKeywordCountType
            use: Must Not
          LZWDecode_Count:
            type: PDFFileObj:PDFKeywordCountType
            use: Must Not
          FlateDecode_Count:
            type: PDFFileObj:PDFKeywordCountType
            use: Must Not
          RunLengthDecode_Count:
            type: PDFFileObj:PDFKeywordCountType
            use: Must Not
          JBIG2Decode_Count:
            type: PDFFileObj:PDFKeywordCountType
            use: Must Not
          DCTDecode_Count:
            type: PDFFileObj:PDFKeywordCountType
            use: Must Not
          RichMedia_Count:
            type: PDFFileObj:PDFKeywordCountType
            use: Must Not
          CCITTFaxDecode_Count:
            type: PDFFileObj:PDFKeywordCountType
            use: Must Not
          Launch_Count:
            type: PDFFileObj:PDFKeywordCountType
            use: Must Not
          XFA_Count:
            type: PDFFileObj:PDFKeywordCountType
            use: Must Not
      PDFKeywordCountType:
        use: Must Not
        is_vocab: false
        fields:
          Non_Obfuscated_Count:
            type: cyboxCommon:NonNegativeIntegerObjectPropertyType
            use: Must Not
          Obfuscated_Count:
            type: cyboxCommon:NonNegativeIntegerObjectPropertyType
            use: Must Not
      PDFStreamType:
        use: Must Not
        is_vocab: false
        fields:
          Raw_Stream:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Raw_Stream_Hashes:
            type: cyboxCommon:HashListType
            use: Must Not
          Decoded_Stream:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Decoded_Stream_Hashes:
            type: cyboxCommon:HashListType
            use: Must Not
      PDFTrailerListType:
        use: Must Not
        is_vocab: false
        fields:
          Trailer:
            type: PDFFileObj:PDFTrailerType
            use: Must Not
      PDFTrailerType:
        use: Must Not
        is_vocab: false
        fields:
          Size:
            type: cyboxCommon:PositiveIntegerObjectPropertyType
            use: Must Not
          Prev:
            type: cyboxCommon:PositiveIntegerObjectPropertyType
            use: Must Not
          Root:
            type: PDFFileObj:PDFIndirectObjectIDType
            use: Must Not
          Encrypt:
            type: PDFFileObj:PDFDictionaryType
            use: Must Not
          Info:
            type: PDFFileObj:PDFIndirectObjectIDType
            use: Must Not
          ID:
            type: PDFFileObj:PDFFileIDType
            use: Must Not
          Last_Cross_Reference_Offset:
            type: cyboxCommon:PositiveIntegerObjectPropertyType
            use: Must Not
          Offset:
            type: cyboxCommon:PositiveIntegerObjectPropertyType
            use: Must Not
          Hashes:
            type: cyboxCommon:HashListType
            use: Must Not
      PDFXrefEntryListType:
        use: Must Not
        is_vocab: false
        fields:
          Cross_Reference_Entry:
            type: PDFFileObj:PDFXrefEntryType
            use: Must Not
      PDFXrefEntryType:
        use: Must Not
        is_vocab: false
        attributes:
          type:
            type: PDFFileObj:PDFXrefEntryTypeEnum
            use: Must Not
        fields:
          Byte_Offset:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Object_Number:
            type: cyboxCommon:NonNegativeIntegerObjectPropertyType
            use: Must Not
          Generation_Number:
            type: cyboxCommon:NonNegativeIntegerObjectPropertyType
            use: Must Not
      PDFXRefTableListType:
        use: Must Not
        is_vocab: false
        fields:
          Cross_Reference_Table:
            type: PDFFileObj:PDFXRefTableType
            use: Must Not
      PDFXrefTableSubsectionListType:
        use: Must Not
        is_vocab: false
        fields:
          Subsection:
            type: PDFFileObj:PDFXrefTableSubsectionType
            use: Must Not
      PDFXrefTableSubsectionType:
        use: Must Not
        is_vocab: false
        fields:
          First_Object_Number:
            type: cyboxCommon:NonNegativeIntegerObjectPropertyType
            use: Must Not
          Number_Of_Objects:
            type: cyboxCommon:NonNegativeIntegerObjectPropertyType
            use: Must Not
          Cross_Reference_Entries:
            type: PDFFileObj:PDFXrefEntryListType
            use: Must Not
      PDFXRefTableType:
        use: Must Not
        is_vocab: false
        fields:
          Subsections:
            type: PDFFileObj:PDFXrefTableSubsectionListType
            use: Must Not
          Offset:
            type: cyboxCommon:PositiveIntegerObjectPropertyType
            use: Must Not
          Hashes:
            type: cyboxCommon:HashListType
            use: Must Not
  Pipe Object:
    project: cybox
    constructs:
      PipeObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
          named:
            type: xs:boolean
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
  Process Object:
    project: cybox
    constructs:
      ArgumentListType:
        use: Must Not
        is_vocab: false
        fields:
          Argument:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      ChildPIDListType:
        use: Must Not
        is_vocab: false
        fields:
          Child_PID:
            type: cyboxCommon:UnsignedIntegerObjectPropertyType
            use: Must Not
      ImageInfoType:
        use: Must Not
        is_vocab: false
        fields:
          File_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Command_Line:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Current_Directory:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Path:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      NetworkConnectionListType:
        use: Must Not
        is_vocab: false
        fields:
          Network_Connection:
            type: NetworkConnectionObj:NetworkConnectionObjectType
            use: Must Not
      PortListType:
        use: Must Not
        is_vocab: false
        fields:
          Port:
            type: PortObj:PortObjectType
            use: Must Not
      ProcessObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
          is_hidden:
            type: xs:boolean
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          PID:
            type: cyboxCommon:UnsignedIntegerObjectPropertyType
            use: Must Not
          Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Creation_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Parent_PID:
            type: cyboxCommon:UnsignedIntegerObjectPropertyType
            use: Must Not
          Child_PID_List:
            type: ProcessObj:ChildPIDListType
            use: Must Not
          Image_Info:
            type: ProcessObj:ImageInfoType
            use: Must Not
          Argument_List:
            type: ProcessObj:ArgumentListType
            use: Must Not
          Environment_Variable_List:
            type: cyboxCommon:EnvironmentVariableListType
            use: Must Not
          Kernel_Time:
            type: cyboxCommon:DurationObjectPropertyType
            use: Must Not
          Port_List:
            type: ProcessObj:PortListType
            use: Must Not
          Network_Connection_List:
            type: ProcessObj:NetworkConnectionListType
            use: Must Not
          Start_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Status:
            type: ProcessObj:ProcessStatusType
            use: Must Not
          Username:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          User_Time:
            type: cyboxCommon:DurationObjectPropertyType
            use: Must Not
          Extracted_Features:
            type: cyboxCommon:ExtractedFeaturesType
            use: Must Not
      ProcessStatusType:
        use: Must Not
        is_vocab: false
  Product Object:
    project: cybox
    constructs:
      ProductObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Edition:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Language:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Product:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Update:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Vendor:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Version:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Device_Details:
            type: cyboxCommon:ObjectPropertiesType
            use: Must Not
  Semaphore Object:
    project: cybox
    constructs:
      SemaphoreObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
          named:
            type: xs:boolean
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Current_Count:
            type: cyboxCommon:UnsignedIntegerObjectPropertyType
            use: Must Not
          Maximum_Count:
            type: cyboxCommon:PositiveIntegerObjectPropertyType
            use: Must Not
          Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
  SMS Message Object:
    project: cybox
    constructs:
      SMSMessageObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
          is_premium:
            type: xs:boolean
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Sender_Phone_Number:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Recipient_Phone_Number:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Sent_DateTime:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Body:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Length:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Size:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Encoding:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Bits_Per_Character:
            type: cyboxCommon:PositiveIntegerObjectPropertyType
            use: Must Not
          User_Data_Header:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
  Unix File Object:
    project: cybox
    constructs:
      UnixFileObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
          is_packed:
            type: xs:boolean
            use: Must Not
          is_masqueraded:
            type: xs:boolean
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          File_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          File_Path:
            type: FileObj:FilePathType
            use: Must Not
          Device_Path:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Full_Path:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          File_Extension:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Size_In_Bytes:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          Magic_Number:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          File_Format:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Hashes:
            type: cyboxCommon:HashListType
            use: Must Not
          Digital_Signatures:
            type: cyboxCommon:DigitalSignaturesType
            use: Must Not
          Modified_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Accessed_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Created_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          File_Attributes_List:
            type: FileObj:FileAttributeType
            use: Must Not
          Permissions:
            type: FileObj:FilePermissionsType
            use: Must Not
          User_Owner:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Packer_List:
            type: FileObj:PackerListType
            use: Must Not
          Peak_Entropy:
            type: cyboxCommon:DoubleObjectPropertyType
            use: Must Not
          Sym_Links:
            type: FileObj:SymLinksListType
            use: Must Not
          Byte_Runs:
            type: cyboxCommon:ByteRunsType
            use: Must Not
          Extracted_Features:
            type: cyboxCommon:ExtractedFeaturesType
            use: Must Not
          Encryption_Algorithm:
            type: cyboxCommon:CipherType
            use: Must Not
          Decryption_Key:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Compression_Method:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Compression_Version:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Compression_Comment:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Group_Owner:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          INode:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          Type:
            type: UnixFileObj:UnixFileType
            use: Must Not
      UnixFilePermissionsType:
        use: Must Not
        is_vocab: false
        attributes:
          suid:
            type: xs:boolean
            use: Must Not
          sgid:
            type: xs:boolean
            use: Must Not
          uread:
            type: xs:boolean
            use: Must Not
          uwrite:
            type: xs:boolean
            use: Must Not
          uexec:
            type: xs:boolean
            use: Must Not
          gread:
            type: xs:boolean
            use: Must Not
          gwrite:
            type: xs:boolean
            use: Must Not
          gexec:
            type: xs:boolean
            use: Must Not
          oread:
            type: xs:boolean
            use: Must Not
          owrite:
            type: xs:boolean
            use: Must Not
          oexec:
            type: xs:boolean
            use: Must Not
      UnixFileType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
  Unix Network Route Entry Object:
    project: cybox
    constructs:
      UnixNetworkRouteEntryObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
          is_ipv6:
            type: xs:boolean
            use: Must Not
          is_autoconfigure_address:
            type: xs:boolean
            use: Must Not
          is_immortal:
            type: xs:boolean
            use: Must Not
          is_loopback:
            type: xs:boolean
            use: Must Not
          is_publish:
            type: xs:boolean
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Destination_Address:
            type: AddressObj:AddressObjectType
            use: Must Not
          Origin:
            type: AddressObj:AddressObjectType
            use: Must Not
          Netmask:
            type: AddressObj:AddressObjectType
            use: Must Not
          Gateway_Address:
            type: AddressObj:AddressObjectType
            use: Must Not
          Metric:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          Type:
            type: NetworkRouteEntryObj:RouteType
            use: Must Not
          Protocol:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Interface:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Preferred_Lifetime:
            type: cyboxCommon:DurationObjectPropertyType
            use: Must Not
          Valid_Lifetime:
            type: cyboxCommon:DurationObjectPropertyType
            use: Must Not
          Route_Age:
            type: cyboxCommon:DurationObjectPropertyType
            use: Must Not
          Flags:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          MSS:
            type: cyboxCommon:UnsignedIntegerObjectPropertyType
            use: Must Not
          Ref:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          Use:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          Window:
            type: cyboxCommon:UnsignedIntegerObjectPropertyType
            use: Must Not
  Unix Pipe Object:
    project: cybox
    constructs:
      UnixPipeObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
          named:
            type: xs:boolean
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Permission_Mode:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
  Unix Process Object:
    project: cybox
    constructs:
      FileDescriptorListType:
        use: Must Not
        is_vocab: false
        fields:
          File_Descriptor:
            type: cyboxCommon:UnsignedIntegerObjectPropertyType
            use: Must Not
      UnixProcessObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
          is_hidden:
            type: xs:boolean
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          PID:
            type: cyboxCommon:UnsignedIntegerObjectPropertyType
            use: Must Not
          Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Creation_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Parent_PID:
            type: cyboxCommon:UnsignedIntegerObjectPropertyType
            use: Must Not
          Child_PID_List:
            type: ProcessObj:ChildPIDListType
            use: Must Not
          Image_Info:
            type: ProcessObj:ImageInfoType
            use: Must Not
          Argument_List:
            type: ProcessObj:ArgumentListType
            use: Must Not
          Environment_Variable_List:
            type: cyboxCommon:EnvironmentVariableListType
            use: Must Not
          Kernel_Time:
            type: cyboxCommon:DurationObjectPropertyType
            use: Must Not
          Port_List:
            type: ProcessObj:PortListType
            use: Must Not
          Network_Connection_List:
            type: ProcessObj:NetworkConnectionListType
            use: Must Not
          Start_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Status:
            type: ProcessObj:ProcessStatusType
            use: Must Not
          Username:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          User_Time:
            type: cyboxCommon:DurationObjectPropertyType
            use: Must Not
          Extracted_Features:
            type: cyboxCommon:ExtractedFeaturesType
            use: Must Not
          Open_File_Descriptor_List:
            type: UnixProcessObj:FileDescriptorListType
            use: Must Not
          Priority:
            type: cyboxCommon:NonNegativeIntegerObjectPropertyType
            use: Must Not
          RUID:
            type: cyboxCommon:NonNegativeIntegerObjectPropertyType
            use: Must Not
          Session_ID:
            type: cyboxCommon:NonNegativeIntegerObjectPropertyType
            use: Must Not
      UnixProcessStateType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      UnixProcessStatusType:
        use: Must Not
        is_vocab: false
        fields:
          Current_Status:
            type: UnixProcessObj:UnixProcessStateType
            use: Must Not
          Timestamp:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
  Unix User Account Object:
    project: cybox
    constructs:
      UnixGroupType:
        use: Must Not
        is_vocab: false
        fields:
          Group_ID:
            type: cyboxCommon:NonNegativeIntegerObjectPropertyType
            use: Must Not
      UnixPrivilegeType:
        use: Must Not
        is_vocab: false
        fields:
          Permissions_Mask:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      UnixUserAccountObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
          disabled:
            type: xs:boolean
            use: Must Not
          locked_out:
            type: xs:boolean
            use: Must Not
          password_required:
            type: xs:boolean
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Description:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Domain:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Authentication:
            type: AccountObj:AuthenticationType
            use: Must Not
          Creation_Date:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Modified_Date:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Last_Accessed_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Full_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Group_List:
            type: UserAccountObj:GroupListType
            use: Must Not
          Home_Directory:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Last_Login:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Privilege_List:
            type: UserAccountObj:PrivilegeListType
            use: Must Not
          Script_Path:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Username:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          User_Password_Age:
            type: cyboxCommon:DurationObjectPropertyType
            use: Must Not
          Group_ID:
            type: cyboxCommon:UnsignedIntegerObjectPropertyType
            use: Must Not
          User_ID:
            type: cyboxCommon:UnsignedIntegerObjectPropertyType
            use: Must Not
          Login_Shell:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
  User Account Object:
    project: cybox
    constructs:
      GroupListType:
        use: Must Not
        is_vocab: false
        fields:
          Group:
            type: UserAccountObj:GroupType
            use: Must Not
      GroupType:
        use: Must Not
        is_vocab: false
      PrivilegeListType:
        use: Must Not
        is_vocab: false
        fields:
          Privilege:
            type: UserAccountObj:PrivilegeType
            use: Must Not
      PrivilegeType:
        use: Must Not
        is_vocab: false
      UserAccountObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
          disabled:
            type: xs:boolean
            use: Must Not
          locked_out:
            type: xs:boolean
            use: Must Not
          password_required:
            type: xs:boolean
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Description:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Domain:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Authentication:
            type: AccountObj:AuthenticationType
            use: Must Not
          Creation_Date:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Modified_Date:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Last_Accessed_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Full_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Group_List:
            type: UserAccountObj:GroupListType
            use: Must Not
          Home_Directory:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Last_Login:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Privilege_List:
            type: UserAccountObj:PrivilegeListType
            use: Must Not
          Script_Path:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Username:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          User_Password_Age:
            type: cyboxCommon:DurationObjectPropertyType
            use: Must Not
  Unix Volume Object:
    project: cybox
    constructs:
      UnixVolumeObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
          is_mounted:
            type: xs:boolean
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Device_Path:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          File_System_Type:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Total_Allocation_Units:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          Sectors_Per_Allocation_Unit:
