## Table of Contents

Components | Resource Hierarchy

Group by:

urn:schema:guide:schema:digitalhazmat

| Main Schema
| SchemaGuideSchema.xsd

urn:us:gov:ic:digitalhazmat

| Imported Schemas
| DHZM.xsd

| Elements
| ContentCollectionExternalId ContentCollectionHost ContentCollectionHostList ContentCollectionMethod ContentCollectionMethodList ContentCollectionTimestamp ContentEncodedSize ContentEncodingMethod ContentSize DestinationDomain DigitalHazMat DigitalHazMatAssertion OriginContentArch OriginContentCreated OriginContentDevice OriginContentFilename OriginContentGroup OriginContentInode OriginContentLastAccessed OriginContentLastModified OriginContentOS OriginContentOSVersion OriginContentOwner OriginContentPath OriginContentPathList OriginContentSourceIpv4 OriginContentSourceIpv6 OriginContentSourceMac OriginContentSourceSystem OriginContentUid ProvenanceAssertion SourceDomain WorkFlowId

| Complex Types
| ContentCollectionHostListType ContentCollectionMethodListType DigitalHazMatAssertionType OriginContentPathListType ProvenanceAssertionType

| Simple Types
| ContentCollectionExternalIdType ContentCollectionHostType ContentCollectionMethodType ContentCollectionTimestampType ContentEncodedSizeType ContentEncodingMethodType ContentSizeType DESVersionType DestinationDomainType DigitalHazMatType OriginContentArchType OriginContentCreatedType OriginContentDeviceType OriginContentFilenameType OriginContentGroupType OriginContentInodeType OriginContentLastAccessedType OriginContentLastModifiedType OriginContentOSType OriginContentOSVersionType OriginContentOwnerType OriginContentPathType OriginContentSourceIpv4Type OriginContentSourceIpv6Type OriginContentSourceMacType OriginContentSourceSystemType OriginContentUidType SourceDomainType WorkFlowIdType

| Attributes
| @DESVersion

urn:us:gov:ic:tdf

| Imported Schemas
| DHZM-TDF.xsd

| Elements
| AssertionGroup/Assertion AssertionGroup/HandlingAssertion AssertionType/StatementMetadata AttachedKeyType/KeyValue BindingGroup/Binding BindingGroup/ReferenceList BindingType/BoundValueList BindingType/SignatureValue BindingType/Signer BoundValueListType/BoundValue EncryptionInformationGroup/EncryptionInformation EncryptionInformationGroup/EncryptionInformation/EncryptionMethod EncryptionInformationGroup/EncryptionInformation/KeyAccess EncryptionInformationGroupRequired/EncryptionInformation EncryptionInformationGroupRequired/EncryptionInformation/EncryptionMethod EncryptionInformationGroupRequired/EncryptionInformation/KeyAccess EncryptionMethodType/AdditionalAuthenticatedData EncryptionMethodType/AuthenticationTag EncryptionMethodType/HashAlgorithm EncryptionMethodType/IVParams EncryptionMethodType/KeyEncodingFormat EncryptionMethodType/KeySize EncryptionMethodType/MGFAlgorithm EncryptionMethodType/Nonce EncryptionMethodType/OaepParams EncryptionMethodType/Tweak HandlingAssertionType/HandlingStatement KeyAccessType/AttachedKey KeyAccessType/PasswordKey KeyAccessType/PreSharedKey KeyAccessType/RemoteStoredKey KeyAccessType/WrappedKey KeyAccessType/WrappedPDPKey PayloadGroup/Base64BinaryPayload PayloadGroup/ReferenceValuePayload ReferenceListType/Reference ReferenceValueType/ReferenceValueBlock StatementGroup/Base64BinaryStatement StatementGroup/ReferenceStatement StatementGroup/StringStatement StatementGroup/StructuredStatement TrustedDataCollection TrustedDataObject WrappedKeyType/KeyValue WrappedPDPKeyType/EncryptedPolicyObject

| Complex Types
| AssertionType AttachedKeyType Base64BinaryValueType BindingType BoundValueListType BoundValueType EncryptionMethodType HandlingAssertionType HandlingStatementType KeyAccessType PasswordKeyType PreSharedKeyType ReferenceListType ReferenceType ReferenceValueBlockType ReferenceValueType RemoteStoredKeyType SignatureValueType StatementMetadataType StringValueType StructuredValueType TrustedDataCollectionType TrustedDataObjectType WrappedKeyType WrappedPDPKeyType

