FileData

The FileData class describes a file or set of files.

digraph FileData { graph [bb="0,0,1091,233.5", rankdir=LR ]; node [label="\N"]; FileData [height=1.2778, label=<<table BORDER="0" CELLBORDER="1" CELLSPACING="0"> <tr> <td BGCOLOR="#CECECE" HREF="/idmef_parser/IODEFv2/FileData.html" TITLE="The FileData class describes a file or set of files. "><FONT FACE="Nimbus Sans L">FileData</FONT></td> </tr>" %<tr><td HREF="/idmef_parser/IODEFv2/FileData.html" TITLE="See Section 3.3.1."><FONT FACE="Nimbus Sans L">[ENUM] restriction (0..1)</FONT></td></tr>%<tr><td HREF="/idmef_parser/IODEFv2/FileData.html" TITLE="A means by which to extend the restriction attribute. See Section 5.1.1."><FONT FACE="Nimbus Sans L">[STRING] ext-restriction (0..1)</FONT></td></tr>%<tr><td HREF="/idmef_parser/IODEFv2/FileData.html" TITLE="See Section 3.3.2."><FONT FACE="Nimbus Sans L">[ID] observable-id (0..1)</FONT></td></tr>%</table>>, pos="100,88", shape=plaintext, width=2.7778]; File [height=2.4444, label=<<table BORDER="0" CELLBORDER="1" CELLSPACING="0"> <tr> <td BGCOLOR="#CECECE" HREF="/idmef_parser/IODEFv2/File.html" TITLE="The File class describes a file; its associated metadata; and cryptographic hashes and signatures applied to it. "><FONT FACE="Nimbus Sans L">File</FONT></td> </tr>" %<tr><td HREF="/idmef_parser/IODEFv2/File.html" TITLE="The name of the file."><FONT FACE="Nimbus Sans L">[STRING] FileName (0..1)</FONT></td></tr>%<tr><td HREF="/idmef_parser/IODEFv2/File.html" TITLE="The size of the file in bytes."><FONT FACE="Nimbus Sans L">[INTEGER] FileSize (0..1)</FONT></td></tr>%<tr><td HREF="/idmef_parser/IODEFv2/File.html" TITLE="The type of file per the IANA &quot;Media Types&quot; registry [IANA.Media]. Valid values correspond to the text in the &quot;Template&quot; column (e.g., &quot;application/pdf&quot;)."><FONT FACE="Nimbus Sans L">[STRING] FileType (0..1)</FONT></td></tr>%<tr><td HREF="/idmef_parser/IODEFv2/File.html" TITLE="A URL reference to the file."><FONT FACE="Nimbus Sans L">[URL] URL (0..*)</FONT></td></tr>%<tr><td HREF="/idmef_parser/IODEFv2/File.html" TITLE="The software application or operating system to which this file belongs or by which it can be processed."><FONT FACE="Nimbus Sans L">[SOFTWARE] AssociatedSoftware (0..1)</FONT></td></tr>%<tr><td HREF="/idmef_parser/IODEFv2/File.html" TITLE="Mechanism by which to extend the data model to describe properties of the file."><FONT FACE="Nimbus Sans L">[EXTENSION] FileProperties (0..*)</FONT></td></tr>%<tr><td HREF="/idmef_parser/IODEFv2/File.html" TITLE="See Section 3.3.2."><FONT FACE="Nimbus Sans L">[ID] observable-id (0..1)</FONT></td></tr>%</table>>, pos="392,88", shape=plaintext, width=3.6944]; FileData -> File [label="1..*", lp="229.5,95.5", pos="e,258.76,88 200.08,88 215.74,88 232.17,88 248.57,88"]; HashData [height=0.98611, label=<<table BORDER="0" CELLBORDER="1" CELLSPACING="0"> <tr> <td BGCOLOR="#CECECE" HREF="/idmef_parser/IODEFv2/HashData.html" TITLE="The HashData class describes different types of hashes on a given object (e.g., file, part of a file, email). "><FONT FACE="Nimbus Sans L">HashData</FONT></td> </tr>" %<tr><td HREF="/idmef_parser/IODEFv2/HashData.html" TITLE="An identifier that references a subset of the object being hashed. The semantics of this identifier are specified by the scope attribute."