3.1.4.1.3.16 mce:EntityType Complex Type

The EntityType complex type specifies an entity classification type.<17>

 <xs:complexType name="EntityType">
   <xs:sequence>
     <xs:element name="Pattern" type="mce:PatternType" maxOccurs="unbounded"/>
     <xs:element name="Version" type="mce:VersionedPatternType" minOccurs="0" maxOccurs="unbounded" />
   </xs:sequence>
   <xs:attribute name="id" type="mce:GuidType" use="required"/>
   <xs:attribute name="patternsProximity" type="mce:ProximityType" use="required"/>
   <xs:attribute name="recommendedConfidence" type="mce:ProbabilityType"/>
   <xs:attribute name="workload" type="mce:WorkloadType"/>
 </xs:complexType>

The following table lists the child element of the EntityType complex type.

Element

Type

Description

Pattern

mce:PatternType (section 3.1.4.1.3.29)

Specifies the classification rules that are matched for an entity-based classification.

Version

mce:VersionedPatternType (section 3.1.4.1.3.65)

Specifies the version of a list of patterns.

The following table lists the attributes of the EntityType complex type.

Attribute

Type

Description

id

mce:GuidType (section 3.1.4.1.4.1)

Specifies the rule identifier. This attribute MUST be present.

patternsProximity

mce:ProximityType (section 3.1.4.1.4.11)

Specifies the proximity value between the primary match, as represented by the IdMatch element, as specified in section 3.1.4.1.3.29, and corroborative evidence matches, as specified by the classification engine. This attribute MUST be present.

recommendedConfidence

mce:ProbabilityType (section 3.1.4.1.4.10)

Specifies the confidence level threshold used by the classification engine to trigger an action. This attribute MUST be present.

workload

mce:WorkloadType (section 3.1.4.1.4.15)

This attribute is not used.