CapturedProtocolTypeMAEC Package Schema

The CapturedProtocolType specifies the details of a network protocol that may be captured or otherwise manipulated in the malware analysis environment.


Field Name Type Description
@layer7_protocoloptional Layer7ProtocolEnum

The layer7_protocol field specifies the name of the Layer 7 network protocol (OSI model) captured or manipulated by the analysis environment.

@layer4_protocoloptional Layer4ProtocolEnum

The layer4_protocol field specifies the name of the Layer 4 network protocol (OSI model) captured or manipulated by the analysis environment.

@port_numberoptional positiveInteger

The port_number field specifies the port number for this network protocol that is captured or manipulated by the analysis environment.

@interaction_leveloptional InteractionLevelEnum

The interaction_level field specifies the relative level of interaction that the analysis environment has with the specified network protocol.