            type: cyboxCommon:UnsignedIntegerObjectPropertyType
            use: Must Not
          Bytes_Per_Sector:
            type: cyboxCommon:PositiveIntegerObjectPropertyType
            use: Must Not
          Actual_Available_Allocation_Units:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          Creation_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          File_System_Flag_List:
            type: VolumeObj:FileSystemFlagListType
            use: Must Not
          Serial_Number:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Mount_Point:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Options:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
  Volume Object:
    project: cybox
    constructs:
      FileSystemFlagListType:
        use: Must Not
        is_vocab: false
        fields:
          File_System_Flag:
            type: VolumeObj:VolumeFileSystemFlagType
            use: Must Not
      VolumeFileSystemFlagType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      VolumeObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
          is_mounted:
            type: xs:boolean
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Device_Path:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          File_System_Type:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Total_Allocation_Units:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          Sectors_Per_Allocation_Unit:
            type: cyboxCommon:UnsignedIntegerObjectPropertyType
            use: Must Not
          Bytes_Per_Sector:
            type: cyboxCommon:PositiveIntegerObjectPropertyType
            use: Must Not
          Actual_Available_Allocation_Units:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          Creation_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          File_System_Flag_List:
            type: VolumeObj:FileSystemFlagListType
            use: Must Not
          Serial_Number:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      VolumeOptionsType:
        use: Must Not
        is_vocab: false
  URL History Object:
    project: cybox
    constructs:
      URLHistoryEntryType:
        use: Must Not
        is_vocab: false
        fields:
          URL:
            type: URIObj:URIObjectType
            use: Must Not
          Hostname:
            type: HostnameObj:HostnameObjectType
            use: Must Not
          Referrer_URL:
            type: URIObj:URIObjectType
            use: Must Not
          Page_Title:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          User_Profile_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Visit_Count:
            type: cyboxCommon:NonNegativeIntegerObjectPropertyType
            use: Must Not
          Manually_Entered_Count:
            type: cyboxCommon:NonNegativeIntegerObjectPropertyType
            use: Must Not
          Modification_DateTime:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Expiration_DateTime:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          First_Visit_DateTime:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Last_Visit_DateTime:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
      URLHistoryObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Browser_Information:
            type: cyboxCommon:ToolInformationType
            use: Must Not
          URL_History_Entry:
            type: URLHistoryObj:URLHistoryEntryType
            use: Must Not
  User Session Object:
    project: cybox
    constructs:
      UserSessionObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Effective_Group:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Effective_Group_ID:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Effective_User:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Effective_User_ID:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Login_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Logout_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
  Whois Object:
    project: cybox
    constructs:
      WhoisContactsType:
        use: Must Not
        is_vocab: false
        fields:
          Contact:
            type: WhoisObj:WhoisContactType
            use: Must Not
      WhoisContactType:
        use: Must Not
        is_vocab: false
        attributes:
          contact_type:
            type: "@contact_typeInlineType"
            use: Must Not
        fields:
          Contact_ID:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Email_Address:
            type: AddressObj:AddressObjectType
            use: Must Not
          Phone_Number:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Fax_Number:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Address:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Organization:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      WhoisNameserversType:
        use: Must Not
        is_vocab: false
        fields:
          Nameserver:
            type: URIObj:URIObjectType
            use: Must Not
      WhoisObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Lookup_Date:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Domain_Name:
            type: URIObj:URIObjectType
            use: Must Not
          Domain_ID:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Server_Name:
            type: URIObj:URIObjectType
            use: Must Not
          IP_Address:
            type: AddressObj:AddressObjectType
            use: Must Not
          DNSSEC:
            type: WhoisObj:WhoisDNSSECTypeEnum
            use: Must Not
          Nameservers:
            type: WhoisObj:WhoisNameserversType
            use: Must Not
          Status:
            type: WhoisObj:WhoisStatusesType
            use: Must Not
          Updated_Date:
            type: cyboxCommon:DateObjectPropertyType
            use: Must Not
          Creation_Date:
            type: cyboxCommon:DateObjectPropertyType
            use: Must Not
          Expiration_Date:
            type: cyboxCommon:DateObjectPropertyType
            use: Must Not
          Regional_Internet_Registry:
            type: cyboxCommon:RegionalRegistryType
            use: Must Not
          Sponsoring_Registrar:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Registrar_Info:
            type: WhoisObj:WhoisRegistrarInfoType
            use: Must Not
          Registrants:
            type: WhoisObj:WhoisRegistrantsType
            use: Must Not
          Contact_Info:
            type: WhoisObj:WhoisContactType
            use: Must Not
          Remarks:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      WhoisRegistrantInfoType:
        use: Must Not
        is_vocab: false
        attributes:
          contact_type:
            type: "@contact_typeInlineType"
            use: Must Not
        fields:
          Contact_ID:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Email_Address:
            type: AddressObj:AddressObjectType
            use: Must Not
          Phone_Number:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Fax_Number:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Address:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Organization:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Registrant_ID:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      WhoisRegistrantsType:
        use: Must Not
        is_vocab: false
        fields:
          Registrant:
            type: WhoisObj:WhoisRegistrantInfoType
            use: Must Not
      WhoisRegistrarInfoType:
        use: Must Not
        is_vocab: false
        fields:
          Registrar_ID:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Registrar_GUID:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Address:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Email_Address:
            type: AddressObj:AddressObjectType
            use: Must Not
          Phone_Number:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Whois_Server:
            type: URIObj:URIObjectType
            use: Must Not
          Referral_URL:
            type: URIObj:URIObjectType
            use: Must Not
          Contacts:
            type: WhoisObj:WhoisContactsType
            use: Must Not
      WhoisStatusesType:
        use: Must Not
        is_vocab: false
        fields:
          Status:
            type: WhoisObj:WhoisStatusType
            use: Must Not
      WhoisStatusType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
  Win Computer Account Object:
    project: cybox
    constructs:
      FullyQualifiedNameType:
        use: Must Not
        is_vocab: false
        fields:
          NetBEUI_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Full_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      KerberosDelegationType:
        use: Must Not
        is_vocab: false
        fields:
          Bitmask:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Service:
            type: WinComputerAccountObj:KerberosServiceType
            use: Must Not
      KerberosServiceType:
        use: Must Not
        is_vocab: false
        fields:
          Computer:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Port:
            type: PortObj:PortObjectType
            use: Must Not
          User:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      KerberosType:
        use: Must Not
        is_vocab: false
        fields:
          Delegation:
            type: WinComputerAccountObj:KerberosDelegationType
            use: Must Not
          Ticket:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
      WindowsComputerAccountObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
          disabled:
            type: xs:boolean
            use: Must Not
          locked_out:
            type: xs:boolean
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Description:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Domain:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Authentication:
            type: AccountObj:AuthenticationType
            use: Must Not
          Creation_Date:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Modified_Date:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Last_Accessed_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Fully_Qualified_Name:
            type: WinComputerAccountObj:FullyQualifiedNameType
            use: Must Not
          Kerberos:
            type: WinComputerAccountObj:KerberosType
            use: Must Not
          Security_ID:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Security_Type:
            type: cyboxCommon:SIDType
            use: Must Not
          Type:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
  Win Critical Section Object:
    project: cybox
    constructs:
      WindowsCriticalSectionObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Address:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Spin_Count:
            type: cyboxCommon:NonNegativeIntegerObjectPropertyType
            use: Must Not
  Win Driver Object:
    project: cybox
    constructs:
      DeviceObjectListType:
        use: Must Not
        is_vocab: false
        fields:
          Device_Object_Struct:
            type: WinDriverObj:DeviceObjectStructType
            use: Must Not
      DeviceObjectStructType:
        use: Must Not
        is_vocab: false
        fields:
          Attached_Device_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Attached_Device_Object:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          Attached_To_Device_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Attached_To_Device_Object:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          Attached_To_Driver_Object:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          Attached_To_Driver_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Device_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Device_Object:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
      WindowsDriverObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
          is_packed:
            type: xs:boolean
            use: Must Not
          is_masqueraded:
            type: xs:boolean
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          File_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          File_Path:
            type: FileObj:FilePathType
            use: Must Not
          Device_Path:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Full_Path:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          File_Extension:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Size_In_Bytes:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          Magic_Number:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          File_Format:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Hashes:
            type: cyboxCommon:HashListType
            use: Must Not
          Digital_Signatures:
            type: cyboxCommon:DigitalSignaturesType
            use: Must Not
          Modified_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Accessed_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Created_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          File_Attributes_List:
            type: FileObj:FileAttributeType
            use: Must Not
          Permissions:
            type: FileObj:FilePermissionsType
            use: Must Not
          User_Owner:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Packer_List:
            type: FileObj:PackerListType
            use: Must Not
          Peak_Entropy:
            type: cyboxCommon:DoubleObjectPropertyType
            use: Must Not
          Sym_Links:
            type: FileObj:SymLinksListType
            use: Must Not
          Byte_Runs:
            type: cyboxCommon:ByteRunsType
            use: Must Not
          Extracted_Features:
            type: cyboxCommon:ExtractedFeaturesType
            use: Must Not
          Encryption_Algorithm:
            type: cyboxCommon:CipherType
            use: Must Not
          Decryption_Key:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Compression_Method:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Compression_Version:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Compression_Comment:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Filename_Accessed_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Filename_Created_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Filename_Modified_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Drive:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Security_ID:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Security_Type:
            type: cyboxCommon:SIDType
            use: Must Not
          Stream_List:
            type: WinFileObj:StreamListType
            use: Must Not
          Build_Information:
            type: WinExecutableFileObj:PEBuildInformationType
            use: Must Not
          Digital_Signature:
            type: cyboxCommon:DigitalSignatureInfoType
            use: Must Not
          Exports:
            type: WinExecutableFileObj:PEExportsType
            use: Must Not
          Extraneous_Bytes:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Headers:
            type: WinExecutableFileObj:PEHeadersType
            use: Must Not
          Imports:
            type: WinExecutableFileObj:PEImportListType
            use: Must Not
          PE_Checksum:
            type: WinExecutableFileObj:PEChecksumType
            use: Must Not
          Resources:
            type: WinExecutableFileObj:PEResourceListType
            use: Must Not
          Sections:
            type: WinExecutableFileObj:PESectionListType
            use: Must Not
          Type:
            type: WinExecutableFileObj:PEType
            use: Must Not
          Device_Object_List:
            type: WinDriverObj:DeviceObjectListType
            use: Must Not
          Driver_Init:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          Driver_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Driver_Object_Address:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Driver_Start_IO:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Driver_Unload:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Image_Base:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Image_Size:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          IRP_MJ_CLEANUP:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          IRP_MJ_CLOSE:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          IRP_MJ_CREATE:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          IRP_MJ_CREATE_MAILSLOT:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          IRP_MJ_CREATE_NAMED_PIPE:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          IRP_MJ_DEVICE_CHANGE:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          IRP_MJ_DEVICE_CONTROL:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          IRP_MJ_DIRECTORY_CONTROL:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          IRP_MJ_FILE_SYSTEM_CONTROL:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          IRP_MJ_FLUSH_BUFFERS:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          IRP_MJ_INTERNAL_DEVICE_CONTROL:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          IRP_MJ_LOCK_CONTROL:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          IRP_MJ_PNP:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          IRP_MJ_POWER:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          IRP_MJ_READ:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          IRP_MJ_QUERY_EA:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          IRP_MJ_QUERY_INFORMATION:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          IRP_MJ_QUERY_SECURITY:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          IRP_MJ_QUERY_QUOTA:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          IRP_MJ_QUERY_VOLUME_INFORMATION:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          IRP_MJ_SET_EA:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          IRP_MJ_SET_INFORMATION:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          IRP_MJ_SET_SECURITY:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          IRP_MJ_SET_QUOTA:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          IRP_MJ_SET_VOLUME_INFORMATION:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          IRP_MJ_SHUTDOWN:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          IRP_MJ_SYSTEM_CONTROL:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          IRP_MJ_WRITE:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
  Win Executable File Object:
    project: cybox
    constructs:
      DataDirectoryType:
        use: Must Not
        is_vocab: false
        fields:
          Export_Table:
            type: WinExecutableFileObj:PEDataDirectoryStructType
            use: Must Not
          Import_Table:
            type: WinExecutableFileObj:PEDataDirectoryStructType
            use: Must Not
          Resource_Table:
            type: WinExecutableFileObj:PEDataDirectoryStructType
            use: Must Not
          Exception_Table:
            type: WinExecutableFileObj:PEDataDirectoryStructType
            use: Must Not
          Certificate_Table:
            type: WinExecutableFileObj:PEDataDirectoryStructType
            use: Must Not
          Base_Relocation_Table:
            type: WinExecutableFileObj:PEDataDirectoryStructType
            use: Must Not
          Debug:
            type: WinExecutableFileObj:PEDataDirectoryStructType
            use: Must Not
          Architecture:
            type: WinExecutableFileObj:PEDataDirectoryStructType
            use: Must Not
          Global_Ptr:
            type: WinExecutableFileObj:PEDataDirectoryStructType
            use: Must Not
          TLS_Table:
            type: WinExecutableFileObj:PEDataDirectoryStructType
            use: Must Not
          Load_Config_Table:
            type: WinExecutableFileObj:PEDataDirectoryStructType
            use: Must Not
          Bound_Import:
            type: WinExecutableFileObj:PEDataDirectoryStructType
            use: Must Not
          Import_Address_Table:
            type: WinExecutableFileObj:PEDataDirectoryStructType
            use: Must Not
          Delay_Import_Descriptor:
            type: WinExecutableFileObj:PEDataDirectoryStructType
            use: Must Not
          CLR_Runtime_Header:
            type: WinExecutableFileObj:PEDataDirectoryStructType
            use: Must Not
          Reserved:
            type: WinExecutableFileObj:PEDataDirectoryStructType
            use: Must Not
      DOSHeaderType:
        use: Must Not
        is_vocab: false
        fields:
          e_magic:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          e_cblp:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          e_cp:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          e_crlc:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          e_cparhdr:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          e_minalloc:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          e_maxalloc:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          e_ss:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          e_sp:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          e_csum:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          e_ip:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          e_cs:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          e_lfarlc:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          e_ovro:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          reserved1:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          e_oemid:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          e_oeminfo:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          reserved2:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          e_lfanew:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Hashes:
            type: cyboxCommon:HashListType
            use: Must Not
      EntropyType:
        use: Must Not
        is_vocab: false
        fields:
          Value:
            type: cyboxCommon:FloatObjectPropertyType
            use: Must Not
          Min:
            type: cyboxCommon:FloatObjectPropertyType
            use: Must Not
          Max:
            type: cyboxCommon:FloatObjectPropertyType
            use: Must Not
      PEBuildInformationType:
        use: Must Not
