--- schema-version: v1.2.8 id: OASISSTIX-v1.2.1-Exploit-Target-CS01-Pt10 title: - content: 'STIX(TM) Version 1.2.1. Part 10: Exploit Target' language: - en script: - Latn format: text/plain type: main link: - content: http://docs.oasis-open.org/cti/stix/v1.2.1/cs01/part10-exploit-target/stix-v1.2.1-cs01-part10-exploit-target.html type: src type: standard docid: - id: OASIS STIX-v1.2.1-Exploit-Target-CS01-Pt10 type: OASIS primary: true docnumber: STIX-v1.2.1-Exploit-Target-CS01-Pt10 date: - type: issued value: '2016-05-05' contributor: - organization: name: - content: OASIS contact: - uri: https://www.oasis-open.org/ role: - description: - content: Standards Development Organization type: authorizer - type: publisher - organization: name: - content: OASIS Cyber Threat Intelligence (CTI) TC contact: - uri: https://www.oasis-open.org/committees/cti/ role: - description: - content: Committee type: authorizer - person: name: given: forename: - content: Richard language: - en script: - Latn surname: content: Struse language: - en script: - Latn affiliation: - organization: name: - content: DHS Office of Cybersecurity and Communications (CS&C) contact: - uri: http://www.dhs.gov/office-cybersecurity-and-communications contact: - email: Richard.Struse@HQ.DHS.GOV role: - description: - content: Chair type: editor - person: name: given: forename: - content: Sean language: - en script: - Latn surname: content: Barnum language: - en script: - Latn affiliation: - organization: name: - content: MITRE Corporation contact: - uri: http://www.mitre.org/ contact: - email: sbarnum@mitre.org role: - type: editor - person: name: given: forename: - content: Desiree language: - en script: - Latn surname: content: Beck language: - en script: - Latn affiliation: - organization: name: - content: MITRE Corporation contact: - uri: http://www.mitre.org/ contact: - email: dbeck@mitre.org role: - type: editor - person: name: given: forename: - content: Aharon language: - en script: - Latn surname: content: Chernin language: - en script: - Latn affiliation: - organization: name: - content: Soltra contact: - uri: http://www.soltra.com/ contact: - email: achernin@soltra.com role: - type: editor - person: name: given: forename: - content: Rich language: - en script: - Latn surname: content: Piazza language: - en script: - Latn affiliation: - organization: name: - content: MITRE Corporation contact: - uri: http://www.mitre.org/ contact: - email: rpiazza@mitre.org role: - type: editor language: - en script: - Latn abstract: - content: The Structured Threat Information Expression (STIX) framework defines nine core constructs and the relationships between them for the purposes of modeling cyber threat information and enabling cyber threat information analysis and sharing.  This specification document defines the Exploit Target construct, which conveys a vulnerability or weakness in software, systems, networks or configurations that is targeted for exploitation by the TTP of a Threat Actor. language: - en script: - Latn format: text/plain relation: - type: partOf bibitem: formattedref: content: OASIS STIX-v1.2.1-CS01 format: text/plain doctype: type: specification editorialgroup: - name: "OASIS Cyber Threat\r\nIntelligence (CTI) TC" ext: schema-version: v1.0.1 technology_area: - Cybersecurity