| Simple Types
| Base64BinaryRestrictedType MediaTypeType

| Attributes
| @filename @id @idRef @includesStatementMetadata @isEncrypted @mediaType @normalizationMethod @scope @uri @version AssertionType/@type BindingType/Signer/@issuer BindingType/Signer/@serial BindingType/Signer/@subject BoundValueType/@hashAlgorithm EncryptionInformationGroup/EncryptionInformation/@sequenceNum EncryptionInformationGroupRequired/EncryptionInformation/@sequenceNum EncryptionMethodType/@algorithm HandlingAssertionType/@appliesToState PasswordKeyType/@algorithm PreSharedKeyType/@alias PreSharedKeyType/@store RemoteStoredKeyType/@protocol SignatureValueType/@signatureAlgorithm StatementMetadataType/@appliesToState WrappedKeyType/@keyIdentifier WrappedPDPKeyType/@keyIdentifier

| Element Groups
| AssertionGroup BindingGroup EncryptionInformationGroup EncryptionInformationGroupRequired PayloadGroup StatementGroup

urn:us:gov:ic:cvenum:tdf:signaturealgorithm

| Imported Schemas
| CVEnumTDFSignatureAlgorithm.xsd

| Simple Types
| CVEnumTDFSignatureAlgorithm

urn:us:gov:ic:cvenum:tdf:hashalgorithm

| Imported Schemas
| CVEnumTDFHashAlgorithm.xsd

| Simple Types
| CVEnumTDFHashAlgorithm

urn:us:gov:ic:cvenum:tdf:state

| Imported Schemas
| CVEnumTDFAppliesToState.xsd

| Simple Types
| CVEnumTDFAppliesToState

urn:us:gov:ic:sf:hashverification

| Imported Schemas
| HashVerification.xsd

| Elements
| BlockHash ContentDecodedHashVerification ContentEncodedHashVerification HashVerification PayloadHash TotalHash UnblockedHashVerification

| Simple Types
| BlockSizeType BlockType HashTypeType HashValueType TotalBlocksType

| Complex Types
| BlockHashType HashVerificationType TotalHashType UnblockedHashVerificationType

| Attributes
| @block @blockSize @hashType @totalBlocks

| Element Groups
| BlockedHashGroup

urn:us:gov:ic:sf

| Imported Schemas
| IC-SF.xsd

| Attributes
| @DESVersion

urn:us:gov:ic:edh

| Imported Schemas
| IC-EDH.xsd

| Elements
| edh:AuthorizationReference edh:Country edh:DataItemCreateDateTime edh:DataSet edh:Edh edh:ExternalEdh edh:Organization edh:ResponsibleEntity edh:SubOrganization

| Complex Types
| edh:EdhType edh:ResponsibleEntityType edh:ResponsibleEntityWithRoleType

| Simple Types
| edh:AuthorizationReferenceType edh:ResponsibleEntityRoleType

| Attributes
| @edh:DESVersion edh:ResponsibleEntityWithRoleType/@edh:role

urn:us:gov:ic:arh

| Imported Schemas
| IC-ARH.xsd

| Elements
| arh:ExternalSecurity arh:Security

| Complex Types
| arh:ExternalSecurityType arh:SecurityType

| Attributes
| @arh:DESVersion

| Attribute Groups
| arh:ARHRootNodeAttributeOptionGroup arh:ExternalResourceNodeAttributeGroup arh:ResourceNodeAttributeGroup

urn:us:gov:ic:ism

| Imported Schemas
| IC-ISM.xsd

| Elements
| Notice NoticeExternal NoticeExternalList NoticeList NoticeText

| Complex Types
| LongStringWithSecurityType NoticeBaseType NoticeExternalListType NoticeExternalType NoticeListType NoticeType ShortStringWithSecurityType

