Mappings from STIX 2.x to CybOX 2.x

The following table associates the CybOX 2.x object types with their STIX 2.x cyber observable types. For each CybOX object the table also indicates if the slider is able to convert the cyber observable object to CybOX 2.x.

CybOX object types not listed have no corresponding STIX 2.x cyber observable type, and therefore are not converted by the slider.

STIX 2.x Cyber Observable Type	CybOX 2.x Type	Converted in version 2.1.0 of the Slider
artifact	Artifact	yes
autonomous-system	AutonomousSystem	yes
directory	File	yes
domain-name	DomainName	yes
email-addr	Address	yes
email-message	EmailMessage	yes
file	File	yes
file:archive-ext	ArchiveFile	yes
file:raster-image-ext	ImageFile	yes
file:ntfs-ext	WinFile	yes
file:pdf-ext	PDFFile	yes
file:window-pebinary-ext	WinExecutableFile	yes
ipv4-addr	Address	yes
ipv6-addr	Address	yes
mac-addr	Address	yes
mutex	Mutex	yes
network-traffic	NetworkConnection	yes
network-traffic:http-request-ext	NetworkConnection and HTTPClientRequest	yes
network-traffic:icmp-ext	NetworkConnection and ICMPv4Packet	yes
network-traffic:socket-ext	NetworkConnection and NetworkSocket	yes
network-traffic:tcp-ext	none	no
process	Process	yes
process:windows-process-ext	WinProcess	yes
process:windows-service-ext	WinService	yes
software	Product	yes
url	URI	yes
user-account	UserAccount, WinUser, UnixUserAccount	yes
user-account:unix-account-ext	UnixUserAccount	yes
window-registry-key	WinRegistryKey	yes
x509-certificate	X509Certificate	yes
x509-certificate:x509-v3-extensions-type	X509Certificate and X509V3Extensions	yes