IDMEF and IODEF

IDMEF
- IDMEF-Message
- Alert
- Analyzer
- Assessment
- Classification
- File
- FileAccess
- Heartbeat
- Linkage
- Node
- Service
- Source
- Target
- User
IODEF
- IODEF-Document
- AlternativeID
- Assessment
- Contact
- EventData
- Expectation
- Flow
- History
- HistoryItem
- Incident
- Method
- Node
- Record
- RecordData
- RelatedActivity
- Service
- System

RFC
- IDMEF (4765)
- IODEF (5070)

IDMEF

IODEF

IDMEF

Action
AdditionalData
Address
Alert
Analyzer
AnalyzerTime
Assessment
Checksum

Classification
Confidence
CorrelationAlert
CreateTime
DetectTime
File
FileAccess
Heartbeat

IDMEF-Message
Impact
Inode
Linkage
Node
OverflowAlert
Process
Reference

SNMPService
Service
Source
Target
ToolAlert
User
UserId
WebService

IODEF

AdditionalData
Address
AlternativeID
Application
Assessment
Confidence
Contact
Counter
Email

EventData
Expectation
Flow
History
HistoryItem
IODEF-Document
Impact
Incident
IncidentID

Method
MonetaryImpact
Node
NodeRole
OperatingSystem
PostalAddress
Record
RecordData
RecordItem

RecordPattern
Reference
RegistryHandle
RelatedActivity
Service
System
TimeImpact