| Simple Types
| LongStringType ShortStringType

| Attributes
| @DESVersion @FGIsourceOpen @FGIsourceProtected @ISMCATCESVersion @SARIdentifier @SCIcontrols @SchemaguideSecurityAttributesGroup @SchemaguideSecurityAttributesOptionGroup @atomicEnergyMarkings @classification @classificationReason @classifiedBy @compilationReason @compliesWith @createDate @cuiBasic @cuiControlledBy @cuiControlledByOffice @cuiDecontrolDate @cuiDecontrolEvent @cuiPOC @cuiSpecified @declassDate @declassEvent @declassException @derivativelyClassifiedBy @derivedFrom @displayOnlyTo @disseminationControls @excludeFromRollup @exemptFrom @externalNotice @handleViaChannels @hasApproximateMarkings @highWaterNATO @joint @noAggregation @nonICmarkings @nonUSControls @noticeDate @noticeProseID @noticeReason @noticeType @ownerProducer @pocType @releasableTo @resourceElement @secondBannerLine @unregisteredNoticeType

| Attribute Groups
| CUIONLYattributesGroup ISMNoticeAttributeGroup ISMNoticeBaseAttributeGroup ISMNoticeExternalAttributeGroup ISMResourceAttributeGroup ISMResourceAttributeOptionGroup ISMRootNodeAttributeGroup ISMRootNodeAttributeOptionGroup NoticeAttributesGroup NoticeAttributesOptionGroup NoticeExternalAttributesGroup NoticeExternalAttributesOptionGroup POCAttributeGroup ResourceNodeAttributeGroup ResourceNodeAttributeOptionGroup SecurityAttributesGroup SecurityAttributesOptionGroup

urn:us:gov:ic:cvenum:ism:25x

| Imported Schemas
| CVEnumISM25X.xsd

| Simple Types
| ism25x:CVEnumISM25X ism25x:CVEnumISM25XValues

urn:us:gov:ic:cvenum:ism:atomicEnergyMarkings

| Imported Schemas
| CVEnumISMAtomicEnergyMarkings.xsd

| Simple Types
| ismatomic:CVEnumISMatomicEnergyMarkings ismatomic:CVEnumISMatomicEnergyMarkingsValues

urn:us:gov:ic:cvenum:ism:classification:all

| Imported Schemas
| CVEnumISMClassificationAll.xsd

| Simple Types
| ismclassall:CVEnumISMClassificationAll

urn:us:gov:ic:cvenum:ism:dissem

| Imported Schemas
| CVEnumISMDissem.xsd

| Simple Types
| ismdissem:CVEnumISMDissem ismdissem:CVEnumISMDissemValues

urn:us:gov:ic:cvenum:ismcat:fgiopen

| Imported Schemas
| CVEnumISMCATFGIOpen.xsd

| Simple Types
| ismcatfgio:CVEnumISMCATFGIOpen ismcatfgio:CVEnumISMCATFGIOpenValues

urn:us:gov:ic:cvenum:ismcat:fgiprotected

| Imported Schemas
| CVEnumISMCATFGIProtected.xsd

| Simple Types
| ismcatfgip:CVEnumISMCATFGIProtected ismcatfgip:CVEnumISMCATFGIProtectedValues

urn:us:gov:ic:cvenum:ism:HighWaterNATO

| Imported Schemas
| CVEnumISMHighWaterNATO.xsd

| Simple Types
| ismhighwaternato:CVEnumISMHighWaterNATO

urn:us:gov:ic:cvenum:ism:nonic

| Imported Schemas
| CVEnumISMNonIC.xsd

| Simple Types
| ismnonic:CVEnumISMNonIC ismnonic:CVEnumISMNonICValues

urn:us:gov:ic:cvenum:ism:nonuscontrols

| Imported Schemas
| CVEnumISMNonUSControls.xsd

| Simple Types
| ismnonus:CVEnumISMNonUSControls ismnonus:CVEnumISMNonUSControlsValues

urn:us:gov:ic:cvenum:ism:notice

| Imported Schemas
| CVEnumISMNotice.xsd

| Simple Types
| ismnotice:CVEnumISMNotice ismnotice:CVEnumISMNoticeValues

urn:us:gov:ic:cvenum:ism:noticeprose

| Imported Schemas
| CVEnumISMNoticeProse.xsd

| Simple Types
| ismnoticeprose:CVEnumISMNoticeProse ismnoticeprose:CVEnumISMNoticeProseValues

