The ActionEquivalenceType relates any Actions that are equivalent to each other, e.g., those that were found for the same Malware Subject when using different analysis tools. It can be used as a way of referencing equivalent actions as a single unit, such as for specifying the Action composition of a Behavior.
| Field Name | Type | Description |
|---|---|---|
| @idrequired | QName |
The required id field specifies a unique ID for the Action Equivalence. |
| Action_Reference1..n | ActionReferenceType |
The Action_Reference field specifies a reference to a single Action that is part of the Action Equivalency. |
