{
  "$schema": "/api/schemas/documents.schema.json",
  "apiVersion": "1.1.0",
  "lastModified": "2026-10-20T16:07:11.849Z",
  "sourcePath": "src/main/data/docs",
  "docId": "RFC7970",
  "document": {
    "abstract": "The Incident Object Description Exchange Format (IODEF) defines a data representation for security incident reports and indicators commonly exchanged by operational security teams for mitigation and watch and warning. This document describes an updated information model for the IODEF and provides an associated data model specified with the XML schema. This new information and data model obsoletes RFCs 5070 and 6685.",
    "abstract$meta": {
      "confidence": "high",
      "note": "Parsed from RFC index XML abstract",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc7970/",
      "updated": "2026-10-20T09:42:35.587Z",
      "version": "extractDocs.js@commit:6ff5f1bb34e3"
    },
    "authors": [
      {
        "name": "Roman Danyliw"
      }
    ],
    "authors$meta": {
      "confidence": "high",
      "note": "Parsed from Datatracker doc page article:author (profile full names)",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc7970/",
      "updated": "2026-10-20T09:42:35.587Z",
      "version": "extractDocs.js@commit:6ff5f1bb34e3"
    },
    "docId": "RFC7970",
    "docId$meta": {
      "confidence": "high",
      "note": "Derived from RFC number or Datatracker identifier",
      "originalValue": null,
      "source": "resolved",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc7970/",
      "updated": "2026-10-20T09:42:35.587Z",
      "version": "extractDocs.js@commit:6ff5f1bb34e3"
    },
    "docLabel": "IETF RFC 7970",
    "docLabel$meta": {
      "confidence": "high",
      "note": "Constructed from provider and document identifier",
      "originalValue": null,
      "source": "resolved",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc7970/",
      "updated": "2026-10-20T09:42:35.587Z",
      "version": "extractDocs.js@commit:6ff5f1bb34e3"
    },
    "docNumber": "7970",
    "docNumber$meta": {
      "confidence": "high",
      "note": "Parsed from RFC info page report metadata",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc7970/",
      "updated": "2026-10-20T16:07:11.849Z",
      "version": "extractDocs.js@commit:cc2368606b5f"
    },
    "docTitle": "The Incident Object Description Exchange Format Version 2",
    "docTitle$meta": {
      "confidence": "high",
      "note": "Parsed from RFC index XML title",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc7970/",
      "updated": "2026-10-20T09:42:35.587Z",
      "version": "extractDocs.js@commit:6ff5f1bb34e3"
    },
    "docType": "Standard",
    "docType$meta": {
      "confidence": "high",
      "note": "Mapped from Datatracker std_level or RFC status text",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc7970/",
      "updated": "2026-10-20T09:42:35.587Z",
      "version": "extractDocs.js@commit:6ff5f1bb34e3"
    },
    "doi": "10.17487/RFC7970",
    "doi$meta": {
      "confidence": "high",
      "note": "Parsed from RFC index XML doi",
      "originalValue": null,
      "source": "resolved",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc7970/",
      "updated": "2026-10-20T09:42:35.587Z",
      "version": "extractDocs.js@commit:6ff5f1bb34e3"
    },
    "href": "https://doi.org/10.17487/RFC7970",
    "href$meta": {
      "confidence": "high",
      "note": "Derived from DOI (https://doi.org/<doi>)",
      "originalValue": null,
      "source": "resolved",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc7970/",
      "updated": "2026-10-20T09:42:35.587Z",
      "version": "extractDocs.js@commit:6ff5f1bb34e3"
    },
    "keywords": [
      "Incident Data Format",
      "Incident Report",
      "Cyber Threat Indicators",
      "CSIRT",
      "Security Data Sharing",
      "CNDSP",
      "Information Sharing",
      "Automated Information Sharing"
    ],
    "keywords$meta": {
      "confidence": "high",
      "note": "Parsed from RFC index XML keywords",
      "originalValue": [
        "Incident Data Format",
        "Incident Report",
        "Cyber Threat Indicators",
        "Computer Security Incident",
        "CSIRT",
        "Security Data Sharing",
        "CNDSP",
        "Information Sharing",
        "Automated Information Sharing",
        "Cyber Indicators"
      ],
      "overridden": true,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc7970/",
      "updated": "2026-10-20T16:07:11.849Z",
      "version": "extractDocs.js@commit:cc2368606b5f"
    },
    "pages": "172",
    "pages$meta": {
      "confidence": "high",
      "note": "Parsed from RFC index XML page-count",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc7970/",
      "updated": "2026-10-20T09:42:35.587Z",
      "version": "extractDocs.js@commit:6ff5f1bb34e3"
    },
    "publicationDate": "2016-11-01",
    "publicationDate$meta": {
      "confidence": "high",
      "note": "Parsed from RFC index XML date",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc7970/",
      "updated": "2026-10-20T09:42:35.587Z",
      "version": "extractDocs.js@commit:6ff5f1bb34e3"
    },
    "publisher": "IETF",
    "publisher$meta": {
      "confidence": "high",
      "note": "Static: provider",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc7970/",
      "updated": "2026-10-20T09:42:35.587Z",
      "version": "extractDocs.js@commit:6ff5f1bb34e3"
    },
    "references": {
      "bibliographic": [
        "NIST.SP.800-61r2",
        "RFC2818",
        "RFC3982",
        "RFC4180",
        "RFC5070",
        "RFC5226",
        "RFC5246",
        "RFC5901",
        "RFC6545",
        "RFC6546",
        "RFC6685",
        "W3C.xmlenc-core1",