        is_vocab: false
        fields:
          Linker_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Linker_Version:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Compiler_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Compiler_Version:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      PEChecksumType:
        use: Must Not
        is_vocab: false
        fields:
          PE_Computed_API:
            type: cyboxCommon:LongObjectPropertyType
            use: Must Not
          PE_File_API:
            type: cyboxCommon:LongObjectPropertyType
            use: Must Not
          PE_File_Raw:
            type: cyboxCommon:LongObjectPropertyType
            use: Must Not
      PEDataDirectoryStructType:
        use: Must Not
        is_vocab: false
        fields:
          Virtual_Address:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Size:
            type: cyboxCommon:NonNegativeIntegerObjectPropertyType
            use: Must Not
      PEExportedFunctionsType:
        use: Must Not
        is_vocab: false
        fields:
          Exported_Function:
            type: WinExecutableFileObj:PEExportedFunctionType
            use: Must Not
      PEExportedFunctionType:
        use: Must Not
        is_vocab: false
        fields:
          Function_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Entry_Point:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Ordinal:
            type: cyboxCommon:NonNegativeIntegerObjectPropertyType
            use: Must Not
      PEExportsType:
        use: Must Not
        is_vocab: false
        fields:
          Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Exported_Functions:
            type: WinExecutableFileObj:PEExportedFunctionsType
            use: Must Not
          Exports_Time_Stamp:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Number_Of_Addresses:
            type: cyboxCommon:LongObjectPropertyType
            use: Must Not
          Number_Of_Names:
            type: cyboxCommon:LongObjectPropertyType
            use: Must Not
          Number_Of_Functions:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
      PEFileHeaderType:
        use: Must Not
        is_vocab: false
        fields:
          Machine:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Number_Of_Sections:
            type: cyboxCommon:NonNegativeIntegerObjectPropertyType
            use: Must Not
          Time_Date_Stamp:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Pointer_To_Symbol_Table:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Number_Of_Symbols:
            type: cyboxCommon:NonNegativeIntegerObjectPropertyType
            use: Must Not
          Size_Of_Optional_Header:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Characteristics:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Hashes:
            type: cyboxCommon:HashListType
            use: Must Not
      PEHeadersType:
        use: Must Not
        is_vocab: false
        fields:
          DOS_Header:
            type: WinExecutableFileObj:DOSHeaderType
            use: Must Not
          Signature:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          File_Header:
            type: WinExecutableFileObj:PEFileHeaderType
            use: Must Not
          Optional_Header:
            type: WinExecutableFileObj:PEOptionalHeaderType
            use: Must Not
          Entropy:
            type: WinExecutableFileObj:EntropyType
            use: Must Not
          Hashes:
            type: cyboxCommon:HashListType
            use: Must Not
      PEImportedFunctionsType:
        use: Must Not
        is_vocab: false
        fields:
          Imported_Function:
            type: WinExecutableFileObj:PEImportedFunctionType
            use: Must Not
      PEImportedFunctionType:
        use: Must Not
        is_vocab: false
        fields:
          Function_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Hint:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Ordinal:
            type: cyboxCommon:NonNegativeIntegerObjectPropertyType
            use: Must Not
          Bound:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Virtual_Address:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
      PEImportListType:
        use: Must Not
        is_vocab: false
        fields:
          Import:
            type: WinExecutableFileObj:PEImportType
            use: Must Not
      PEImportType:
        use: Must Not
        is_vocab: false
        attributes:
          delay_load:
            type: xs:boolean
            use: Must Not
          initially_visible:
            type: xs:boolean
            use: Must Not
        fields:
          File_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Imported_Functions:
            type: WinExecutableFileObj:PEImportedFunctionsType
            use: Must Not
          Virtual_Address:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
      PEOptionalHeaderType:
        use: Must Not
        is_vocab: false
        fields:
          Magic:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Major_Linker_Version:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Minor_Linker_Version:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Size_Of_Code:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Size_Of_Initialized_Data:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Size_Of_Uninitialized_Data:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Address_Of_Entry_Point:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Base_Of_Code:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Base_Of_Data:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Image_Base:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Section_Alignment:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          File_Alignment:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Major_OS_Version:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Minor_OS_Version:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Major_Image_Version:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Minor_Image_Version:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Major_Subsystem_Version:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Minor_Subsystem_Version:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Win32_Version_Value:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Size_Of_Image:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Size_Of_Headers:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Checksum:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Subsystem:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          DLL_Characteristics:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Size_Of_Stack_Reserve:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Size_Of_Stack_Commit:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Size_Of_Heap_Reserve:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Size_Of_Heap_Commit:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Loader_Flags:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Number_Of_Rva_And_Sizes:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Data_Directory:
            type: WinExecutableFileObj:DataDirectoryType
            use: Must Not
          Hashes:
            type: cyboxCommon:HashListType
            use: Must Not
      PEResourceContentType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      PEResourceListType:
        use: Must Not
        is_vocab: false
        fields:
          Resource:
            type: WinExecutableFileObj:PEResourceType
            use: Must Not
      PEResourceType:
        use: Must Not
        is_vocab: false
        fields:
          Type:
            type: WinExecutableFileObj:PEResourceContentType
            use: Must Not
          Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Size:
            type: cyboxCommon:PositiveIntegerObjectPropertyType
            use: Must Not
          Virtual_Address:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Language:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Sub_Language:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Hashes:
            type: cyboxCommon:HashListType
            use: Must Not
          Data:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      PESectionHeaderStructType:
        use: Must Not
        is_vocab: false
        fields:
          Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Virtual_Size:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Virtual_Address:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Size_Of_Raw_Data:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Pointer_To_Raw_Data:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Pointer_To_Relocations:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Pointer_To_Linenumbers:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Number_Of_Relocations:
            type: cyboxCommon:NonNegativeIntegerObjectPropertyType
            use: Must Not
          Number_Of_Linenumbers:
            type: cyboxCommon:NonNegativeIntegerObjectPropertyType
            use: Must Not
          Characteristics:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
      PESectionListType:
        use: Must Not
        is_vocab: false
        fields:
          Section:
            type: WinExecutableFileObj:PESectionType
            use: Must Not
      PESectionType:
        use: Must Not
        is_vocab: false
        fields:
          Section_Header:
            type: WinExecutableFileObj:PESectionHeaderStructType
            use: Must Not
          Data_Hashes:
            type: cyboxCommon:HashListType
            use: Must Not
          Entropy:
            type: WinExecutableFileObj:EntropyType
            use: Must Not
          Header_Hashes:
            type: cyboxCommon:HashListType
            use: Must Not
      PEType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      PEVersionInfoResourceType:
        use: Must Not
        is_vocab: false
        fields:
          Type:
            type: WinExecutableFileObj:PEResourceContentType
            use: Must Not
          Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Size:
            type: cyboxCommon:PositiveIntegerObjectPropertyType
            use: Must Not
          Virtual_Address:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Language:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Sub_Language:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Hashes:
            type: cyboxCommon:HashListType
            use: Must Not
          Data:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Comments:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          CompanyName:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          FileDescription:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          FileVersion:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          InternalName:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          LangID:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          LegalCopyright:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          LegalTrademarks:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          OriginalFilename:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          PrivateBuild:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          ProductName:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          ProductVersion:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          SpecialBuild:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      SubsystemType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      WindowsExecutableFileObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
          is_packed:
            type: xs:boolean
            use: Must Not
          is_masqueraded:
            type: xs:boolean
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          File_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          File_Path:
            type: FileObj:FilePathType
            use: Must Not
          Device_Path:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Full_Path:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          File_Extension:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Size_In_Bytes:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          Magic_Number:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          File_Format:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Hashes:
            type: cyboxCommon:HashListType
            use: Must Not
          Digital_Signatures:
            type: cyboxCommon:DigitalSignaturesType
            use: Must Not
          Modified_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Accessed_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Created_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          File_Attributes_List:
            type: FileObj:FileAttributeType
            use: Must Not
          Permissions:
            type: FileObj:FilePermissionsType
            use: Must Not
          User_Owner:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Packer_List:
            type: FileObj:PackerListType
            use: Must Not
          Peak_Entropy:
            type: cyboxCommon:DoubleObjectPropertyType
            use: Must Not
          Sym_Links:
            type: FileObj:SymLinksListType
            use: Must Not
          Byte_Runs:
            type: cyboxCommon:ByteRunsType
            use: Must Not
          Extracted_Features:
            type: cyboxCommon:ExtractedFeaturesType
            use: Must Not
          Encryption_Algorithm:
            type: cyboxCommon:CipherType
            use: Must Not
          Decryption_Key:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Compression_Method:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Compression_Version:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Compression_Comment:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Filename_Accessed_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Filename_Created_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Filename_Modified_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Drive:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Security_ID:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Security_Type:
            type: cyboxCommon:SIDType
            use: Must Not
          Stream_List:
            type: WinFileObj:StreamListType
            use: Must Not
          Build_Information:
            type: WinExecutableFileObj:PEBuildInformationType
            use: Must Not
          Digital_Signature:
            type: cyboxCommon:DigitalSignatureInfoType
            use: Must Not
          Exports:
            type: WinExecutableFileObj:PEExportsType
            use: Must Not
          Extraneous_Bytes:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Headers:
            type: WinExecutableFileObj:PEHeadersType
            use: Must Not
          Imports:
            type: WinExecutableFileObj:PEImportListType
            use: Must Not
          PE_Checksum:
            type: WinExecutableFileObj:PEChecksumType
            use: Must Not
          Resources:
            type: WinExecutableFileObj:PEResourceListType
            use: Must Not
          Sections:
            type: WinExecutableFileObj:PESectionListType
            use: Must Not
          Type:
            type: WinExecutableFileObj:PEType
            use: Must Not
  Win File Object:
    project: cybox
    constructs:
      StreamListType:
        use: Must Not
        is_vocab: false
        fields:
          Stream:
            type: WinFileObj:StreamObjectType
            use: Must Not
      StreamObjectType:
        use: Must Not
        is_vocab: false
        fields:
          Hash:
            type: cyboxCommon:HashType
            use: Must Not
          Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Size_In_Bytes:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
      WindowsFileAttributesType:
        use: Must Not
        is_vocab: false
        fields:
          Attribute:
            type: WinFileObj:WindowsFileAttributeType
            use: Must Not
      WindowsFileAttributeType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      WindowsFileObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
          is_packed:
            type: xs:boolean
            use: Must Not
          is_masqueraded:
            type: xs:boolean
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          File_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          File_Path:
            type: FileObj:FilePathType
            use: Must Not
          Device_Path:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Full_Path:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          File_Extension:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Size_In_Bytes:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          Magic_Number:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          File_Format:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Hashes:
            type: cyboxCommon:HashListType
            use: Must Not
          Digital_Signatures:
            type: cyboxCommon:DigitalSignaturesType
            use: Must Not
          Modified_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Accessed_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Created_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          File_Attributes_List:
            type: FileObj:FileAttributeType
            use: Must Not
          Permissions:
            type: FileObj:FilePermissionsType
            use: Must Not
          User_Owner:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Packer_List:
            type: FileObj:PackerListType
            use: Must Not
          Peak_Entropy:
            type: cyboxCommon:DoubleObjectPropertyType
            use: Must Not
          Sym_Links:
            type: FileObj:SymLinksListType
            use: Must Not
          Byte_Runs:
            type: cyboxCommon:ByteRunsType
            use: Must Not
          Extracted_Features:
            type: cyboxCommon:ExtractedFeaturesType
            use: Must Not
          Encryption_Algorithm:
            type: cyboxCommon:CipherType
            use: Must Not
          Decryption_Key:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Compression_Method:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Compression_Version:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Compression_Comment:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Filename_Accessed_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Filename_Created_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Filename_Modified_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Drive:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Security_ID:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Security_Type:
            type: cyboxCommon:SIDType
            use: Must Not
          Stream_List:
            type: WinFileObj:StreamListType
            use: Must Not
      WindowsFilePermissionsType:
        use: Must Not
        is_vocab: false
        fields:
          Full_Control:
            type: xs:boolean
            use: Must Not
          Modify:
            type: xs:boolean
            use: Must Not
          Read:
            type: xs:boolean
            use: Must Not
          Read_And_Execute:
            type: xs:boolean
            use: Must Not
          Write:
            type: xs:boolean
            use: Must Not
  Win Event Log Object:
    project: cybox
    constructs:
      UnformattedMessageListType:
        use: Must Not
        is_vocab: false
        fields:
          Unformatted_Message:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      WindowsEventLogObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          EID:
            type: cyboxCommon:LongObjectPropertyType
            use: Must Not
          Type:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Log:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Message:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Category_Num:
            type: cyboxCommon:LongObjectPropertyType
            use: Must Not
          Category:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Generation_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Source:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Machine:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          User:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Blob:
            type: cyboxCommon:Base64BinaryObjectPropertyType
            use: Must Not
          Correlation_Activity_ID:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Correlation_Related_Activity_ID:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Execution_Process_ID:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Execution_Thread_ID:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Index:
            type: cyboxCommon:LongObjectPropertyType
            use: Must Not
          Reserved:
            type: cyboxCommon:LongObjectPropertyType
            use: Must Not
          Unformatted_Message_List:
            type: WinEventLogObj:UnformattedMessageListType
            use: Must Not
          Write_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
  Win Event Object:
    project: cybox
    constructs:
      WindowsHookObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Type:
            type: WinHookObj:WinHookType
            use: Must Not
          Handle:
            type: WinHandleObj:WindowsHandleObjectType
            use: Must Not
          Hooking_Function_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Hooking_Module:
            type: LibraryObj:LibraryObjectType
            use: Must Not
          Thread_ID:
            type: cyboxCommon:NonNegativeIntegerObjectPropertyType
            use: Must Not
      WinHookType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
  Win Handle Object:
    project: cybox
    constructs:
      HandleType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      WindowsHandleListType:
        use: Must Not
        is_vocab: false
        fields:
          Handle:
            type: WinHandleObj:WindowsHandleObjectType
            use: Must Not
      WindowsHandleObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          ID:
            type: cyboxCommon:UnsignedIntegerObjectPropertyType
            use: Must Not
          Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Type:
            type: WinHandleObj:HandleType
            use: Must Not