urn:us:gov:ic:cvenum:ismcat:ownerproducer

| Imported Schemas
| CVEnumISMCATOwnerProducer.xsd

| Simple Types
| ismcatownpro:CVEnumISMCATOwnerProducer ismcatownpro:CVEnumISMCATOwnerProducerValues

urn:us:gov:ic:cvenum:ism:pocType

| Imported Schemas
| CVEnumISMPocType.xsd

| Simple Types
| ismpoctype:CVEnumISMPocType ismpoctype:CVEnumISMPocTypeValues

urn:us:gov:ic:cvenum:ismcat:relto

| Imported Schemas
| CVEnumISMCATRelTo.xsd

| Simple Types
| ismcatrelto:CVEnumISMCATRelTo ismcatrelto:CVEnumISMCATRelToValues

urn:us:gov:ic:cvenum:ism:sar

| Imported Schemas
| CVEnumISMSAR.xsd

| Simple Types
| ismsar:CVEnumISMSAR ismsar:CVEnumISMSARValues

urn:us:gov:ic:cvenum:ism:scicontrols

| Imported Schemas
| CVEnumISMSCIControls.xsd

| Simple Types
| ismscicon:CVEnumISMSCIControls ismscicon:CVEnumISMSCIControlsValues

urn:us:gov:ic:cvenum:ism:exemptfrom

| Imported Schemas
| CVEnumISMExemptFrom.xsd

| Simple Types
| ismexempt:CVEnumISMExemptFrom ismexempt:CVEnumISMExemptFromValues

urn:us:gov:ic:cvenum:ism:complieswith

| Imported Schemas
| CVEnumISMCompliesWith.xsd

| Simple Types
| ismcomplies:CVEnumISMCompliesWith ismcomplies:CVEnumISMCompliesWithValues

urn:us:gov:ic:cvenum:ism:cuibasic

| Imported Schemas
| CVEnumISMCUIBasic.xsd

| Simple Types
| ismcuibasic:CVEnumISMCUIBasic ismcuibasic:CVEnumISMCUIBasicValues

urn:us:gov:ic:cvenum:ism:cuispecified

| Imported Schemas
| CVEnumISMCUISpecified.xsd

| Simple Types
| ismcuispecified:CVEnumISMCUISpecified ismcuispecified:CVEnumISMCUISpecifiedValues

urn:us:gov:ic:cvenum:ism:secondbannerline

| Imported Schemas
| CVEnumISMSecondBannerLine.xsd

| Simple Types
| ismsecondbannerline:CVEnumISMSecondBannerLine ismsecondbannerline:CVEnumISMSecondBannerLineValues

urn:us:gov:ic:ntk

| Imported Schemas
| IC-NTK.xsd

| Elements
| ntk:Access ntk:AccessPolicy ntk:AccessProfile ntk:AccessProfileList ntk:AccessProfileValue ntk:ExternalAccess ntk:ProfileDes ntk:RequiresAllOf ntk:RequiresAnyOf ntk:VocabularyType

| Complex Types
| ntk:AccessProfileListType ntk:AccessProfileType ntk:AccessProfileValueType ntk:AccessType ntk:ProfileDesType ntk:RequiresAllType ntk:RequiresType ntk:StringWithSecurityType ntk:TokenWithSecurityType ntk:URICommonType ntk:VocabularyTypeType

| Attributes
| @ntk:DESVersion @ntk:IDReference @ntk:id @ntk:qualifier ntk:AccessProfileValueType/@ntk:vocabulary ntk:RequiresType/@ntk:externalReference ntk:VocabularyTypeType/@ntk:name ntk:VocabularyTypeType/@ntk:source ntk:VocabularyTypeType/@ntk:sourceVersion