        "orphan/RFC7970/h:fa9f3a0f"
      ],
      "bibliographic$meta": {
        "confidence": "medium",
        "flag": "MIXED_REF_LAYOUT_RISK anchored=40 proseBlocks=52 skippedAnchorBlocks=44",
        "note": "Parsed from RFC HTML references/informative sections",
        "originalValue": [],
        "reviewRequired": true,
        "source": "parsed",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc7970/",
        "updated": "2026-10-20T09:42:35.587Z",
        "version": "extractDocs.js@commit:6ff5f1bb34e3"
      },
      "normative": [
        "T-REC-E.164.2010",
        "10.1109-IEEESTD.2009.5393893",
        "ISO.19770-2.2015",
        "ISO.4217.2015",
        "NIST.IR.7695",
        "RFC2119",
        "RFC2781",
        "RFC3629",
        "RFC3688",
        "RFC3986",
        "RFC4291",
        "RFC4519",
        "RFC5322",
        "RFC5646",
        "RFC5952",
        "RFC6531",
        "RFC7203",
        "RFC7495",
        "W3C.xmlschema-1.20041028",
        "W3C.xmlschema-2",
        "W3C.xml.20081126",
        "W3C.xml-names.20091208",
        "W3C.xmldsig-core.20080610",
        "W3C.xpath-3",
        "orphan/RFC7970/h:fc7cda23",
        "orphan/RFC7970/h:21895426",
        "orphan/RFC7970/h:0d9539df"
      ],
      "normative$meta": {
        "confidence": "high",
        "note": "Parsed from RFC HTML normative references sections",
        "originalValue": [
          "T-REC-E.164.2010",
          "10.1109-IEEESTD.2009.5393893",
          "ISO.19770-2.2015",
          "ISO.4217.2015",
          "RFC2119",
          "RFC2781",
          "RFC3629",
          "RFC3688",
          "RFC3986",
          "RFC4291",
          "RFC4519",
          "RFC5322",
          "RFC5646",
          "RFC5952",
          "RFC6531",
          "RFC7203",
          "RFC7495",
          "W3C.xmlschema-1.20041028",
          "W3C.xmlschema-2",
          "W3C.xml.20081126",
          "W3C.xml-names.20091208",
          "W3C.xmldsig-core.20080610",
          "W3C.xpath-3",
          "orphan/RFC7970/h:fc7cda23",
          "orphan/RFC7970/h:21895426",
          "orphan/RFC7970/h:0d9539df",
          "orphan/RFC7970/h:43a4a2f0"
        ],
        "overridden": true,
        "source": "parsed",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc7970/",
        "updated": "2026-10-20T16:07:11.849Z",
        "version": "extractDocs.js@commit:cc2368606b5f"
      }
    },
    "resolvedHref": "https://www.rfc-editor.org/info/rfc7970/",
    "resolvedHref$meta": {
      "confidence": "high",
      "note": "Final URL resolved via URL redirect verification",
      "originalValue": null,
      "source": "resolved",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc7970/",
      "updated": "2026-10-20T09:42:35.587Z",
      "version": "extractDocs.js@commit:6ff5f1bb34e3"
    },
    "status": {
      "active": true,
      "active$meta": {
        "confidence": "high",
        "note": "Derived from supersession relationship fields",
        "originalValue": null,
        "source": "resolved",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc7970/",
        "updated": "2026-10-20T09:42:35.587Z",
        "version": "extractDocs.js@commit:6ff5f1bb34e3"
      },
      "errataExist": true,
      "errataExist$meta": {
        "confidence": "high",
        "note": "Derived from presence of errata links on RFC/Datatracker pages",
        "originalValue": null,
        "source": "parsed",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc7970/",
        "updated": "2026-10-20T09:42:35.587Z",
        "version": "extractDocs.js@commit:6ff5f1bb34e3"
      },
      "errataUrl": [
        "https://www.rfc-editor.org/errata/rfc7970",
        "https://www.rfc-editor.org/errata_search.php?rfc=7970",
        "https://www.rfc-editor.org/rfc/inline-errata/rfc7970.html"
      ],
      "errataUrl$meta": {
        "confidence": "high",
        "note": "Parsed from errata links on RFC/Datatracker pages",
        "originalValue": [],
        "source": "parsed",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc7970/",
        "updated": "2026-10-20T09:42:35.587Z",
        "version": "extractDocs.js@commit:6ff5f1bb34e3"
      },
      "latestVersion": true,
      "latestVersion$meta": {
        "confidence": "high",
        "note": "Derived from supersession relationship fields",
        "originalValue": null,
        "source": "resolved",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc7970/",
        "updated": "2026-10-20T09:42:35.587Z",
        "version": "extractDocs.js@commit:6ff5f1bb34e3"
      },
      "statusNote": "Proposed Standard",
      "statusNote$meta": {
        "confidence": "high",
        "note": "Mapped from Datatracker doc.json std_level",
        "originalValue": null,
        "source": "parsed",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc7970/",
        "updated": "2026-10-20T09:42:35.587Z",
        "version": "extractDocs.js@commit:6ff5f1bb34e3"
      },
      "superseded": false,
      "superseded$meta": {
        "confidence": "high",
        "note": "Derived from supersession relationship fields",
        "originalValue": null,
        "source": "resolved",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc7970/",
        "updated": "2026-10-20T09:42:35.587Z",
        "version": "extractDocs.js@commit:6ff5f1bb34e3"
      },
      "supersedes": [
        "RFC5070",
        "RFC6685"
      ],
      "supersedes$meta": {
        "confidence": "high",
        "note": "Parsed from RFC index XML",
        "originalValue": [],
        "source": "parsed",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc7970/",
        "updated": "2026-10-20T09:42:35.587Z",
        "version": "extractDocs.js@commit:6ff5f1bb34e3"
      }
    }
  }
}