          Object_Address:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          Access_Mask:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          Pointer_Count:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
  Win Filemapping Object:
    project: cybox
    constructs:
      PageProtectionAttributeType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      PageProtectionValueType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      WindowsFilemappingObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          File_Handle:
            type: WinHandleObj:WindowsHandleObjectType
            use: Must Not
          Handle:
            type: WinHandleObj:WindowsHandleObjectType
            use: Must Not
          Page_Protection_Value:
            type: WinFilemappingObj:PageProtectionValueType
            use: Must Not
          Page_Protection_Attribute:
            type: WinFilemappingObj:PageProtectionAttributeType
            use: Must Not
          Maximum_Size:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          Actual_Size:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          Security_Attributes:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
  Win Kernel Hook Object:
    project: cybox
    constructs:
      KernelHookType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      WindowsKernelHookObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Digital_Signature_Hooking:
            type: cyboxCommon:DigitalSignatureInfoType
            use: Must Not
          Digital_Signature_Hooked:
            type: cyboxCommon:DigitalSignatureInfoType
            use: Must Not
          Hooking_Address:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          Hook_Description:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Hooked_Function:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Hooked_Module:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Hooking_Module:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Type:
            type: WinKernelHookObj:KernelHookType
            use: Must Not
  Win Kernel Object:
    project: cybox
    constructs:
      IDTEntryListType:
        use: Must Not
        is_vocab: false
        fields:
          IDT_Entry:
            type: WinKernelObj:IDTEntryType
            use: Must Not
      IDTEntryType:
        use: Must Not
        is_vocab: false
        fields:
          Type_Attr:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Offset_High:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Offset_Low:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Offset_Middle:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Selector:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
      SSDTEntryListType:
        use: Must Not
        is_vocab: false
        fields:
          SSDT_Entry:
            type: WinKernelObj:SSDTEntryType
            use: Must Not
      SSDTEntryType:
        use: Must Not
        is_vocab: false
        attributes:
          hooked:
            type: xs:boolean
            use: Must Not
        fields:
          Service_Table_Base:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Service_Counter_Table_Base:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Number_Of_Services:
            type: cyboxCommon:NonNegativeIntegerObjectPropertyType
            use: Must Not
          Argument_Table_Base:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
      WindowsKernelObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          IDT:
            type: WinKernelObj:IDTEntryListType
            use: Must Not
          SSDT:
            type: WinKernelObj:SSDTEntryListType
            use: Must Not
  Win Mailslot Object:
    project: cybox
    constructs:
      WindowsMailslotObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Handle:
            type: WinHandleObj:WindowsHandleObjectType
            use: Must Not
          Max_Message_Size:
            type: cyboxCommon:NonNegativeIntegerObjectPropertyType
            use: Must Not
          Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Read_Timeout:
            type: cyboxCommon:NonNegativeIntegerObjectPropertyType
            use: Must Not
          Security_Attributes:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
  Win Memory Page Region Object:
    project: cybox
    constructs:
      MemoryPageProtectionType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      MemoryPageStateType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      MemoryPageTypeType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      WindowsMemoryPageRegionObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
          is_injected:
            type: xs:boolean
            use: Must Not
          is_mapped:
            type: xs:boolean
            use: Must Not
          is_protected:
            type: xs:boolean
            use: Must Not
          is_volatile:
            type: xs:boolean
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Hashes:
            type: cyboxCommon:HashListType
            use: Must Not
          Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Memory_Source:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Region_Size:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          Block_Type:
            type: MemoryObj:BlockType
            use: Must Not
          Region_Start_Address:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Region_End_Address:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Extracted_Features:
            type: cyboxCommon:ExtractedFeaturesType
            use: Must Not
          Type:
            type: WinMemoryPageRegionObj:MemoryPageTypeType
            use: Must Not
          Allocation_Base_Address:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Allocation_Protect:
            type: WinMemoryPageRegionObj:MemoryPageProtectionType
            use: Must Not
          State:
            type: WinMemoryPageRegionObj:MemoryPageStateType
            use: Must Not
          Protect:
            type: WinMemoryPageRegionObj:MemoryPageProtectionType
            use: Must Not
  Win Mutex Object:
    project: cybox
    constructs:
      WindowsMutexObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
          named:
            type: xs:boolean
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Handle:
            type: WinHandleObj:WindowsHandleObjectType
            use: Must Not
          Security_Attributes:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
  Win Network Route Entry Object:
    project: cybox
    constructs:
      NLRouteOriginType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      NLRouteProtocolType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      WindowsNetworkRouteEntryObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
          is_ipv6:
            type: xs:boolean
            use: Must Not
          is_autoconfigure_address:
            type: xs:boolean
            use: Must Not
          is_immortal:
            type: xs:boolean
            use: Must Not
          is_loopback:
            type: xs:boolean
            use: Must Not
          is_publish:
            type: xs:boolean
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Destination_Address:
            type: AddressObj:AddressObjectType
            use: Must Not
          Origin:
            type: AddressObj:AddressObjectType
            use: Must Not
          Netmask:
            type: AddressObj:AddressObjectType
            use: Must Not
          Gateway_Address:
            type: AddressObj:AddressObjectType
            use: Must Not
          Metric:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          Type:
            type: NetworkRouteEntryObj:RouteType
            use: Must Not
          Protocol:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Interface:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Preferred_Lifetime:
            type: cyboxCommon:DurationObjectPropertyType
            use: Must Not
          Valid_Lifetime:
            type: cyboxCommon:DurationObjectPropertyType
            use: Must Not
          Route_Age:
            type: cyboxCommon:DurationObjectPropertyType
            use: Must Not
          NL_ROUTE_PROTOCOL:
            type: WinNetworkRouteEntryObj:NLRouteProtocolType
            use: Must Not
          NL_ROUTE_ORIGIN:
            type: WinNetworkRouteEntryObj:NLRouteOriginType
            use: Must Not
  Win Network Share Object:
    project: cybox
    constructs:
      AccessPermissionsGroup:
        use: Must Not
        is_vocab: false
        attributes:
          ACCESS_READ:
            type: xs:boolean
            use: Must Not
          ACCESS_WRITE:
            type: xs:boolean
            use: Must Not
          ACCESS_CREATE:
            type: xs:boolean
            use: Must Not
          ACCESS_EXEC:
            type: xs:boolean
            use: Must Not
          ACCESS_DELETE:
            type: xs:boolean
            use: Must Not
          ACCESS_ATRIB:
            type: xs:boolean
            use: Must Not
          ACCESS_PERM:
            type: xs:boolean
            use: Must Not
          ACCESS_ALL:
            type: xs:boolean
            use: Must Not
      SharedResourceType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      WindowsNetworkShareObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
          ACCESS_READ:
            type: xs:boolean
            use: Must Not
          ACCESS_WRITE:
            type: xs:boolean
            use: Must Not
          ACCESS_CREATE:
            type: xs:boolean
            use: Must Not
          ACCESS_EXEC:
            type: xs:boolean
            use: Must Not
          ACCESS_DELETE:
            type: xs:boolean
            use: Must Not
          ACCESS_ATRIB:
            type: xs:boolean
            use: Must Not
          ACCESS_PERM:
            type: xs:boolean
            use: Must Not
          ACCESS_ALL:
            type: xs:boolean
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Current_Uses:
            type: cyboxCommon:NonNegativeIntegerObjectPropertyType
            use: Must Not
          Local_Path:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Max_Uses:
            type: cyboxCommon:NonNegativeIntegerObjectPropertyType
            use: Must Not
          Netname:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Type:
            type: WinNetworkShareObj:SharedResourceType
            use: Must Not
  Win Pipe Object:
    project: cybox
    constructs:
      WindowsPipeObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
          named:
            type: xs:boolean
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Default_Time_Out:
            type: cyboxCommon:NonNegativeIntegerObjectPropertyType
            use: Must Not
          Handle:
            type: WinHandleObj:WindowsHandleObjectType
            use: Must Not
          In_Buffer_Size:
            type: cyboxCommon:NonNegativeIntegerObjectPropertyType
            use: Must Not
          Max_Instances:
            type: cyboxCommon:NonNegativeIntegerObjectPropertyType
            use: Must Not
          Open_Mode:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Out_Buffer_Size:
            type: cyboxCommon:NonNegativeIntegerObjectPropertyType
            use: Must Not
          Pipe_Mode:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Security_Attributes:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
  Win Prefetch Object:
    project: cybox
    constructs:
      AccessedDirectoryListType:
        use: Must Not
        is_vocab: false
        fields:
          Accessed_Directory:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      AccessedFileListType:
        use: Must Not
        is_vocab: false
        fields:
          Accessed_Filename:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      VolumeType:
        use: Must Not
        is_vocab: false
        fields:
          VolumeItem:
            type: WinVolumeObj:WindowsVolumeObjectType
            use: Must Not
          DeviceItem:
            type: DeviceObj:DeviceObjectType
            use: Must Not
      WindowsPrefetchObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Application_File_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Prefetch_Hash:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Times_Executed:
            type: cyboxCommon:LongObjectPropertyType
            use: Must Not
          First_Run:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Last_Run:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Volume:
            type: WinPrefetchObj:VolumeType
            use: Must Not
          Accessed_File_List:
            type: WinPrefetchObj:AccessedFileListType
            use: Must Not
          Accessed_Directory_List:
            type: WinPrefetchObj:AccessedDirectoryListType
            use: Must Not
  Win Volume Object:
    project: cybox
    constructs:
      WindowsDriveType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      WindowsVolumeAttributesListType:
        use: Must Not
        is_vocab: false
        fields:
          Attribute:
            type: WinVolumeObj:WindowsVolumeAttributeType
            use: Must Not
      WindowsVolumeAttributeType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      WindowsVolumeObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
          is_mounted:
            type: xs:boolean
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Device_Path:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          File_System_Type:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Total_Allocation_Units:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          Sectors_Per_Allocation_Unit:
            type: cyboxCommon:UnsignedIntegerObjectPropertyType
            use: Must Not
          Bytes_Per_Sector:
            type: cyboxCommon:PositiveIntegerObjectPropertyType
            use: Must Not
          Actual_Available_Allocation_Units:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          Creation_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          File_System_Flag_List:
            type: VolumeObj:FileSystemFlagListType
            use: Must Not
          Serial_Number:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Attributes_List:
            type: WinVolumeObj:WindowsVolumeAttributesListType
            use: Must Not
          Drive_Letter:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Drive_Type:
            type: WinVolumeObj:WindowsDriveType
            use: Must Not
  Win Process Object:
    project: cybox
    constructs:
      MemorySectionListType:
        use: Must Not
        is_vocab: false
        fields:
          Memory_Section:
            type: MemoryObj:MemoryObjectType
            use: Must Not
      StartupInfoType:
        use: Must Not
        is_vocab: false
        fields:
          lpDesktop:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          lpTitle:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          dwX:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          dwY:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          dwXSize:
            type: cyboxCommon:PositiveIntegerObjectPropertyType
            use: Must Not
          dwYSize:
            type: cyboxCommon:PositiveIntegerObjectPropertyType
            use: Must Not
          dwXCountChars:
            type: cyboxCommon:PositiveIntegerObjectPropertyType
            use: Must Not
          dwYCountChars:
            type: cyboxCommon:PositiveIntegerObjectPropertyType
            use: Must Not
          dwFillAttribute:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          dwFlags:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          wShowWindow:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          hStdInput:
            type: WinHandleObj:WindowsHandleObjectType
            use: Must Not
          hStdOutput:
            type: WinHandleObj:WindowsHandleObjectType
            use: Must Not
          hStdError:
            type: WinHandleObj:WindowsHandleObjectType
            use: Must Not
      WindowsProcessObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
          is_hidden:
            type: xs:boolean
            use: Must Not
          aslr_enabled:
            type: xs:boolean
            use: Must Not
          dep_enabled:
            type: xs:boolean
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          PID:
            type: cyboxCommon:UnsignedIntegerObjectPropertyType
            use: Must Not
          Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Creation_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Parent_PID:
            type: cyboxCommon:UnsignedIntegerObjectPropertyType
            use: Must Not
          Child_PID_List:
            type: ProcessObj:ChildPIDListType
            use: Must Not
          Image_Info:
            type: ProcessObj:ImageInfoType
            use: Must Not
          Argument_List:
            type: ProcessObj:ArgumentListType
            use: Must Not
          Environment_Variable_List:
            type: cyboxCommon:EnvironmentVariableListType
            use: Must Not
          Kernel_Time:
            type: cyboxCommon:DurationObjectPropertyType
            use: Must Not
          Port_List:
            type: ProcessObj:PortListType
            use: Must Not
          Network_Connection_List:
            type: ProcessObj:NetworkConnectionListType
            use: Must Not
          Start_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Status:
            type: ProcessObj:ProcessStatusType
            use: Must Not
          Username:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          User_Time:
            type: cyboxCommon:DurationObjectPropertyType
            use: Must Not
          Extracted_Features:
            type: cyboxCommon:ExtractedFeaturesType
            use: Must Not
          Handle_List:
            type: WinHandleObj:WindowsHandleListType
            use: Must Not
          Priority:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Section_List:
            type: WinProcessObj:MemorySectionListType
            use: Must Not
          Security_ID:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Startup_Info:
            type: WinProcessObj:StartupInfoType
            use: Must Not
          Security_Type:
            type: cyboxCommon:SIDType
            use: Must Not
          Window_Title:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Thread:
            type: WinThreadObj:WindowsThreadObjectType
            use: Must Not
  Win Thread Object:
    project: cybox
    constructs:
      ThreadRunningStatusType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      WindowsThreadObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Thread_ID:
            type: cyboxCommon:NonNegativeIntegerObjectPropertyType
            use: Must Not
          Handle:
            type: WinHandleObj:WindowsHandleObjectType
            use: Must Not
          Running_Status:
            type: WinThreadObj:ThreadRunningStatusType
            use: Must Not
          Context:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Priority:
            type: cyboxCommon:UnsignedIntegerObjectPropertyType
            use: Must Not
          Creation_Flags:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Creation_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Start_Address:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Parameter_Address:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Security_Attributes:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Stack_Size:
            type: cyboxCommon:NonNegativeIntegerObjectPropertyType
            use: Must Not
  Win Registry Key Object:
    project: cybox
    constructs:
      RegistryDatatypeType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      RegistryHiveType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      RegistrySubkeysType:
        use: Must Not
        is_vocab: false
        fields:
          Subkey:
            type: WinRegistryKeyObj:WindowsRegistryKeyObjectType
            use: Must Not
      RegistryValuesType:
        use: Must Not
        is_vocab: false
        fields:
          Value:
            type: WinRegistryKeyObj:RegistryValueType
            use: Must Not
      RegistryValueType:
        use: Must Not
        is_vocab: false
        fields:
          Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Data:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Datatype:
            type: WinRegistryKeyObj:RegistryDatatypeType
            use: Must Not
          Byte_Runs:
            type: cyboxCommon:ByteRunsType
            use: Must Not
      WindowsRegistryKeyObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Key:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Hive:
            type: WinRegistryKeyObj:RegistryHiveType
            use: Must Not
          Number_Values:
            type: cyboxCommon:UnsignedIntegerObjectPropertyType
            use: Must Not
          Values:
            type: WinRegistryKeyObj:RegistryValuesType
            use: Must Not
          Modified_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Creator_Username:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Handle_List:
            type: WinHandleObj:WindowsHandleListType
            use: Must Not
          Number_Subkeys:
            type: cyboxCommon:UnsignedIntegerObjectPropertyType
            use: Must Not
          Subkeys:
            type: WinRegistryKeyObj:RegistrySubkeysType
            use: Must Not
          Byte_Runs:
            type: cyboxCommon:ByteRunsType
            use: Must Not
  Win Semaphore Object:
    project: cybox
    constructs:
      WindowsSemaphoreObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
          named:
            type: xs:boolean
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Current_Count:
            type: cyboxCommon:UnsignedIntegerObjectPropertyType
            use: Must Not
          Maximum_Count:
            type: cyboxCommon:PositiveIntegerObjectPropertyType
            use: Must Not
          Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Handle:
            type: WinHandleObj:WindowsHandleObjectType
            use: Must Not
          Security_Attributes:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
  Win Service Object:
    project: cybox
    constructs:
      ServiceDescriptionListType:
        use: Must Not
        is_vocab: false
        fields:
          Description:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      ServiceModeType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      ServiceStatusType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      ServiceType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      WindowsServiceObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
          is_hidden:
            type: xs:boolean
            use: Must Not
          aslr_enabled:
            type: xs:boolean
            use: Must Not
          dep_enabled:
            type: xs:boolean
            use: Must Not
          service_dll_signature_exists:
            type: xs:boolean
            use: Must Not
          service_dll_signature_verified:
            type: xs:boolean
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          PID:
            type: cyboxCommon:UnsignedIntegerObjectPropertyType
            use: Must Not
          Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Creation_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Parent_PID:
            type: cyboxCommon:UnsignedIntegerObjectPropertyType
            use: Must Not
          Child_PID_List:
            type: ProcessObj:ChildPIDListType
            use: Must Not
          Image_Info:
            type: ProcessObj:ImageInfoType
            use: Must Not
          Argument_List:
            type: ProcessObj:ArgumentListType
            use: Must Not
          Environment_Variable_List:
            type: cyboxCommon:EnvironmentVariableListType
            use: Must Not
          Kernel_Time:
            type: cyboxCommon:DurationObjectPropertyType
            use: Must Not
          Port_List:
            type: ProcessObj:PortListType
            use: Must Not
          Network_Connection_List:
            type: ProcessObj:NetworkConnectionListType
            use: Must Not
          Start_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Status:
            type: ProcessObj:ProcessStatusType
            use: Must Not
          Username:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          User_Time:
            type: cyboxCommon:DurationObjectPropertyType
            use: Must Not
          Extracted_Features:
            type: cyboxCommon:ExtractedFeaturesType
            use: Must Not
          Handle_List:
            type: WinHandleObj:WindowsHandleListType
            use: Must Not
          Priority:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Section_List:
            type: WinProcessObj:MemorySectionListType
            use: Must Not
          Security_ID:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Startup_Info:
            type: WinProcessObj:StartupInfoType
            use: Must Not
          Security_Type:
            type: cyboxCommon:SIDType
            use: Must Not
          Window_Title:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Thread:
            type: WinThreadObj:WindowsThreadObjectType
            use: Must Not
          Description_List:
            type: WinServiceObj:ServiceDescriptionListType
            use: Must Not
          Display_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Group_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Service_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Service_DLL:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Service_DLL_Certificate_Issuer:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Service_DLL_Certificate_Subject:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Service_DLL_Hashes:
            type: cyboxCommon:HashListType
            use: Must Not
          Service_DLL_Signature_Description:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Startup_Command_Line:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Startup_Type:
            type: WinServiceObj:ServiceModeType
            use: Must Not
          Service_Status:
            type: WinServiceObj:ServiceStatusType
            use: Must Not
          Service_Type:
            type: WinServiceObj:ServiceType
            use: Must Not
          Started_As:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
  Win System Object:
    project: cybox
    constructs:
      GlobalFlagListType:
        use: Must Not
        is_vocab: false
        fields:
          Global_Flag:
            type: WinSystemObj:GlobalFlagType
            use: Must Not
      GlobalFlagType:
        use: Must Not
        is_vocab: false
        fields:
          Abbreviation:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Destination:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Hexadecimal_Value:
            type: cyboxCommon:HexBinaryObjectPropertyType
            use: Must Not
          Symbolic_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      WindowsSystemObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Available_Physical_Memory:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          BIOS_Info:
            type: SystemObj:BIOSInfoType
            use: Must Not
          Date:
            type: cyboxCommon:DateObjectPropertyType
            use: Must Not
          Hostname:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Local_Time:
            type: cyboxCommon:TimeObjectPropertyType
            use: Must Not
          Network_Interface_List:
            type: SystemObj:NetworkInterfaceListType
            use: Must Not
          OS:
            type: SystemObj:OSType
            use: Must Not
          Processor:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Processor_Architecture:
            type: SystemObj:ProcessorArchType
            use: Must Not
          System_Time:
            type: cyboxCommon:TimeObjectPropertyType
            use: Must Not
          Timezone_DST:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Timezone_Standard:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Total_Physical_Memory:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          Uptime:
            type: cyboxCommon:DurationObjectPropertyType
            use: Must Not
          Username:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Domain:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Global_Flag_List:
            type: WinSystemObj:GlobalFlagListType
            use: Must Not
          NetBIOS_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Open_Handle_List:
            type: WinHandleObj:WindowsHandleListType
            use: Must Not
          Product_ID:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Product_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Registered_Organization:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Registered_Owner:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Windows_Directory:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Windows_System_Directory:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Windows_Temp_Directory:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
  Win System Restore Object:
    project: cybox
    constructs:
      ChangeLogEntryTypeType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      HiveListType:
        use: Must Not
        is_vocab: false
        fields:
          Hive:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      WindowsSystemRestoreObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Restore_Point_Description:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Restore_Point_Full_Path:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Restore_Point_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Restore_Point_Type:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          ACL_Change_SID:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          ACL_Change_Username:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Backup_File_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Change_Event:
            type: WinSystemRestoreObj:ChangeLogEntryTypeType
            use: Must Not
          ChangeLog_Entry_Flags:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          ChangeLog_Entry_Sequence_Number:
            type: cyboxCommon:LongObjectPropertyType
            use: Must Not
          ChangeLog_Entry_Type:
            type: WinSystemRestoreObj:ChangeLogEntryTypeType
            use: Must Not
          Change_Log_File_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Created:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          File_Attributes:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          New_File_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Original_File_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Original_Short_File_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Process_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Registry_Hive_List:
            type: WinSystemRestoreObj:HiveListType
            use: Must Not
  Win Task Object:
    project: cybox
    constructs:
      IComHandlerActionType:
        use: Must Not
        is_vocab: false
        fields:
          COM_Data:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          COM_Class_ID:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      IExecActionType:
        use: Must Not
        is_vocab: false
        fields:
          Exec_Arguments:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Exec_Program_Path:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Exec_Working_Directory:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Exec_Program_Hashes:
            type: cyboxCommon:HashListType
            use: Must Not
      IShowMessageActionType:
        use: Must Not
        is_vocab: false
        fields:
          Show_Message_Body:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Show_Message_Title:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      TaskActionListType:
        use: Must Not
        is_vocab: false
        fields:
          Action:
            type: WinTaskObj:TaskActionType
            use: Must Not
      TaskActionType:
        use: Must Not
        is_vocab: false
        fields:
          Action_Type:
            type: WinTaskObj:TaskActionTypeType
            use: Must Not
          Action_ID:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          IEmailAction:
            type: EmailMessageObj:EmailMessageObjectType
            use: Must Not
          IComHandlerAction:
            type: WinTaskObj:IComHandlerActionType
            use: Must Not
          IExecAction:
            type: WinTaskObj:IExecActionType
            use: Must Not
          IShowMessageAction:
            type: WinTaskObj:IShowMessageActionType
            use: Must Not
      TaskActionTypeType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      TaskFlagType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      TaskPriorityType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      TaskStatusType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      TaskTriggerFrequencyType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      TaskTriggerType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      TriggerListType:
        use: Must Not
        is_vocab: false
        fields:
          Trigger:
            type: WinTaskObj:TriggerType
            use: Must Not
      TriggerType:
        use: Must Not
        is_vocab: false
        attributes:
          enabled:
            type: xs:boolean
            use: Must Not
        fields:
          Trigger_Begin:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Trigger_Delay:
            type: cyboxCommon:DurationObjectPropertyType
            use: Must Not
          Trigger_End:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Trigger_Frequency:
            type: WinTaskObj:TaskTriggerFrequencyType
            use: Must Not
          Trigger_Max_Run_Time:
            type: cyboxCommon:DurationObjectPropertyType
            use: Must Not
          Trigger_Session_Change_Type:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Trigger_Type:
            type: WinTaskObj:TaskTriggerType
            use: Must Not
      WindowsTaskObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Status:
            type: WinTaskObj:TaskStatusType
            use: Must Not
          Priority:
            type: WinTaskObj:TaskPriorityType
            use: Must Not
          Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Application_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Parameters:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Flags:
            type: WinTaskObj:TaskFlagType
            use: Must Not
          Account_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Account_Run_Level:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Account_Logon_Type:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Creator:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Creation_Date:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Most_Recent_Run_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Exit_Code:
            type: cyboxCommon:LongObjectPropertyType
            use: Must Not
          Max_Run_Time:
            type: cyboxCommon:UnsignedLongObjectPropertyType
            use: Must Not
          Next_Run_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Action_List:
            type: WinTaskObj:TaskActionListType
            use: Must Not
          Trigger_List:
            type: WinTaskObj:TriggerListType
            use: Must Not
          Comment:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Working_Directory:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Work_Item_Data:
            type: cyboxCommon:Base64BinaryObjectPropertyType
            use: Must Not
  Win User Account Object:
    project: cybox
    constructs:
      WindowsGroupType:
        use: Must Not
        is_vocab: false
        fields:
          Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      WindowsPrivilegeType:
        use: Must Not
        is_vocab: false
        fields:
          User_Right:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      WindowsUserAccountObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
          disabled:
            type: xs:boolean
            use: Must Not
          locked_out:
            type: xs:boolean
            use: Must Not
          password_required:
            type: xs:boolean
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Description:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Domain:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Authentication:
            type: AccountObj:AuthenticationType
            use: Must Not
          Creation_Date:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Modified_Date:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Last_Accessed_Time:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Full_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Group_List:
            type: UserAccountObj:GroupListType
            use: Must Not
          Home_Directory:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Last_Login:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Privilege_List:
            type: UserAccountObj:PrivilegeListType
            use: Must Not
          Script_Path:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Username:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          User_Password_Age:
            type: cyboxCommon:DurationObjectPropertyType
            use: Must Not
          Security_ID:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Security_Type:
            type: cyboxCommon:SIDType
            use: Must Not
  Win Waitable Timer Object:
    project: cybox
    constructs:
      WaitableTimerType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          datatype:
            type: cyboxCommon:DatatypeEnum
            use: Must Not
          appears_random:
            type: xs:boolean
            use: Must Not
          is_obfuscated:
            type: xs:boolean
            use: Must Not
          obfuscation_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          is_defanged:
            type: xs:boolean
            use: Must Not
          defanging_algorithm_ref:
            type: xs:anyURI
            use: Must Not
          refanging_transform_type:
            type: xs:string
            use: Must Not
          refanging_transform:
            type: xs:string
            use: Must Not
          observed_encoding:
            type: xs:string
            use: Must Not
          condition:
            type: cyboxCommon:ConditionTypeEnum
            use: Must Not
          is_case_sensitive:
            type: xs:boolean
            use: Must Not
          apply_condition:
            type: cyboxCommon:ConditionApplicationEnum
            use: Must Not
          delimiter:
            type: xs:string
            use: Must Not
          bit_mask:
            type: xs:hexBinary
            use: Must Not
          pattern_type:
            type: cyboxCommon:PatternTypeEnum
            use: Must Not
          regex_syntax:
            type: xs:string
            use: Must Not
          has_changed:
            type: xs:boolean
            use: Must Not
          trend:
            type: xs:boolean
            use: Must Not
      WindowsWaitableTimerObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Handle:
            type: WinHandleObj:WindowsHandleObjectType
            use: Must Not
          Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Security_Attributes:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Type:
            type: WinWaitableTimerObj:WaitableTimerType
            use: Must Not
  X509 Certificate Object:
    project: cybox
    constructs:
      RSAPublicKeyType:
        use: Must Not
        is_vocab: false
        fields:
          Modulus:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Exponent:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
      SubjectPublicKeyType:
        use: Must Not
        is_vocab: false
        fields:
          Public_Key_Algorithm:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          RSA_Public_Key:
            type: X509CertificateObj:RSAPublicKeyType
            use: Must Not
      ValidityType:
        use: Must Not
        is_vocab: false
        fields:
          Not_Before:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
          Not_After:
            type: cyboxCommon:DateTimeObjectPropertyType
            use: Must Not
      X509CertificateContentsType:
        use: Must Not
        is_vocab: false
        fields:
          Version:
            type: cyboxCommon:IntegerObjectPropertyType
            use: Must Not
          Serial_Number:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Signature_Algorithm:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Issuer:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Validity:
            type: X509CertificateObj:ValidityType
            use: Must Not
          Subject:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Subject_Public_Key:
            type: X509CertificateObj:SubjectPublicKeyType
            use: Must Not
          Standard_Extensions:
            type: X509CertificateObj:X509V3ExtensionsType
            use: Must Not
          Non_Standard_Extensions:
            type: X509CertificateObj:X509NonStandardExtensionsType
            use: Must Not
      X509CertificateObjectType:
        use: Must Not
        is_vocab: false
        attributes:
          object_reference:
            type: xs:QName
            use: Must Not
        fields:
          Custom_Properties:
            type: cyboxCommon:CustomPropertiesType
            use: Must Not
          Certificate:
            type: X509CertificateObj:X509CertificateContentsType
            use: Must Not
          Raw_Certificate:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Certificate_Signature:
            type: X509CertificateObj:X509CertificateSignatureType
            use: Must Not
      X509CertificateSignatureType:
        use: Must Not
        is_vocab: false
        fields:
          Signature_Algorithm:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Signature:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      X509NonStandardExtensionsType:
        use: Must Not
        is_vocab: false
        fields:
          Netscape_Comment:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Netscape_Certificate_Type:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Old_Authority_Key_Identifier:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Old_Primary_Key_Attributes:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
      X509V3ExtensionsType:
        use: Must Not
        is_vocab: false
        fields:
          Basic_Constraints:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Name_Constraints:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Policy_Constraints:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Key_Usage:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Extended_Key_Usage:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Subject_Key_Identifier:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Authority_Key_Identifier:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Subject_Alternative_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Issuer_Alternative_Name:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Subject_Directory_Attributes:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          CRL_Distribution_Points:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Inhibit_Any_Policy:
            type: cyboxCommon:NonNegativeIntegerObjectPropertyType
            use: Must Not
          Private_Key_Usage_Period:
            type: X509CertificateObj:ValidityType
            use: Must Not
          Certificate_Policies:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
          Policy_Mappings:
            type: cyboxCommon:StringObjectPropertyType
            use: Must Not
  Campaign:
    project: stix
    constructs:
      AssociatedCampaignsType:
        use: Must Not
        is_vocab: false
        attributes:
          scope:
            type: stixCommon:RelationshipScopeEnum
            use: Must Not
        fields:
          Associated_Campaign:
            type: stixCommon:RelatedCampaignType
            use: Must Not
      AttributionType:
        use: Must Not
        is_vocab: false
        attributes:
          scope:
            type: stixCommon:RelationshipScopeEnum
            use: Must Not
        fields:
          Attributed_Threat_Actor:
            type: stixCommon:RelatedThreatActorType
            use: Must Not
      CampaignType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          timestamp:
            type: xs:dateTime
            use: Must Not
          version:
            type: campaign:CampaignVersionType
            use: Must Not
        fields:
          Title:
            type: xs:string
            use: Must Not
          Description:
            type: stixCommon:StructuredTextType
            use: Must Not
          Short_Description:
            type: stixCommon:StructuredTextType
            use: Must Not
          Names:
            type: campaign:NamesType
            use: Must Not
          Intended_Effect:
            type: stixCommon:StatementType
            use: Must Not
          Status:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
          Related_TTPs:
            type: campaign:RelatedTTPsType
            use: Must Not
          Related_Incidents:
            type: campaign:RelatedIncidentsType
            use: Must Not
          Related_Indicators:
            type: campaign:RelatedIndicatorsType
            use: Must Not
          Attribution:
            type: campaign:AttributionType
            use: Must Not
          Associated_Campaigns:
            type: campaign:AssociatedCampaignsType
            use: Must Not
          Confidence:
            type: stixCommon:ConfidenceType
            use: Must Not
          Activity:
            type: stixCommon:ActivityType
            use: Must Not
          Information_Source:
            type: stixCommon:InformationSourceType
            use: Must Not
          Handling:
            type: marking:MarkingType
            use: Must Not
          Related_Packages:
            type: stixCommon:RelatedPackageRefsType
            use: Must Not
      NamesType:
        use: Must Not
        is_vocab: false
        fields:
          Name:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
      RelatedIncidentsType:
        use: Must Not
        is_vocab: false
        attributes:
          scope:
            type: stixCommon:RelationshipScopeEnum
            use: Must Not
        fields:
          Related_Incident:
            type: stixCommon:RelatedIncidentType
            use: Must Not
      RelatedIndicatorsType:
        use: Must Not
        is_vocab: false
        attributes:
          scope:
            type: stixCommon:RelationshipScopeEnum
            use: Must Not
        fields:
          Related_Indicator:
            type: stixCommon:RelatedIndicatorType
            use: Must Not
      RelatedTTPsType:
        use: Must Not
        is_vocab: false
        attributes:
          scope:
            type: stixCommon:RelationshipScopeEnum
            use: Must Not
        fields:
          Related_TTP:
            type: stixCommon:RelatedTTPType
            use: Must Not
  STIX Common:
    project: stix
    constructs:
      ActivityType:
        use: Must Not
        is_vocab: false
        fields:
          Date_Time:
            type: stixCommon:DateTimeWithPrecisionType
            use: Must Not
          Description:
            type: stixCommon:StructuredTextType
            use: Must Not
      AddressAbstractType:
        use: Must Not
        is_vocab: false
      CampaignBaseType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          timestamp:
            type: xs:dateTime
            use: Must Not
      CampaignReferenceType:
        use: Must Not
        is_vocab: false
        attributes:
          idref:
            type: xs:QName
            use: Must Not
          timestamp:
            type: xs:dateTime
            use: Must Not
        fields:
          Names:
            type: stixCommon:NamesType
            use: Must Not
      ConfidenceAssertionChainType:
        use: Must Not
        is_vocab: false
        fields:
          Confidence_Assertion:
            type: stixCommon:ConfidenceType
            use: Must Not
      ConfidenceType:
        use: Must Not
        is_vocab: false
        attributes:
          timestamp:
            type: xs:dateTime
            use: Must Not
          timestamp_precision:
            type: stixCommon:DateTimePrecisionEnum
            use: Must Not
        fields:
          Value:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
          Description:
            type: stixCommon:StructuredTextType
            use: Must Not
          Source:
            type: stixCommon:InformationSourceType
            use: Must Not
          Confidence_Assertion_Chain:
            type: stixCommon:ConfidenceAssertionChainType
            use: Must Not
      ContributingSourcesType:
        use: Must Not
        is_vocab: false
        fields:
          Source:
            type: stixCommon:InformationSourceType
            use: Must Not
      ControlledVocabularyStringType:
        use: Must Not
        is_vocab: false
        attributes:
          vocab_name:
            type: xs:string
            use: Must Not
          vocab_reference:
            type: xs:anyURI
            use: Must Not
      CourseOfActionBaseType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          timestamp:
            type: xs:dateTime
            use: Must Not
      DateTimeWithPrecisionType:
        use: Must Not
        is_vocab: false
        attributes:
          precision:
            type: stixCommon:DateTimePrecisionEnum
            use: Must Not
      EncodedCDATAType:
        use: Must Not
        is_vocab: false
        attributes:
          encoded:
            type: xs:boolean
            use: Must Not
      ExploitTargetBaseType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          timestamp:
            type: xs:dateTime
            use: Must Not
      ExploitTargetsType:
        use: Must Not
        is_vocab: false
        fields:
          Exploit_Target:
            type: stixCommon:ExploitTargetBaseType
            use: Must Not
      GenericRelationshipListType:
        use: Must Not
        is_vocab: false
        attributes:
          scope:
            type: stixCommon:RelationshipScopeEnum
            use: Must Not
      GenericRelationshipType:
        use: Must Not
        is_vocab: false
        fields:
          Confidence:
            type: stixCommon:ConfidenceType
            use: Must Not
          Information_Source:
            type: stixCommon:InformationSourceType
            use: Must Not
          Relationship:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
      IdentityType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
        fields:
          Name:
            type: xs:string
            use: Must Not
          Related_Identities:
            type: stixCommon:RelatedIdentitiesType
            use: Must Not
      IncidentBaseType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          timestamp:
            type: xs:dateTime
            use: Must Not
      IndicatorBaseType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          timestamp:
            type: xs:dateTime
            use: Must Not
      InformationSourceType:
        use: Must Not
        is_vocab: false
        fields:
          Description:
            type: stixCommon:StructuredTextType
            use: Must Not
          Identity:
            type: stixCommon:IdentityType
            use: Must Not
          Role:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
          Contributing_Sources:
            type: stixCommon:ContributingSourcesType
            use: Must Not
          Time:
            type: cyboxCommon:TimeType
            use: Must Not
          Tools:
            type: cyboxCommon:ToolsInformationType
            use: Must Not
          References:
            type: stixCommon:ReferencesType
            use: Must Not
      KillChainPhaseReferenceType:
        use: Must Not
        is_vocab: false
        attributes:
          phase_id:
            type: xs:QName
            use: Must Not
          name:
            type: xs:string
            use: Must Not
          ordinality:
            type: xs:int
            use: Must Not
          kill_chain_id:
            type: xs:QName
            use: Must Not
          kill_chain_name:
            type: xs:string
            use: Must Not
      KillChainPhasesReferenceType:
        use: Must Not
        is_vocab: false
        fields:
          Kill_Chain_Phase:
            type: stixCommon:KillChainPhaseReferenceType
            use: Must Not
      KillChainPhaseType:
        use: Must Not
        is_vocab: false
        attributes:
          phase_id:
            type: xs:QName
            use: Must Not
          name:
            type: xs:string
            use: Must Not
          ordinality:
            type: xs:int
            use: Must Not
      KillChainsType:
        use: Must Not
        is_vocab: false
        fields:
          Kill_Chain:
            type: stixCommon:KillChainType
            use: Must Not
      KillChainType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          name:
            type: xs:string
            use: Must Not
          definer:
            type: ''
            use: Must Not
          reference:
            type: xs:anyURI
            use: Must Not
          number_of_phases:
            type: ''
            use: Must Not
        fields:
          Kill_Chain_Phase:
            type: stixCommon:KillChainPhaseType
            use: Must Not
      NamesType:
        use: Must Not
        is_vocab: false
        fields:
          Name:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
      ProfilesType:
        use: Must Not
        is_vocab: false
        fields:
          Profile:
            type: xs:anyURI
            use: Must Not
      ReferencesType:
        use: Must Not
        is_vocab: false
        fields:
          Reference:
            type: xs:anyURI
            use: Must Not
      RelatedCampaignReferenceType:
        use: Must Not
        is_vocab: false
        fields:
          Confidence:
            type: stixCommon:ConfidenceType
            use: Must Not
          Information_Source:
            type: stixCommon:InformationSourceType
            use: Must Not
          Relationship:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
          Campaign:
            type: stixCommon:CampaignReferenceType
            use: Must Not
      RelatedCampaignType:
        use: Must Not
        is_vocab: false
        fields:
          Confidence:
            type: stixCommon:ConfidenceType
            use: Must Not
          Information_Source:
            type: stixCommon:InformationSourceType
            use: Must Not
          Relationship:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
          Campaign:
            type: stixCommon:CampaignBaseType
            use: Must Not
      RelatedCourseOfActionType:
        use: Must Not
        is_vocab: false
        fields:
          Confidence:
            type: stixCommon:ConfidenceType
            use: Must Not
          Information_Source:
            type: stixCommon:InformationSourceType
            use: Must Not
          Relationship:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
          Course_Of_Action:
            type: stixCommon:CourseOfActionBaseType
            use: Must Not
      RelatedExploitTargetType:
        use: Must Not
        is_vocab: false
        fields:
          Confidence:
            type: stixCommon:ConfidenceType
            use: Must Not
          Information_Source:
            type: stixCommon:InformationSourceType
            use: Must Not
          Relationship:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
          Exploit_Target:
            type: stixCommon:ExploitTargetBaseType
            use: Must Not
      RelatedIdentitiesType:
        use: Must Not
        is_vocab: false
        fields:
          Related_Identity:
            type: stixCommon:RelatedIdentityType
            use: Must Not
      RelatedIdentityType:
        use: Must Not
        is_vocab: false
        fields:
          Confidence:
            type: stixCommon:ConfidenceType
            use: Must Not
          Information_Source:
            type: stixCommon:InformationSourceType
            use: Must Not
          Relationship:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
          Identity:
            type: stixCommon:IdentityType
            use: Must Not
      RelatedIncidentType:
        use: Must Not
        is_vocab: false
        fields:
          Confidence:
            type: stixCommon:ConfidenceType
            use: Must Not
          Information_Source:
            type: stixCommon:InformationSourceType
            use: Must Not
          Relationship:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
          Incident:
            type: stixCommon:IncidentBaseType
            use: Must Not
      RelatedIndicatorType:
        use: Must Not
        is_vocab: false
        fields:
          Confidence:
            type: stixCommon:ConfidenceType
            use: Must Not
          Information_Source:
            type: stixCommon:InformationSourceType
            use: Must Not
          Relationship:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
          Indicator:
            type: stixCommon:IndicatorBaseType
            use: Must Not
      RelatedObservableType:
        use: Must Not
        is_vocab: false
        fields:
          Confidence:
            type: stixCommon:ConfidenceType
            use: Must Not
          Information_Source:
            type: stixCommon:InformationSourceType
            use: Must Not
          Relationship:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
          Observable:
            type: cybox:ObservableType
            use: Must Not
      RelatedPackageRefsType:
        use: Must Not
        is_vocab: false
        fields:
          Package_Reference:
            type: stixCommon:RelatedPackageRefType
            use: Must Not
      RelatedPackageRefType:
        use: Must Not
        is_vocab: false
        attributes:
          idref:
            type: xs:QName
            use: Must Not
          timestamp:
            type: xs:dateTime
            use: Must Not
        fields:
          Confidence:
            type: stixCommon:ConfidenceType
            use: Must Not
          Information_Source:
            type: stixCommon:InformationSourceType
            use: Must Not
          Relationship:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
      RelatedThreatActorType:
        use: Must Not
        is_vocab: false
        fields:
          Confidence:
            type: stixCommon:ConfidenceType
            use: Must Not
          Information_Source:
            type: stixCommon:InformationSourceType
            use: Must Not
          Relationship:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
          Threat_Actor:
            type: stixCommon:ThreatActorBaseType
            use: Must Not
      RelatedTTPType:
        use: Must Not
        is_vocab: false
        fields:
          Confidence:
            type: stixCommon:ConfidenceType
            use: Must Not
          Information_Source:
            type: stixCommon:InformationSourceType
            use: Must Not
          Relationship:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
          TTP:
            type: stixCommon:TTPBaseType
            use: Must Not
      StatementType:
        use: Must Not
        is_vocab: false
        attributes:
          timestamp:
            type: xs:dateTime
            use: Must Not
          timestamp_precision:
            type: stixCommon:DateTimePrecisionEnum
            use: Must Not
        fields:
          Value:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
          Description:
            type: stixCommon:StructuredTextType
            use: Must Not
          Source:
            type: stixCommon:InformationSourceType
            use: Must Not
          Confidence:
            type: stixCommon:ConfidenceType
            use: Must Not
      StructuredTextType:
        use: Must Not
        is_vocab: false
        attributes:
          structuring_format:
            type: xs:string
            use: Must Not
      ThreatActorBaseType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          timestamp:
            type: xs:dateTime
            use: Must Not
      ToolInformationType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
        fields:
          Name:
            type: xs:string
            use: Must Not
          Type:
            type: cyboxCommon:ControlledVocabularyStringType
            use: Must Not
          Description:
            type: cyboxCommon:StructuredTextType
            use: Must Not
          References:
            type: cyboxCommon:ToolReferencesType
            use: Must Not
          Vendor:
            type: xs:string
            use: Must Not
          Version:
            type: xs:string
            use: Must Not
          Service_Pack:
            type: xs:string
            use: Must Not
          Tool_Specific_Data:
            type: cyboxCommon:ToolSpecificDataType
            use: Must Not
          Tool_Hashes:
            type: cyboxCommon:HashListType
            use: Must Not
          Tool_Configuration:
            type: cyboxCommon:ToolConfigurationType
            use: Must Not
          Execution_Environment:
            type: cyboxCommon:ExecutionEnvironmentType
            use: Must Not
          Errors:
            type: cyboxCommon:ErrorsType
            use: Must Not
          Metadata:
            type: cyboxCommon:MetadataType
            use: Must Not
          Compensation_Model:
            type: cyboxCommon:CompensationModelType
            use: Must Not
          Title:
            type: xs:string
            use: Must Not
          Short_Description:
            type: stixCommon:StructuredTextType
            use: Must Not
      TTPBaseType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          timestamp:
            type: xs:dateTime
            use: Must Not
  Data Markings:
    project: stix
    constructs:
      MarkingSpecificationType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          version:
            type: xs:string
            use: Must Not
        fields:
          Controlled_Structure:
            type: xs:string
            use: Must Not
          Marking_Structure:
            type: marking:MarkingStructureType
            use: Must Not
          Information_Source:
            type: stixCommon:InformationSourceType
            use: Must Not
      MarkingStructureType:
        use: Must Not
        is_vocab: false
        attributes:
          marking_model_name:
            type: xs:QName
            use: Must Not
          marking_model_ref:
            type: xs:anyURI
            use: Must Not
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
      MarkingType:
        use: Must Not
        is_vocab: false
        fields:
          Marking:
            type: marking:MarkingSpecificationType
            use: Must Not
  Course of Action:
    project: stix
    constructs:
      CourseOfActionType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          timestamp:
            type: xs:dateTime
            use: Must Not
          version:
            type: coa:CourseOfActionVersionType
            use: Must Not
        fields:
          Title:
            type: xs:string
            use: Must Not
          Stage:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
          Type:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
          Description:
            type: stixCommon:StructuredTextType
            use: Must Not
          Short_Description:
            type: stixCommon:StructuredTextType
            use: Must Not
          Objective:
            type: coa:ObjectiveType
            use: Must Not
          Parameter_Observables:
            type: cybox:ObservablesType
            use: Must Not
          Structured_COA:
            type: coa:StructuredCOAType
            use: Must Not
          Impact:
            type: stixCommon:StatementType
            use: Must Not
          Cost:
            type: stixCommon:StatementType
            use: Must Not
          Efficacy:
            type: stixCommon:StatementType
            use: Must Not
          Information_Source:
            type: stixCommon:InformationSourceType
            use: Must Not
          Handling:
            type: marking:MarkingType
            use: Must Not
          Related_COAs:
            type: coa:RelatedCOAsType
            use: Must Not
          Related_Packages:
            type: stixCommon:RelatedPackageRefsType
            use: Must Not
      ObjectiveType:
        use: Must Not
        is_vocab: false
        fields:
          Description:
            type: stixCommon:StructuredTextType
            use: Must Not
          Short_Description:
            type: stixCommon:StructuredTextType
            use: Must Not
          Applicability_Confidence:
            type: stixCommon:ConfidenceType
            use: Must Not
      RelatedCOAsType:
        use: Must Not
        is_vocab: false
        attributes:
          scope:
            type: stixCommon:RelationshipScopeEnum
            use: Must Not
        fields:
          Related_COA:
            type: stixCommon:RelatedCourseOfActionType
            use: Must Not
      StructuredCOAType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
  Exploit Target:
    project: stix
    constructs:
      AffectedSoftwareType:
        use: Must Not
        is_vocab: false
        attributes:
          scope:
            type: stixCommon:RelationshipScopeEnum
            use: Must Not
        fields:
          Affected_Software:
            type: stixCommon:RelatedObservableType
            use: Must Not
      CCE_IDInlineType:
        use: Must Not
        is_vocab: false
      ConfigurationType:
        use: Must Not
        is_vocab: false
        fields:
          Description:
            type: stixCommon:StructuredTextType
            use: Must Not
          Short_Description:
            type: stixCommon:StructuredTextType
            use: Must Not
          CCE_ID:
            type: CCE_IDInlineType
            use: Must Not
      CVE_IDInlineType:
        use: Must Not
        is_vocab: false
      CVSSBaseVectorType:
        use: Must Not
        is_vocab: false
      CVSSEnvironmentalVectorType:
        use: Must Not
        is_vocab: false
      CVSSScoreType:
        use: Must Not
        is_vocab: false
      CVSSTemporalVectorType:
        use: Must Not
        is_vocab: false
      CVSSVectorType:
        use: Must Not
        is_vocab: false
        fields:
          Overall_Score:
            type: et:CVSSScoreType
            use: Must Not
          Base_Score:
            type: et:CVSSScoreType
            use: Must Not
          Base_Vector:
            type: et:CVSSBaseVectorType
            use: Must Not
          Temporal_Score:
            type: et:CVSSScoreType
            use: Must Not
          Temporal_Vector:
            type: et:CVSSTemporalVectorType
