@@ -50,15 +50,15 @@ class Incident(stix.BaseCoreComponent):
5050 status = ElementField ("Status" , vocabs .IncidentStatus )
5151 time = ElementField ("Time" , Time )
5252 victims = ElementField ("Victim" , Identity , multiple = True , key_name = "victims" )
53- attributed_threat_actors = ElementField ("Attributed_Threat_Actors" )
54- related_indicators = ElementField ("Related_Indicators" )
55- related_observables = ElementField ("Related_Observables" )
56- related_incidents = ElementField ("Related_Incidents" )
53+ attributed_threat_actors = ElementField ("Attributed_Threat_Actors" , type_ = "stix.incident.AttributedThreatActors" )
54+ related_indicators = ElementField ("Related_Indicators" , type_ = "stix.incident.RelatedIndicators" )
55+ related_observables = ElementField ("Related_Observables" , type_ = "stix.incident.RelatedObservables" )
56+ related_incidents = ElementField ("Related_Incidents" , type_ = "stix.incident.RelatedIncidents" )
5757 related_packages = ElementField ("Related_Packages" , RelatedPackageRefs )
58- affected_assets = ElementField ("Affected_Assets" )
59- categories = ElementField ("Categories" )
58+ affected_assets = ElementField ("Affected_Assets" , type_ = "stix.incident.AffectedAssets" )
59+ categories = ElementField ("Categories" , type_ = "stix.incident.IncidentCategories" )
6060 intended_effects = ElementField ("Intended_Effect" , Statement , multiple = True , key_name = "intended_effects" )
61- leveraged_ttps = ElementField ("Leveraged_TTPs" )
61+ leveraged_ttps = ElementField ("Leveraged_TTPs" , type_ = "stix.incident.LeveragedTTPs" )
6262 discovery_methods = ElementField ("Discovery_Method" , vocabs .DiscoveryMethod , multiple = True , key_name = "discovery_methods" )
6363 reporter = ElementField ("Reporter" , InformationSource )
6464 responders = ElementField ("Responder" , InformationSource , multiple = True , key_name = "responders" )
@@ -71,16 +71,6 @@ class Incident(stix.BaseCoreComponent):
7171 coa_requested = ElementField ("COA_Requested" , COARequested , multiple = True )
7272 history = ElementField ("History" , History )
7373
74- @classmethod
75- def _init_typed_fields (cls ):
76- cls .attributed_threat_actors .type_ = AttributedThreatActors
77- cls .related_indicators .type_ = RelatedIndicators
78- cls .related_observables .type_ = RelatedObservables
79- cls .related_incidents .type_ = RelatedIncidents
80- cls .affected_assets .type_ = AffectedAssets
81- cls .categories .type_ = IncidentCategories
82- cls .leveraged_ttps .type_ = LeveragedTTPs
83-
8474 def __init__ (self , id_ = None , idref = None , timestamp = None , title = None , description = None , short_description = None ):
8575 super (Incident , self ).__init__ (
8676 id_ = id_ ,
@@ -482,7 +472,3 @@ class _IntendedEffects(stix.TypedList):
482472
483473 def _fix_value (self , value ):
484474 return Statement (value = vocabs .IntendedEffect (value ))
485-
486-
487- Incident ._init_typed_fields ()
488-
0 commit comments