Fill Location Details
A Location represents a geographic location. The location may be described as any, some, or all of the following: region (e.g., North America), civic address (e.g. New York, US), latitude, and longitude.
Locations are primarily used to give context to other SDOs. The location SDO can be related to an Identity or Intrusion Set to indicate that the identity or intrusion set is located in that location. It can also be related to a malware or attack pattern to indicate that they target victims in that location. The Location object describes geographic areas, not governments, even in cases where that area might have a government.
Location component contains the following:
Basic Details
Common Fields
Custom Attributes
External References
Basic Details
Field Name | Required | Description |
|---|---|---|
Name | Mandatory | Specify the name of the location. |
Description | Optional | Specify the additional details about the location. |
Latitude | Optional | Specify the latitude of the location in decimal degrees. |
Longitude | Optional | Specify the longitude of the location in decimal degrees. |
Precision | Optional | Specify the precision of the coordinates specified by the latitude and longitude fields. |
Street Address | Optional | Specify the complete street address of the location. |
Administrative Area | Optional | Specify the state, province, or another sub-national administrative area for this location. |
City | Optional | Specify the city of the location. |
Country | Optional | Specify the country of the location. |
Region | Optional | Specify the region of the location. |
Postal Code | Optional | Specify the postal code of the location. |
Common Fields
Field Name | Description |
|---|---|
Tags | Specify the tags for the location. |
TLP | Specify the TLP, such as RED, AMber, GREEN, WHIITE, and NONE for the location. |
Created by Reference | Specify the entity that created the CTIX object. |
Revoked | Select this option to mark the component as revoked or invalid. |
Custom Attributes
Field Name | Description |
|---|---|
Add Custom Attributes | Specify the additional information that helps in improving the threat intelligence details. CTIX displays custom attributes created in Administration > Custom Entities Management. You can create multiple custom attributes for the location. |
External References
Use external references to include any non-STIX information that you may want to associate with this object.
Field Name | Description |
|---|---|
Source Name | Enter a source name. |
Description | Enter a description. |
External ID | Enter an external ID. |
URL | Enter the URL of the external reference. |
Hash Type | Select the hash type. |
Hash Value | Enter the hash value. |