            use: Must Not
          Environmental_Score:
            type: et:CVSSScoreType
            use: Must Not
          Environmental_Vector:
            type: et:CVSSEnvironmentalVectorType
            use: Must Not
      CWE_IDInlineType:
        use: Must Not
        is_vocab: false
      ExploitTargetType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          timestamp:
            type: xs:dateTime
            use: Must Not
          version:
            type: et:ExploitTargetVersionType
            use: Must Not
        fields:
          Title:
            type: xs:string
            use: Must Not
          Description:
            type: stixCommon:StructuredTextType
            use: Must Not
          Short_Description:
            type: stixCommon:StructuredTextType
            use: Must Not
          Vulnerability:
            type: et:VulnerabilityType
            use: Must Not
          Weakness:
            type: et:WeaknessType
            use: Must Not
          Configuration:
            type: et:ConfigurationType
            use: Must Not
          Potential_COAs:
            type: et:PotentialCOAsType
            use: Must Not
          Information_Source:
            type: stixCommon:InformationSourceType
            use: Must Not
          Handling:
            type: marking:MarkingType
            use: Must Not
          Related_Exploit_Targets:
            type: et:RelatedExploitTargetsType
            use: Must Not
          Related_Packages:
            type: stixCommon:RelatedPackageRefsType
            use: Must Not
      PotentialCOAsType:
        use: Must Not
        is_vocab: false
        attributes:
          scope:
            type: stixCommon:RelationshipScopeEnum
            use: Must Not
        fields:
          Potential_COA:
            type: stixCommon:RelatedCourseOfActionType
            use: Must Not
      RelatedExploitTargetsType:
        use: Must Not
        is_vocab: false
        attributes:
          scope:
            type: stixCommon:RelationshipScopeEnum
            use: Must Not
        fields:
          Related_Exploit_Target:
            type: stixCommon:RelatedExploitTargetType
            use: Must Not
      VulnerabilityType:
        use: Must Not
        is_vocab: false
        attributes:
          is_known:
            type: xs:boolean
            use: Must Not
          is_publicly_acknowledged:
            type: xs:boolean
            use: Must Not
        fields:
          Title:
            type: xs:string
            use: Must Not
          Description:
            type: stixCommon:StructuredTextType
            use: Must Not
          Short_Description:
            type: stixCommon:StructuredTextType
            use: Must Not
          CVE_ID:
            type: CVE_IDInlineType
            use: Must Not
          OSVDB_ID:
            type: xs:positiveInteger
            use: Must Not
          Source:
            type: xs:string
            use: Must Not
          CVSS_Score:
            type: et:CVSSVectorType
            use: Must Not
          Discovered_DateTime:
            type: stixCommon:DateTimeWithPrecisionType
            use: Must Not
          Published_DateTime:
            type: stixCommon:DateTimeWithPrecisionType
            use: Must Not
          Affected_Software:
            type: et:AffectedSoftwareType
            use: Must Not
          References:
            type: stixCommon:ReferencesType
            use: Must Not
      WeaknessType:
        use: Must Not
        is_vocab: false
        fields:
          Description:
            type: stixCommon:StructuredTextType
            use: Must Not
          CWE_ID:
            type: CWE_IDInlineType
            use: Must Not
  Incident:
    project: stix
    constructs:
      AffectedAssetsType:
        use: Must Not
        is_vocab: false
        fields:
          Affected_Asset:
            type: incident:AffectedAssetType
            use: Must Not
      AffectedAssetType:
        use: Must Not
        is_vocab: false
        fields:
          Type:
            type: incident:AssetTypeType
            use: Must Not
          Description:
            type: stixCommon:StructuredTextType
            use: Must Not
          Business_Function_Or_Role:
            type: stixCommon:StructuredTextType
            use: Must Not
          Ownership_Class:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
          Management_Class:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
          Location_Class:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
          Location:
            type: stixCommon:AddressAbstractType
            use: Must Not
          Nature_Of_Security_Effect:
            type: incident:NatureOfSecurityEffectType
            use: Must Not
          Structured_Description:
            type: cybox:ObservablesType
            use: Must Not
      AssetTypeType:
        use: Must Not
        is_vocab: false
        attributes:
          vocab_name:
            type: xs:string
            use: Must Not
          vocab_reference:
            type: xs:anyURI
            use: Must Not
          count_affected:
            type: ''
            use: Must Not
      AttributedThreatActorsType:
        use: Must Not
        is_vocab: false
        attributes:
          scope:
            type: stixCommon:RelationshipScopeEnum
            use: Must Not
        fields:
          Threat_Actor:
            type: stixCommon:RelatedThreatActorType
            use: Must Not
      CategoriesType:
        use: Must Not
        is_vocab: false
        fields:
          Category:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
      COARequestedType:
        use: Must Not
        is_vocab: false
        attributes:
          priority:
            type: ''
            use: Must Not
        fields:
          Time:
            type: incident:COATimeType
            use: Must Not
          Contributors:
            type: incident:ContributorsType
            use: Must Not
          Course_Of_Action:
            type: stixCommon:CourseOfActionBaseType
            use: Must Not
      COATakenType:
        use: Must Not
        is_vocab: false
        fields:
          Time:
            type: incident:COATimeType
            use: Must Not
          Contributors:
            type: incident:ContributorsType
            use: Must Not
          Course_Of_Action:
            type: stixCommon:CourseOfActionBaseType
            use: Must Not
      COATimeType:
        use: Must Not
        is_vocab: false
        fields:
          Start:
            type: stixCommon:DateTimeWithPrecisionType
            use: Must Not
          End:
            type: stixCommon:DateTimeWithPrecisionType
            use: Must Not
      ContributorsType:
        use: Must Not
        is_vocab: false
        fields:
          Contributor:
            type: cyboxCommon:ContributorType
            use: Must Not
      DirectImpactSummaryType:
        use: Must Not
        is_vocab: false
        fields:
          Asset_Losses:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
          Business-Mission_Disruption:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
          Response_And_Recovery_Costs:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
      EffectsType:
        use: Must Not
        is_vocab: false
        fields:
          Effect:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
      ExternalIDType:
        use: Must Not
        is_vocab: false
        attributes:
          source:
            type: xs:string
            use: Must Not
      ExternalImpactAssessmentModelType:
        use: Must Not
        is_vocab: false
        attributes:
          model_name:
            type: xs:string
            use: Must Not
          model_reference:
            type: xs:anyURI
            use: Must Not
      HistoryItemType:
        use: Must Not
        is_vocab: false
        fields:
          Action_Entry:
            type: incident:COATakenType
            use: Must Not
          Journal_Entry:
            type: incident:JournalEntryType
            use: Must Not
      HistoryType:
        use: Must Not
        is_vocab: false
        fields:
          History_Item:
            type: incident:HistoryItemType
            use: Must Not
      ImpactAssessmentType:
        use: Must Not
        is_vocab: false
        fields:
          Direct_Impact_Summary:
            type: incident:DirectImpactSummaryType
            use: Must Not
          Indirect_Impact_Summary:
            type: incident:IndirectImpactSummaryType
            use: Must Not
          Total_Loss_Estimation:
            type: incident:TotalLossEstimationType
            use: Must Not
          Impact_Qualification:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
          Effects:
            type: incident:EffectsType
            use: Must Not
          External_Impact_Assessment_Model:
            type: incident:ExternalImpactAssessmentModelType
            use: Must Not
      IncidentType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          timestamp:
            type: xs:dateTime
            use: Must Not
          version:
            type: incident:IncidentVersionType
            use: Must Not
          URL:
            type: ''
            use: Must Not
        fields:
          Title:
            type: xs:string
            use: Must Not
          External_ID:
            type: incident:ExternalIDType
            use: Must Not
          Time:
            type: incident:TimeType
            use: Must Not
          Description:
            type: stixCommon:StructuredTextType
            use: Must Not
          Short_Description:
            type: stixCommon:StructuredTextType
            use: Must Not
          Categories:
            type: incident:CategoriesType
            use: Must Not
          Reporter:
            type: stixCommon:InformationSourceType
            use: Must Not
          Responder:
            type: stixCommon:InformationSourceType
            use: Must Not
          Coordinator:
            type: stixCommon:InformationSourceType
            use: Must Not
          Victim:
            type: stixCommon:IdentityType
            use: Must Not
          Affected_Assets:
            type: incident:AffectedAssetsType
            use: Must Not
          Impact_Assessment:
            type: incident:ImpactAssessmentType
            use: Must Not
          Status:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
          Related_Indicators:
            type: incident:RelatedIndicatorsType
            use: Must Not
          Related_Observables:
            type: incident:RelatedObservablesType
            use: Must Not
          Leveraged_TTPs:
            type: incident:LeveragedTTPsType
            use: Must Not
          Attributed_Threat_Actors:
            type: incident:AttributedThreatActorsType
            use: Must Not
          Intended_Effect:
            type: stixCommon:StatementType
            use: Must Not
          Security_Compromise:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
          Discovery_Method:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
          Related_Incidents:
            type: incident:RelatedIncidentsType
            use: Must Not
          COA_Requested:
            type: incident:COARequestedType
            use: Must Not
          COA_Taken:
            type: incident:COATakenType
            use: Must Not
          Confidence:
            type: stixCommon:ConfidenceType
            use: Must Not
          Contact:
            type: stixCommon:InformationSourceType
            use: Must Not
          History:
            type: incident:HistoryType
            use: Must Not
          Information_Source:
            type: stixCommon:InformationSourceType
            use: Must Not
          Handling:
            type: marking:MarkingType
            use: Must Not
          Related_Packages:
            type: stixCommon:RelatedPackageRefsType
            use: Must Not
      IndirectImpactSummaryType:
        use: Must Not
        is_vocab: false
        fields:
          Loss_Of_Competitive_Advantage:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
          Brand_And_Market_Damage:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
          Increased_Operating_Costs:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
          Legal_And_Regulatory_Costs:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
      JournalEntryType:
        use: Must Not
        is_vocab: false
        attributes:
          author:
            type: xs:string
            use: Must Not
          time:
            type: xs:dateTime
            use: Must Not
          time_precision:
            type: stixCommon:DateTimePrecisionEnum
            use: Must Not
      LeveragedTTPsType:
        use: Must Not
        is_vocab: false
        attributes:
          scope:
            type: stixCommon:RelationshipScopeEnum
            use: Must Not
        fields:
          Leveraged_TTP:
            type: stixCommon:RelatedTTPType
            use: Must Not
      LossEstimationType:
        use: Must Not
        is_vocab: false
        attributes:
          amount:
            type: ''
            use: Must Not
          iso_currency_code:
            type: ''
            use: Must Not
      NatureOfSecurityEffectType:
        use: Must Not
        is_vocab: false
        fields:
          Property_Affected:
            type: incident:PropertyAffectedType
            use: Must Not
      NonPublicDataCompromisedType:
        use: Must Not
        is_vocab: false
        attributes:
          vocab_name:
            type: xs:string
            use: Must Not
          vocab_reference:
            type: xs:anyURI
            use: Must Not
          data_encrypted:
            type: xs:boolean
            use: Must Not
      PropertyAffectedType:
        use: Must Not
        is_vocab: false
        fields:
          Property:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
          Description_Of_Effect:
            type: stixCommon:StructuredTextType
            use: Must Not
          Type_Of_Availability_Loss:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
          Duration_Of_Availability_Loss:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
          Non_Public_Data_Compromised:
            type: incident:NonPublicDataCompromisedType
            use: Must Not
      RelatedIncidentsType:
        use: Must Not
        is_vocab: false
        attributes:
          scope:
            type: stixCommon:RelationshipScopeEnum
            use: Must Not
        fields:
          Related_Incident:
            type: stixCommon:RelatedIncidentType
            use: Must Not
      RelatedIndicatorsType:
        use: Must Not
        is_vocab: false
        attributes:
          scope:
            type: stixCommon:RelationshipScopeEnum
            use: Must Not
        fields:
          Related_Indicator:
            type: stixCommon:RelatedIndicatorType
            use: Must Not
      RelatedObservablesType:
        use: Must Not
        is_vocab: false
        attributes:
          scope:
            type: stixCommon:RelationshipScopeEnum
            use: Must Not
        fields:
          Related_Observable:
            type: stixCommon:RelatedObservableType
            use: Must Not
      TimeType:
        use: Must Not
        is_vocab: false
        fields:
          First_Malicious_Action:
            type: stixCommon:DateTimeWithPrecisionType
            use: Must Not
          Initial_Compromise:
            type: stixCommon:DateTimeWithPrecisionType
            use: Must Not
          First_Data_Exfiltration:
            type: stixCommon:DateTimeWithPrecisionType
            use: Must Not
          Incident_Discovery:
            type: stixCommon:DateTimeWithPrecisionType
            use: Must Not
          Incident_Opened:
            type: stixCommon:DateTimeWithPrecisionType
            use: Must Not
          Containment_Achieved:
            type: stixCommon:DateTimeWithPrecisionType
            use: Must Not
          Restoration_Achieved:
            type: stixCommon:DateTimeWithPrecisionType
            use: Must Not
          Incident_Reported:
            type: stixCommon:DateTimeWithPrecisionType
            use: Must Not
          Incident_Closed:
            type: stixCommon:DateTimeWithPrecisionType
            use: Must Not
      TotalLossEstimationType:
        use: Must Not
        is_vocab: false
        fields:
          Initial_Reported_Total_Loss_Estimation:
            type: incident:LossEstimationType
            use: Must Not
          Actual_Total_Loss_Estimation:
            type: incident:LossEstimationType
            use: Must Not
  Indicator:
    project: stix
    constructs:
      CompositeIndicatorExpressionType:
        use: Must Not
        is_vocab: false
        attributes:
          operator:
            type: indicator:OperatorTypeEnum
            use: Must Not
        fields:
          Indicator:
            type: indicator:IndicatorType
            use: Must Not
      IndicatorType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          timestamp:
            type: xs:dateTime
            use: Must Not
          version:
            type: indicator:IndicatorVersionType
            use: Must Not
          negate:
            type: xs:boolean
            use: Must Not
        fields:
          Title:
            type: xs:string
            use: Must Not
          Type:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
          Alternative_ID:
            type: xs:string
            use: Must Not
          Description:
            type: stixCommon:StructuredTextType
            use: Must Not
          Short_Description:
            type: stixCommon:StructuredTextType
            use: Must Not
          Valid_Time_Position:
            type: indicator:ValidTimeType
            use: Must Not
          Observable:
            type: cybox:ObservableType
            use: Must Not
          Composite_Indicator_Expression:
            type: indicator:CompositeIndicatorExpressionType
            use: Must Not
          Indicated_TTP:
            type: stixCommon:RelatedTTPType
            use: Must Not
          Kill_Chain_Phases:
            type: stixCommon:KillChainPhasesReferenceType
            use: Must Not
          Test_Mechanisms:
            type: indicator:TestMechanismsType
            use: Must Not
          Likely_Impact:
            type: stixCommon:StatementType
            use: Must Not
          Suggested_COAs:
            type: indicator:SuggestedCOAsType
            use: Must Not
          Handling:
            type: marking:MarkingType
            use: Must Not
          Confidence:
            type: stixCommon:ConfidenceType
            use: Must Not
          Sightings:
            type: indicator:SightingsType
            use: Must Not
          Related_Indicators:
            type: indicator:RelatedIndicatorsType
            use: Must Not
          Related_Campaigns:
            type: indicator:RelatedCampaignReferencesType
            use: Must Not
          Related_Packages:
            type: stixCommon:RelatedPackageRefsType
            use: Must Not
          Producer:
            type: stixCommon:InformationSourceType
            use: Must Not
      RelatedCampaignReferencesType:
        use: Must Not
        is_vocab: false
        attributes:
          scope:
            type: stixCommon:RelationshipScopeEnum
            use: Must Not
        fields:
          Related_Campaign:
            type: stixCommon:RelatedCampaignReferenceType
            use: Must Not
      RelatedIndicatorsType:
        use: Must Not
        is_vocab: false
        attributes:
          scope:
            type: stixCommon:RelationshipScopeEnum
            use: Must Not
        fields:
          Related_Indicator:
            type: stixCommon:RelatedIndicatorType
            use: Must Not
      RelatedObservablesType:
        use: Must Not
        is_vocab: false
        attributes:
          scope:
            type: stixCommon:RelationshipScopeEnum
            use: Must Not
        fields:
          Related_Observable:
            type: stixCommon:RelatedObservableType
            use: Must Not
      SightingsType:
        use: Must Not
        is_vocab: false
        attributes:
          sightings_count:
            type: xs:integer
            use: Must Not
        fields:
          Sighting:
            type: indicator:SightingType
            use: Must Not
      SightingType:
        use: Must Not
        is_vocab: false
        attributes:
          timestamp:
            type: xs:dateTime
            use: Must Not
          timestamp_precision:
            type: stixCommon:DateTimePrecisionEnum
            use: Must Not
        fields:
          Source:
            type: stixCommon:InformationSourceType
            use: Must Not
          Reference:
            type: xs:anyURI
            use: Must Not
          Confidence:
            type: stixCommon:ConfidenceType
            use: Must Not
          Description:
            type: stixCommon:StructuredTextType
            use: Must Not
          Related_Observables:
            type: indicator:RelatedObservablesType
            use: Must Not
      SuggestedCOAsType:
        use: Must Not
        is_vocab: false
        attributes:
          scope:
            type: stixCommon:RelationshipScopeEnum
            use: Must Not
        fields:
          Suggested_COA:
            type: stixCommon:RelatedCourseOfActionType
            use: Must Not
      TestMechanismsType:
        use: Must Not
        is_vocab: false
        fields:
          Test_Mechanism:
            type: indicator:TestMechanismType
            use: Must Not
      TestMechanismType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
        fields:
          Efficacy:
            type: stixCommon:StatementType
            use: Must Not
          Producer:
            type: stixCommon:InformationSourceType
            use: Must Not
      ValidTimeType:
        use: Must Not
        is_vocab: false
        fields:
          Start_Time:
            type: stixCommon:DateTimeWithPrecisionType
            use: Must Not
          End_Time:
            type: stixCommon:DateTimeWithPrecisionType
            use: Must Not
  STIX Core:
    project: stix
    constructs:
      CampaignsType:
        use: Must Not
        is_vocab: false
        fields:
          Campaign:
            type: stixCommon:CampaignBaseType
            use: Must Not
      CoursesOfActionType:
        use: Must Not
        is_vocab: false
        fields:
          Course_Of_Action:
            type: stixCommon:CourseOfActionBaseType
            use: Must Not
      IncidentsType:
        use: Must Not
        is_vocab: false
        fields:
          Incident:
            type: stixCommon:IncidentBaseType
            use: Must Not
      IndicatorsType:
        use: Must Not
        is_vocab: false
        fields:
          Indicator:
            type: stixCommon:IndicatorBaseType
            use: Must Not
      RelatedPackagesType:
        use: Must Not
        is_vocab: false
        attributes:
          scope:
            type: stixCommon:RelationshipScopeEnum
            use: Must Not
        fields:
          Related_Package:
            type: stix:RelatedPackageType
            use: Must Not
      RelatedPackageType:
        use: Must Not
        is_vocab: false
        fields:
          Confidence:
            type: stixCommon:ConfidenceType
            use: Must Not
          Information_Source:
            type: stixCommon:InformationSourceType
            use: Must Not
          Relationship:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
          Package:
            type: stix:STIXType
            use: Must Not
      STIXHeaderType:
        use: Must Not
        is_vocab: false
        fields:
          Title:
            type: xs:string
            use: Must Not
          Package_Intent:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
          Description:
            type: stixCommon:StructuredTextType
            use: Must Not
          Short_Description:
            type: stixCommon:StructuredTextType
            use: Must Not
          Profiles:
            type: stixCommon:ProfilesType
            use: Must Not
          Handling:
            type: marking:MarkingType
            use: Must Not
          Information_Source:
            type: stixCommon:InformationSourceType
            use: Must Not
      STIXType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          timestamp:
            type: xs:dateTime
            use: Must Not
          version:
            type: stix:STIXPackageVersionEnum
            use: Must Not
        fields:
          STIX_Header:
            type: stix:STIXHeaderType
            use: Must Not
          Observables:
            type: cybox:ObservablesType
            use: Must Not
          Indicators:
            type: stix:IndicatorsType
            use: Must Not
          TTPs:
            type: stix:TTPsType
            use: Must Not
          Exploit_Targets:
            type: stixCommon:ExploitTargetsType
            use: Must Not
          Incidents:
            type: stix:IncidentsType
            use: Must Not
          Courses_Of_Action:
            type: stix:CoursesOfActionType
            use: Must Not
          Campaigns:
            type: stix:CampaignsType
            use: Must Not
          Threat_Actors:
            type: stix:ThreatActorsType
            use: Must Not
          Related_Packages:
            type: stix:RelatedPackagesType
            use: Must Not
      ThreatActorsType:
        use: Must Not
        is_vocab: false
        fields:
          Threat_Actor:
            type: stixCommon:ThreatActorBaseType
            use: Must Not
      TTPsType:
        use: Must Not
        is_vocab: false
        fields:
          TTP:
            type: stixCommon:TTPBaseType
            use: Must Not
          Kill_Chains:
            type: stixCommon:KillChainsType
            use: Must Not
  STIX Vocabularies:
    project: stix
    constructs:
      AssetTypeVocab-1.0:
        use: Must Not
        is_vocab: true
      AttackerInfrastructureTypeVocab-1.0:
        use: Must Not
        is_vocab: true
      AttackerToolTypeVocab-1.0:
        use: Must Not
        is_vocab: true
      AvailabilityLossTypeVocab-1.0:
        use: Must Not
        is_vocab: true
      AvailabilityLossTypeVocab-1.1.1:
        use: Must Not
        is_vocab: false
        attributes:
          vocab_name:
            type: xs:string
            use: Must Not
          vocab_reference:
            type: xs:anyURI
            use: Must Not
      CampaignStatusVocab-1.0:
        use: Must Not
        is_vocab: true
      COAStageVocab-1.0:
        use: Must Not
        is_vocab: true
      CourseOfActionTypeVocab-1.0:
        use: Must Not
        is_vocab: true
      DiscoveryMethodVocab-1.0:
        use: Must Not
        is_vocab: true
      HighMediumLowVocab-1.0:
        use: Must Not
        is_vocab: true
      ImpactQualificationVocab-1.0:
        use: Must Not
        is_vocab: true
      ImpactRatingVocab-1.0:
        use: Must Not
        is_vocab: true
      IncidentCategoryVocab-1.0:
        use: Must Not
        is_vocab: true
      IncidentEffectVocab-1.0:
        use: Must Not
        is_vocab: true
      IncidentStatusVocab-1.0:
        use: Must Not
        is_vocab: true
      IndicatorTypeVocab-1.0:
        use: Must Not
        is_vocab: true
      IndicatorTypeVocab-1.1:
        use: Must Not
        is_vocab: true
      InformationSourceRoleVocab-1.0:
        use: Must Not
        is_vocab: true
      InformationTypeVocab-1.0:
        use: Must Not
        is_vocab: true
      IntendedEffectVocab-1.0:
        use: Must Not
        is_vocab: true
      LocationClassVocab-1.0:
        use: Must Not
        is_vocab: true
      LossDurationVocab-1.0:
        use: Must Not
        is_vocab: true
      LossPropertyVocab-1.0:
        use: Must Not
        is_vocab: true
      MalwareTypeVocab-1.0:
        use: Must Not
        is_vocab: true
      ManagementClassVocab-1.0:
        use: Must Not
        is_vocab: true
      MotivationVocab-1.0:
        use: Must Not
        is_vocab: true
      MotivationVocab-1.0.1:
        use: Must Not
        is_vocab: false
        attributes:
          vocab_name:
            type: xs:string
            use: Must Not
          vocab_reference:
            type: xs:anyURI
            use: Must Not
      MotivationVocab-1.1:
        use: Must Not
        is_vocab: true
      OwnershipClassVocab-1.0:
        use: Must Not
        is_vocab: true
      PackageIntentVocab-1.0:
        use: Must Not
        is_vocab: true
      PlanningAndOperationalSupportVocab-1.0:
        use: Must Not
        is_vocab: true
      PlanningAndOperationalSupportVocab-1.0.1:
        use: Must Not
        is_vocab: false
        attributes:
          vocab_name:
            type: xs:string
            use: Must Not
          vocab_reference:
            type: xs:anyURI
            use: Must Not
      SecurityCompromiseVocab-1.0:
        use: Must Not
        is_vocab: true
      SystemTypeVocab-1.0:
        use: Must Not
        is_vocab: true
      ThreatActorSophisticationVocab-1.0:
        use: Must Not
        is_vocab: true
      ThreatActorTypeVocab-1.0:
        use: Must Not
        is_vocab: true
  Threat Actor:
    project: stix
    constructs:
      AssociatedActorsType:
        use: Must Not
        is_vocab: false
        attributes:
          scope:
            type: stixCommon:RelationshipScopeEnum
            use: Must Not
        fields:
          Associated_Actor:
            type: stixCommon:RelatedThreatActorType
            use: Must Not
      AssociatedCampaignsType:
        use: Must Not
        is_vocab: false
        attributes:
          scope:
            type: stixCommon:RelationshipScopeEnum
            use: Must Not
        fields:
          Associated_Campaign:
            type: stixCommon:RelatedCampaignType
            use: Must Not
      ObservedTTPsType:
        use: Must Not
        is_vocab: false
        attributes:
          scope:
            type: stixCommon:RelationshipScopeEnum
            use: Must Not
        fields:
          Observed_TTP:
            type: stixCommon:RelatedTTPType
            use: Must Not
      ThreatActorType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          timestamp:
            type: xs:dateTime
            use: Must Not
          version:
            type: ta:ThreatActorVersionType
            use: Must Not
        fields:
          Title:
            type: xs:string
            use: Must Not
          Description:
            type: stixCommon:StructuredTextType
            use: Must Not
          Short_Description:
            type: stixCommon:StructuredTextType
            use: Must Not
          Identity:
            type: stixCommon:IdentityType
            use: Must Not
          Type:
            type: stixCommon:StatementType
            use: Must Not
          Motivation:
            type: stixCommon:StatementType
            use: Must Not
          Sophistication:
            type: stixCommon:StatementType
            use: Must Not
          Intended_Effect:
            type: stixCommon:StatementType
            use: Must Not
          Planning_And_Operational_Support:
            type: stixCommon:StatementType
            use: Must Not
          Observed_TTPs:
            type: ta:ObservedTTPsType
            use: Must Not
          Associated_Campaigns:
            type: ta:AssociatedCampaignsType
            use: Must Not
          Associated_Actors:
            type: ta:AssociatedActorsType
            use: Must Not
          Handling:
            type: marking:MarkingType
            use: Must Not
          Confidence:
            type: stixCommon:ConfidenceType
            use: Must Not
          Information_Source:
            type: stixCommon:InformationSourceType
            use: Must Not
          Related_Packages:
            type: stixCommon:RelatedPackageRefsType
            use: Must Not
  TTP:
    project: stix
    constructs:
      AttackPatternsType:
        use: Must Not
        is_vocab: false
        fields:
          Attack_Pattern:
            type: ttp:AttackPatternType
            use: Must Not
      AttackPatternType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          capec_id:
            type: "@capec_idInlineType"
            use: Must Not
        fields:
          Title:
            type: xs:string
            use: Must Not
          Description:
            type: stixCommon:StructuredTextType
            use: Must Not
          Short_Description:
            type: stixCommon:StructuredTextType
            use: Must Not
      BehaviorType:
        use: Must Not
        is_vocab: false
        fields:
          Attack_Patterns:
            type: ttp:AttackPatternsType
            use: Must Not
          Malware:
            type: ttp:MalwareType
            use: Must Not
          Exploits:
            type: ttp:ExploitsType
            use: Must Not
      ExploitsType:
        use: Must Not
        is_vocab: false
        fields:
          Exploit:
            type: ttp:ExploitType
            use: Must Not
      ExploitTargetsType:
        use: Must Not
        is_vocab: false
        attributes:
          scope:
            type: stixCommon:RelationshipScopeEnum
            use: Must Not
        fields:
          Exploit_Target:
            type: stixCommon:RelatedExploitTargetType
            use: Must Not
      ExploitType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
        fields:
          Title:
            type: xs:string
            use: Must Not
          Description:
            type: stixCommon:StructuredTextType
            use: Must Not
          Short_Description:
            type: stixCommon:StructuredTextType
            use: Must Not
      InfrastructureType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
        fields:
          Title:
            type: xs:string
            use: Must Not
          Type:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
          Description:
            type: stixCommon:StructuredTextType
            use: Must Not
          Short_Description:
            type: stixCommon:StructuredTextType
            use: Must Not
          Observable_Characterization:
            type: cybox:ObservablesType
            use: Must Not
      MalwareInstanceType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
        fields:
          Type:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
          Name:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
          Title:
            type: xs:string
            use: Must Not
          Description:
            type: stixCommon:StructuredTextType
            use: Must Not
          Short_Description:
            type: stixCommon:StructuredTextType
            use: Must Not
      MalwareType:
        use: Must Not
        is_vocab: false
        fields:
          Malware_Instance:
            type: ttp:MalwareInstanceType
            use: Must Not
      PersonasType:
        use: Must Not
        is_vocab: false
        fields:
          Persona:
            type: stixCommon:IdentityType
            use: Must Not
      RelatedTTPsType:
        use: Must Not
        is_vocab: false
        attributes:
          scope:
            type: stixCommon:RelationshipScopeEnum
            use: Must Not
        fields:
          Related_TTP:
            type: stixCommon:RelatedTTPType
            use: Must Not
      ResourceType:
        use: Must Not
        is_vocab: false
        fields:
          Tools:
            type: ttp:ToolsType
            use: Must Not
          Infrastructure:
            type: ttp:InfrastructureType
            use: Must Not
          Personas:
            type: ttp:PersonasType
            use: Must Not
      ToolsType:
        use: Must Not
        is_vocab: false
        fields:
          Tool:
            type: stixCommon:ToolInformationType
            use: Must Not
      TTPType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          timestamp:
            type: xs:dateTime
            use: Must Not
          version:
            type: ttp:TTPVersionType
            use: Must Not
        fields:
          Title:
            type: xs:string
            use: Must Not
          Description:
            type: stixCommon:StructuredTextType
            use: Must Not
          Short_Description:
            type: stixCommon:StructuredTextType
            use: Must Not
          Intended_Effect:
            type: stixCommon:StatementType
            use: Must Not
          Behavior:
            type: ttp:BehaviorType
            use: Must Not
          Resources:
            type: ttp:ResourceType
            use: Must Not
          Victim_Targeting:
            type: ttp:VictimTargetingType
            use: Must Not
          Exploit_Targets:
            type: ttp:ExploitTargetsType
            use: Must Not
          Related_TTPs:
            type: ttp:RelatedTTPsType
            use: Must Not
          Kill_Chain_Phases:
            type: stixCommon:KillChainPhasesReferenceType
            use: Must Not
          Information_Source:
            type: stixCommon:InformationSourceType
            use: Must Not
          Kill_Chains:
            type: stixCommon:KillChainsType
            use: Must Not
          Handling:
            type: marking:MarkingType
            use: Must Not
          Related_Packages:
            type: stixCommon:RelatedPackageRefsType
            use: Must Not
      VictimTargetingType:
        use: Must Not
        is_vocab: false
        fields:
          Identity:
            type: stixCommon:IdentityType
            use: Must Not
          Targeted_Systems:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
          Targeted_Information:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
          Targeted_Technical_Details:
            type: cybox:ObservablesType
            use: Must Not
  CIQ Address 3.0 Instance:
    project: stix
    constructs:
      CIQAddress3.0InstanceType:
        use: Must Not
        is_vocab: false
        fields:
          Location:
            type: a:AddressType
            use: Must Not
  CAPEC 2.7 Attack Pattern Instance:
    project: stix
    constructs:
      CAPEC2.7InstanceType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          capec_id:
            type: "@capec_idInlineType"
            use: Must Not
        fields:
          Title:
            type: xs:string
            use: Must Not
          Description:
            type: stixCommon:StructuredTextType
            use: Must Not
          Short_Description:
            type: stixCommon:StructuredTextType
            use: Must Not
          CAPEC:
            type: capec:Attack_PatternType
            use: Must Not
  CIQ Identity 3.0 Instance:
    project: stix
    constructs:
      CIQIdentity3.0InstanceType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
        fields:
          Name:
            type: xs:string
            use: Must Not
          Related_Identities:
            type: stixCommon:RelatedIdentitiesType
            use: Must Not
          Specification:
            type: stix-ciqidentity:STIXCIQIdentity3.0Type
            use: Must Not
          Role:
            type: xs:string
            use: Must Not
      STIXCIQIdentity3.0Type:
        use: Must Not
        is_vocab: false
  MAEC 4.1 Malware Instance:
    project: stix
    constructs:
      MAEC4.1InstanceType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
        fields:
          Type:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
          Name:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
          Title:
            type: xs:string
            use: Must Not
          Description:
            type: stixCommon:StructuredTextType
            use: Must Not
          Short_Description:
            type: stixCommon:StructuredTextType
            use: Must Not
          MAEC:
            type: maec:PackageType
            use: Must Not
  Simple Marking Instance:
    project: stix
    constructs:
      SimpleMarkingStructureType:
        use: Must Not
        is_vocab: false
        attributes:
          marking_model_name:
            type: xs:QName
            use: Must Not
          marking_model_ref:
            type: xs:anyURI
            use: Must Not
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
        fields:
          Statement:
            type: xs:string
            use: Must Not
  Terms Of Use Marking Instance:
    project: stix
    constructs:
      TermsOfUseMarkingStructureType:
        use: Must Not
        is_vocab: false
        attributes:
          marking_model_name:
            type: xs:QName
            use: Must Not
          marking_model_ref:
            type: xs:anyURI
            use: Must Not
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
        fields:
          Terms_Of_Use:
            type: xs:string
            use: Must Not
  TLP:
    project: stix
    constructs:
      TLPMarkingStructureType:
        use: Must Not
        is_vocab: false
        attributes:
          marking_model_name:
            type: xs:QName
            use: Must Not
          marking_model_ref:
            type: xs:anyURI
            use: Must Not
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          color:
            type: tlpMarking:TLPColorEnum
            use: Must Not
  Structured Course of Action Instance:
    project: stix
    constructs:
      GenericStructuredCOAType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          reference_location:
            type: xs:anyURI
            use: Must Not
        fields:
          Description:
            type: stixCommon:StructuredTextType
            use: Must Not
          Type:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
          Specification:
            type: stixCommon:EncodedCDATAType
            use: Must Not
  Generic Test Mechanism Instance:
    project: stix
    constructs:
      GenericTestMechanismType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
          reference_location:
            type: xs:anyURI
            use: Must Not
        fields:
          Efficacy:
            type: stixCommon:StatementType
            use: Must Not
          Producer:
            type: stixCommon:InformationSourceType
            use: Must Not
          Description:
            type: stixCommon:StructuredTextType
            use: Must Not
          Type:
            type: stixCommon:ControlledVocabularyStringType
            use: Must Not
          Specification:
            type: stixCommon:EncodedCDATAType
            use: Must Not
  Open IOC Test Mechanism Instance:
    project: stix
    constructs:
      OpenIOC2010TestMechanismType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
        fields:
          Efficacy:
            type: stixCommon:StatementType
            use: Must Not
          Producer:
            type: stixCommon:InformationSourceType
            use: Must Not
          ioc:
            type: ioc:IndicatorOfCompromise
            use: Must Not
  OVAL Test Mechanism Instance:
    project: stix
    constructs:
      OVAL5.10TestMechanismType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
        fields:
          Efficacy:
            type: stixCommon:StatementType
            use: Must Not
          Producer:
            type: stixCommon:InformationSourceType
            use: Must Not
          oval_definitions:
            type: oval-def:oval_definitions
            use: Must Not
          oval_variables:
            type: oval-var:oval_variables
            use: Must Not
  Snort Test Mechanism Instance:
    project: stix
    constructs:
      SnortTestMechanismType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
        fields:
          Efficacy:
            type: stixCommon:StatementType
            use: Must Not
          Producer:
            type: stixCommon:InformationSourceType
            use: Must Not
          Product_Name:
            type: xs:string
            use: Must Not
          Version:
            type: xs:string
            use: Must Not
          Rule:
            type: stixCommon:EncodedCDATAType
            use: Must Not
          Event_Filter:
            type: stixCommon:EncodedCDATAType
            use: Must Not
          Rate_Filter:
            type: stixCommon:EncodedCDATAType
            use: Must Not
          Event_Suppression:
            type: stixCommon:EncodedCDATAType
            use: Must Not
  YARA Test Mechanism Instance:
    project: stix
    constructs:
      YaraTestMechanismType:
        use: Must Not
        is_vocab: false
        attributes:
          id:
            type: xs:QName
            use: Must Not
          idref:
            type: xs:QName
            use: Must Not
        fields:
          Efficacy:
            type: stixCommon:StatementType
            use: Must Not
          Producer:
            type: stixCommon:InformationSourceType
            use: Must Not
          Version:
            type: xs:string
            use: Must Not
          Rule:
            type: stixCommon:EncodedCDATAType
            use: Must Not