| Attribute Groups
| ntk:CommonAttributesGroup

urn:us:gov:ic:cvenum:ismcat:responsibleentity

| Imported Schemas
| CVEnumISMCATResponsibleEntity.xsd

| Simple Types
| ismcatre:CVEnumISMCATResponsibleEntity

urn:us:gov:ic:id

| Imported Schemas
| IC-ID.xsd

| Elements
| icid:Identifier

| Simple Types
| icid:IcIdType

| Attributes
| @icid:DESVersion @icid:identifier

urn:us:gov:ic:usagency

| Imported Schemas
| USAgency.xsd

| Elements
| usagency:USAgency usagency:USGOVAgency

| Attributes
| @usagency:CESVersion @usagency:usagency @usagency:usgovagency

urn:us:gov:ic:cvenum:usagency:agencyacronym

| Imported Schemas
| CVEnumUSAgencyAcronym.xsd

| Simple Types
| CVEnumUSAgencyAcronym

urn:us:gov:ic:cvenum:usagency:usgovagencyacronym

| Imported Schemas
| CVEnumUSGOVAgencyAcronym.xsd

| Simple Types
| usgaa:CVEnumUSGOVAgencyAcronym

urn:us:gov:ic:revrecall

| Imported Schemas
| RevRecall_XML.xsd

| Elements
| rr:RevisionRecall rr:RevisionRecallType/rr:ActionInstruction rr:RevisionRecallType/rr:Link rr:RevisionRecallType/rr:POC rr:RevisionRecallType/rr:ProductTitle rr:RevisionRecallType/rr:Reason

| Complex Types
| rr:RevisionRecallType

| Attributes
| @rr:DESVersion rr:RevisionRecallType/@rr:action rr:RevisionRecallType/@rr:dateTime rr:RevisionRecallType/@rr:id rr:RevisionRecallType/@rr:type

urn:us:gov:ic:cvenum:revrecall:action

| Imported Schemas
| CVEnumRevRecallAction.xsd

| Simple Types
| CVEnumRevRecallAction

urn:us:gov:ic:cvenum:revrecall:type

| Imported Schemas
| CVEnumRevRecallType.xsd

| Simple Types
| CVEnumRevRecallType

urn:us:gov:ic:anlysassert

| Imported Schemas
| ANLYS.xsd

| Elements
| AnalysisAssertion AnalysisMethod AnalysisMethodList AnalysisMethodTool AnalysisMethodToolConfigFile AnalysisMethodToolDataDate AnalysisMethodToolEngine AnalysisMethodToolList AnalysisMethodToolName AnalysisMethodToolResultDescription AnalysisMethodToolResultDescriptionStructured AnalysisMethodToolResultDescriptionText AnalysisMethodToolVersion AnalysisTimeFormat AnalystIdentifier AttackId AttackIdList ConfigGroup/Base64BinaryConfig ConfigGroup/ReferenceConfig ConfigGroup/StringConfig ConfigGroup/StructuredConfig KnownMalicious OriginContentFilename OriginContentPath OriginContentPathList ReferenceValueBlock RelatedAnalysis RelatedAnalysisList TargetedId TargetedIdList TestGroup/ReferenceTest TestGroup/StructuredTest TestPerformed TestPerformedList VulnerableId VulnerableIdList WorkFlowId

| Complex Types
| AnalysisAssertionType AnalysisMethodListType AnalysisMethodToolConfigFileType AnalysisMethodToolListType AnalysisMethodToolResultDescriptionType AnalysisMethodToolType AttackIdListType Base64BinaryValueType OriginContentPathListType ReferenceValueBlockType ReferenceValueType RelatedAnalysisListType RelatedAnalysisType StringValueType StructuredValueType TargetedIdListType TestPerformedListType TestPerformedType VulnerableIdListType

| Simple Types
| AnalysisMethodEnumerationType AnalysisMethodToolDataDateType AnalysisMethodToolEngineType AnalysisMethodToolNameEnumeratedType AnalysisMethodToolNameType AnalysisMethodToolResultDescriptionTextType AnalysisMethodToolVersionType AnalysisMethodType AnalysisTimeFormatType AnalystIdentifierType AttackIdType CVEIdType DESVersionType FilenameType KnownMaliciousType MediaTypeType MixedIDType OriginContentFilenameType OriginContentPathType RegisteredCPEType RelationshipEnumerationType RelationshipOtherType RelationshipType StringValueRestrictedType UUIDIdType UnregisteredCPEType WorkFlowIdType

| Attributes
| @DESVersion @filename @id @isEncrypted @mediaType @relationship @uri

| Element Groups
| ConfigGroup TestGroup

## This document has been approved for Public Release by the Office of the Director of National Intelligence. See Distribution Notice for details. Click Here