><FONT FACE="Nimbus Sans L">[STRING] HashTargetID (0..1)</FONT></td></tr>%<tr><td HREF="/idmef_parser/IODEFv2/HashData.html" TITLE="A means by which to extend the scope attribute. See Section 5.1.1."><FONT FACE="Nimbus Sans L">[STRING] scope (0..1)</FONT></td></tr>%</table>>, pos="685.5,148", shape=plaintext, width=2.8194]; File -> HashData [label="0..1", lp="554.5,130.5", pos="e,583.72,127.19 525.01,115.19 541.34,118.53 557.9,121.91 573.86,125.18"]; SignatureData [height=0.69444, label=<<table BORDER="0" CELLBORDER="1" CELLSPACING="0"> <tr> <td BGCOLOR="#CECECE" HREF="/idmef_parser/IODEFv2/SignatureData.html" TITLE="The SignatureData class describes different types of digital signatures on an object. "><FONT FACE="Nimbus Sans L">SignatureData</FONT></td> </tr>" %<tr><td HREF="/idmef_parser/IODEFv2/SignatureData.html" TITLE="A given signature. See Section 4.2 of [W3C.XMLSIG]."><FONT FACE="Nimbus Sans L">[] Signature (1..*)</FONT></td></tr>%</table>>, pos="685.5,69", shape=plaintext, width=1.7222]; File -> SignatureData [label="0..1", lp="554.5,85.5", pos="e,623.3,73.027 525.01,79.389 555.41,77.422 586.59,75.403 613.3,73.674"]; Hash [height=0.98611, label=<<table BORDER="0" CELLBORDER="1" CELLSPACING="0"> <tr> <td BGCOLOR="#CECECE" HREF="/idmef_parser/IODEFv2/Hash.html" TITLE="The Hash class describes a cryptographic hash value; the algorithm and application used to generate it; and the canonicalization method applied to the object being hashed. "><FONT FACE="Nimbus Sans L">Hash</FONT></td> </tr>" %<tr><td HREF="/idmef_parser/IODEFv2/Hash.html" TITLE="The canonicalization method used on the object being hashed. See Section 4.3.1 of [W3C.XMLSIG]."><FONT FACE="Nimbus Sans L">[] (0..1)</FONT></td></tr>%<tr><td HREF="/idmef_parser/IODEFv2/Hash.html" TITLE="The application used to calculate the hash."><FONT FACE="Nimbus Sans L">[SOFTWARE] Application (0..1)</FONT></td></tr>%</table>>, pos="968.5,198", shape=plaintext, width=2.9444]; HashData -> Hash [label="0..*", lp="816.5,180.5", pos="e,862.39,179.25 787.27,165.98 808.43,169.72 830.88,173.69 852.51,177.51"]; FuzzyHash [height=1.2778, label=<<table BORDER="0" CELLBORDER="1" CELLSPACING="0"> <tr> <td BGCOLOR="#CECECE" HREF="/idmef_parser/IODEFv2/FuzzyHash.html" TITLE="The FuzzyHash class describes a fuzzy hash and the application used to generate it. "><FONT FACE="Nimbus Sans L">FuzzyHash</FONT></td> </tr>" %<tr><td HREF="/idmef_parser/IODEFv2/FuzzyHash.html" TITLE="The computed fuzzy hash value."><FONT FACE="Nimbus Sans L">[EXTENSION] FuzzyHashValue (1..*)</FONT></td></tr>%<tr><td HREF="/idmef_parser/IODEFv2/FuzzyHash.html" TITLE="The application used to calculate the hash."><FONT FACE="Nimbus Sans L">[SOFTWARE] Application (0..1)</FONT></td></tr>%<tr><td HREF="/idmef_parser/IODEFv2/FuzzyHash.html" TITLE="Mechanism by which to extend the data model."><FONT FACE="Nimbus Sans L">[EXTENSION] AdditionalData (0..*)</FONT></td></tr>%</table>>, pos="968.5,98", shape=plaintext, width=3.4028]; HashData -> FuzzyHash [label="0..*", lp="816.5,132.5", pos="e,845.91,119.66 787.27,130.02 803.02,127.24 819.48,124.33 835.78,121.45"]; }


Aggregates

File (1..*)

A description of a file. See Section 3.25.1.

restriction (0..1)

See Section 3.3.1.

ext-restriction (0..1)

A means by which to extend the restriction attribute. See Section 5.1.1.

observable-id (0..1)

See Section 3.3.2.



IDMEFv1


IDMEFv2


IODEFv1


IODEFv2