File

digraph File {
	graph [bb="0,0,832,233.5",
		rankdir=LR
	];
	node [label="\N"];
	File	 [height=2.4444,
		label=<<table BORDER="0" CELLBORDER="1" CELLSPACING="0"> <tr> <td BGCOLOR="#CECECE" HREF="/idmef_parser/IODEFv2/File.html" TITLE="The File class describes a file; its associated metadata; and cryptographic hashes and signatures applied to it. "><FONT FACE="Nimbus Sans L">File</FONT></td> </tr>" %<tr><td  HREF="/idmef_parser/IODEFv2/File.html" TITLE="The name of the file."><FONT FACE="Nimbus Sans L">[STRING] FileName (0..1)</FONT></td></tr>%<tr><td  HREF="/idmef_parser/IODEFv2/File.html" TITLE="The size of the file in bytes."><FONT FACE="Nimbus Sans L">[INTEGER] FileSize (0..1)</FONT></td></tr>%<tr><td  HREF="/idmef_parser/IODEFv2/File.html" TITLE="The type of file per the IANA &quot;Media Types&quot; registry [IANA.Media].  Valid values correspond to the text in the &quot;Template&quot; column (e.g., &quot;application/pdf&quot;)."><FONT FACE="Nimbus Sans L">[STRING] FileType (0..1)</FONT></td></tr>%<tr><td  HREF="/idmef_parser/IODEFv2/File.html" TITLE="A URL reference to the file."><FONT FACE="Nimbus Sans L">[URL] URL (0..*)</FONT></td></tr>%<tr><td  HREF="/idmef_parser/IODEFv2/File.html" TITLE="The software application or operating system to which this file belongs or by which it can be processed."><FONT FACE="Nimbus Sans L">[SOFTWARE] AssociatedSoftware (0..1)</FONT></td></tr>%<tr><td  HREF="/idmef_parser/IODEFv2/File.html" TITLE="Mechanism by which to extend the data model to describe properties of the file."><FONT FACE="Nimbus Sans L">[EXTENSION] FileProperties (0..*)</FONT></td></tr>%<tr><td  HREF="/idmef_parser/IODEFv2/File.html" TITLE="See Section 3.3.2."><FONT FACE="Nimbus Sans L">[ID] observable-id (0..1)</FONT></td></tr>%</table>>,
		pos="133,88",
		shape=plaintext,
		width=3.6944];
	HashData	 [height=0.98611,
		label=<<table BORDER="0" CELLBORDER="1" CELLSPACING="0"> <tr> <td BGCOLOR="#CECECE" HREF="/idmef_parser/IODEFv2/HashData.html" TITLE="The HashData class describes different types of hashes on a given object (e.g., file, part of a file, email). "><FONT FACE="Nimbus Sans L">HashData</FONT></td> </tr>" %<tr><td  HREF="/idmef_parser/IODEFv2/HashData.html" TITLE="An identifier that references a subset of the object being hashed.  The semantics of this identifier are specified by the scope attribute."><FONT FACE="Nimbus Sans L">[STRING] HashTargetID (0..1)</FONT></td></tr>%<tr><td  HREF="/idmef_parser/IODEFv2/HashData.html" TITLE="A means by which to extend the scope attribute.  See Section 5.1.1."><FONT FACE="Nimbus Sans L">[STRING] scope (0..1)</FONT></td></tr>%</table>>,
		pos="426.5,148",
		shape=plaintext,
		width=2.8194];
	File -> HashData	 [label="0..1",
		lp="295.5,130.5",
		pos="e,324.72,127.19 266.01,115.19 282.34,118.53 298.9,121.91 314.86,125.18"];
	SignatureData	 [height=0.69444,
		label=<<table BORDER="0" CELLBORDER="1" CELLSPACING="0"> <tr> <td BGCOLOR="#CECECE" HREF="/idmef_parser/IODEFv2/SignatureData.html" TITLE="The SignatureData class describes different types of digital signatures on an object. "><FONT FACE="Nimbus Sans L">SignatureData</FONT></td> </tr>" %<tr><td  HREF="/idmef_parser/IODEFv2/SignatureData.html" TITLE="A given signature.  See Section 4.2 of [W3C.XMLSIG]."><FONT FACE="Nimbus Sans L">[] Signature (1..*)</FONT></td></tr>%</table>>,
		pos="426.5,69",
		shape=plaintext,
		width=1.7222];
	File -> SignatureData	 [label="0..1",
		lp="295.5,85.5",
		pos="e,364.3,73.027 266.01,79.389 296.41,77.422 327.59,75.403 354.3,73.674"];
	Hash	 [height=0.98611,
		label=<<table BORDER="0" CELLBORDER="1" CELLSPACING="0"> <tr> <td BGCOLOR="#CECECE" HREF="/idmef_parser/IODEFv2/Hash.html" TITLE="The Hash class describes a cryptographic hash value; the algorithm and application used to generate it; and the canonicalization method applied to the object being hashed. "><FONT FACE="Nimbus Sans L">Hash</FONT></td> </tr>" %<tr><td  HREF="/idmef_parser/IODEFv2/Hash.html" TITLE="The canonicalization method used on the object being hashed.  See Section 4.3.1 of [W3C.XMLSIG]."><FONT FACE="Nimbus Sans L">[]  (0..1)</FONT></td></tr>%<tr><td  HREF="/idmef_parser/IODEFv2/Hash.html" TITLE="The application used to calculate the hash."><FONT FACE="Nimbus Sans L">[SOFTWARE] Application (0..1)</FONT></td></tr>%</table>>,
		pos="709.5,198",
		shape=plaintext,
		width=2.9444];
	HashData -> Hash	 [label="0..*",
		lp="557.5,180.5",
		pos="e,603.39,179.25 528.27,165.98 549.43,169.72 571.88,173.69 593.51,177.51"];
	FuzzyHash	 [height=1.2778,
		label=<<table BORDER="0" CELLBORDER="1" CELLSPACING="0"> <tr> <td BGCOLOR="#CECECE" HREF="/idmef_parser/IODEFv2/FuzzyHash.html" TITLE="The FuzzyHash class describes a fuzzy hash and the application used to generate it. "><FONT FACE="Nimbus Sans L">FuzzyHash</FONT></td> </tr>" %<tr><td  HREF="/idmef_parser/IODEFv2/FuzzyHash.html" TITLE="The computed fuzzy hash value."><FONT FACE="Nimbus Sans L">[EXTENSION] FuzzyHashValue (1..*)</FONT></td></tr>%<tr><td  HREF="/idmef_parser/IODEFv2/FuzzyHash.html" TITLE="The application used to calculate the hash."><FONT FACE="Nimbus Sans L">[SOFTWARE] Application (0..1)</FONT></td></tr>%<tr><td  HREF="/idmef_parser/IODEFv2/FuzzyHash.html" TITLE="Mechanism by which to extend the data model."><FONT FACE="Nimbus Sans L">[EXTENSION] AdditionalData (0..*)</FONT></td></tr>%</table>>,
		pos="709.5,98",
		shape=plaintext,
		width=3.4028];
	HashData -> FuzzyHash	 [label="0..*",
		lp="557.5,132.5",
		pos="e,586.91,119.66 528.27,130.02 544.02,127.24 560.48,124.33 576.78,121.45"];
}