coa.json

{
  "coa_type" : "Diplomatic Actions",
  "cost" : "High",
  "description" : "string",
  "efficacy" : "High",
  "external_ids" : [ "string" ],
  "external_references" : [ {
    "description" : "string",
    "external_id" : "string",
    "hashes" : [ "string" ],
    "source_name" : "string",
    "url" : "string"
  } ],
  "id" : "string",
  "impact" : "string",
  "language" : "string",
  "objective" : [ "string" ],
  "open_c2_coa" : {
    "action" : {
      "type" : "alert"
    },
    "actuator" : {
      "specifiers" : [ "string" ],
      "type" : "endpoint"
    },
    "id" : "string",
    "modifiers" : {
      "additional_properties" : {
        "context" : "string"
      },
      "delay" : "2016-01-01T01:01:01.000Z",
      "destination" : "copy-to",
      "duration" : "2016-01-01T01:01:01.000Z",
      "frequency" : "string",
      "id" : "string",
      "location" : "internal",
      "method" : [ "acl" ],
      "option" : "string",
      "response" : "acknowledge",
      "search" : "cve",
      "source" : "string",
      "time" : {
        "end_time" : "2016-01-01T01:01:01.000Z",
        "start_time" : "2016-01-01T01:01:01.000Z"
      }
    },
    "target" : {
      "specifiers" : "string",
      "type" : "acudid"
    },
    "type" : "structured_coa"
  },
  "related_COAs" : [ {
    "COA_id" : "string",
    "confidence" : "High",
    "relationship" : "string",
    "source" : "string"
  } ],
  "revision" : 10,
  "schema_version" : "1.3.21",
  "short_description" : "string",
  "source" : "string",
  "source_uri" : "string",
  "stage" : "Containment",
  "structured_coa_type" : "openc2",
  "timestamp" : "2016-01-01T01:01:01.000Z",
  "title" : "string",
  "tlp" : "green",
  "type" : "coa",
  "valid_time" : {
    "end_time" : "2016-01-01T01:01:01.000Z",
    "start_time" : "2016-01-01T01:01:01.000Z"
  }
}