<!--

Sample file: python-stix parsing.

Copyright (c) 2015, The MITRE Corporation. All rights reserved.

The contents of this file are subject to the terms of the STIX License located at http://stix.mitre.org/about/termsofuse.html.

-->

<stix:STIX_Package

xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"

xmlns:stix="http://stix.mitre.org/stix-1"

xmlns:indicator="http://stix.mitre.org/Indicator-2"

xmlns:cybox="http://cybox.mitre.org/cybox-2"

xmlns:AddressObject="http://cybox.mitre.org/objects#AddressObject-2"

xmlns:cyboxVocabs="http://cybox.mitre.org/default_vocabularies-2"

xmlns:stixVocabs="http://stix.mitre.org/default_vocabularies-1"

xmlns:example="http://example.com/"

id="example:STIXPackage-33fe3b22-0201-47cf-85d0-97c02164528d"

timestamp="2014-05-08T09:00:00.000000Z"

version="1.2">

<stix:Indicators>

<stix:Indicator xsi:type="indicator:IndicatorType" id="example:Indicator-33fe3b22-0201-47cf-85d0-97c02164528d" timestamp="2014-05-08T09:00:00.000000Z">

<indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>

<indicator:Description>Sample IP Address Indicator for this watchlist. This contains one indicator with a set of three IP addresses in the watchlist.</indicator:Description>

<indicator:Observable id="example:Observable-1c798262-a4cd-434d-a958-884d6980c459">

<cybox:Object id="example:Object-1980ce43-8e03-490b-863a-ea404d12242e">

<cybox:Properties xsi:type="AddressObject:AddressObjectType" category="ipv4-addr">

<AddressObject:Address_Value condition="Equals" apply_condition="ANY">10.0.0.0##comma##10.0.0.1##comma##10.0.0.2</AddressObject:Address_Value>

</cybox:Properties>

</cybox:Object>

</indicator:Observable>

</stix:Indicator>

</stix:Indicators>

</stix:STIX_Package>