Location

  • リリースバージョン: Australia
  • 更新日 2026年03月12日
  • 所要時間：1分

    • A Location represents a geographic location. Locations are primarily used to give context to other SDOs. Locations apply for STIX 2.x.

    The location may contain, some or all of the following: region (North America), civic address (New York, US), latitude, and longitude.

    The Location SDO may relate to an Identity or Intrusion Set to indicate that the identity or intrusion set is in that location. It can also relate to a malware or attack pattern to indicate that the target victim is in a particular location.

    For example, a Location could be used in a relationship to describe that the Bourgeois Swallow intrusion set originates from Eastern Europe.

    At least one of the following properties or sets of properties must be provided:

    • region
    • country
    • latitude and longitude