BehaviorPurposeTypeMAEC Bundle Schema

The BehaviorPurposeType captures the purpose behind a malware Behavior.

Field Name Type Description
Description0..1 string

The Description field contains a prose text description of the purpose of the Behavior, whether it was successful or not.

Vulnerability_Exploit0..1 ExploitType

The Vulnerability_Exploit field characterizes any vulnerability that a Behavior may have attempted to exploit, whether or not the exploitation was successful (where success is not necessarily known).