TAXII Default Query Schema
1.0
1/13/2014
The following specifies the fields and types of the TAXII Default Query Specification.
Copyright (c) 2014, The MITRE Corporation. All rights reserved. The contents of this file are subject to the terms of the TAXII License located at http://taxii.mitre.org/about/termsofuse.html. See the TAXII License for the specific language governing permissions and limitations for use of this schema. When distributing copies of the TAXII XML Message Binding Schema, this license header must be included.
XML schema associated with the TAXII XML Message Binding Specification. Note that in case of conflict, the specification is considered normative.
An XML element. Its body consists only of the indicated XML fields.
An XML AnyURI indicating the Targeting Expression Vocabulary that will be used in this query’s Target field(s).
The element name indicates that this is a Targeting Expression Information field. Its body consists only of the indicated XML Fields.
An XML AnyURI indicating a Capability Module.
An XML element. This element MUST consist only of the indicated XML fields. The subfields of this Criteria are the same as the parent Criteria (e.g., this is a recursive field), though they are not listed here.
An XML element. This element MUST consist only of the indicated XML fields.
An XML string containing an operator. Must be one of "AND" or "OR".
An XML string containing a Targeting Expression identifying the region of the record that is being targeted.
An XML element containing the Test. This element MUST consist only of the indicated XML fields.
An XML boolean indicating whether the result of the Criterion should be negated. The default value for this field is ‘false’.
An XML string containing the value of this parameter.
An XML AnyURI indicating the Capability Module used in this Test.
An XML string containing the relationship.
An XML string containing the name of this parameter.
An XML String containing a Targeting Expression. At least one of Preferred_Scope or Allowed_Scope MUST be present (though this is not schema enforced).
An XML String containing a Targeting Expression. At least one of Preferred_Scope or Allowed_Scope MUST be present (though this is not schema enforced).
An XML AnyURI containing a Targeting Expression Vocabulary ID.
The element name indicates that this is a TAXII Default Query. Its body MUST consist of only the indicated XML Fields.
The element name indicates that this is a query information structure. Its body consists only of the indicated fields.