Documentation for Open Vulnerability and Assessment Language (OVAL®)
Definition Type: Element
Name: auditeventpolicysubcategories_test
Namespace: http://oval.mitre.org/XMLSchema/oval-definitions-5#windows
Type: oval-def:TestType
Containing Schema: windows-definitions-schema.xsd
Abstract
Documentation:
The audit event policy subcategories test is used to check different types of events the system should audit. These subcategories are new for Windows Vista. The test extends the standard TestType as defined in the oval-definitions-schema and one should refer to the TestType description for more information. The required object element references a auditeventpolicy_object and the optional state element specifies the metadata to check. The evaluation of the test is guided by the check attribute that is inherited from the TestType.
Collapse XSD Schema Diagram:
Drilldown into state in schema windows-definitions-schema_xsd Drilldown into object in schema windows-definitions-schema_xsd Drilldown into notes in schema oval-definitions-schema_xsd Drilldown into Signature in schema xmldsig-core-schema_xsd Drilldown into deprecated in schema oval-definitions-schema_xsd Drilldown into comment in schema oval-definitions-schema_xsd Drilldown into check in schema oval-definitions-schema_xsd Drilldown into check_existence in schema oval-definitions-schema_xsd Drilldown into version in schema oval-definitions-schema_xsd Drilldown into id in schema oval-definitions-schema_xsd Drilldown into TestType in schema oval-definitions-schema_xsdXSD Diagram of auditeventpolicysubcategories_test in schema windows-definitions-schema_xsd (Open Vulnerability and Assessment Language (OVAL®))
Collapse XSD Schema Code: 
<xsd:element name="auditeventpolicysubcategories_test" substitutionGroup="oval-def:test">
    <xsd:annotation>
        <xsd:documentation>The audit event policy subcategories test is used to check different types of events the system should audit. These subcategories are new for Windows Vista. The test extends the standard TestType as defined in the oval-definitions-schema and one should refer to the TestType description for more information. The required object element references a auditeventpolicy_object and the optional state element specifies the metadata to check. The evaluation of the test is guided by the check attribute that is inherited from the TestType.</xsd:documentation>
        <xsd:appinfo>
            <sch:pattern id="aepstst" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
                <sch:rule context="win-def:auditeventpolicysubcategories_test/win-def:object">
                    <sch:assert test="@object_ref=/oval-def:oval_definitions/oval-def:objects/win-def:auditeventpolicysubcategories_object/@id">
                        <sch:value-of select="../@id" /> - the object child element of an auditeventpolicysubcategories_test must reference an auditeventpolicysubcategories_object</sch:assert>
                </sch:rule>
                <sch:rule context="win-def:auditeventpolicysubcategories_test/win-def:state">
                    <sch:assert test="@state_ref=/oval-def:oval_definitions/oval-def:states/win-def:auditeventpolicysubcategories_state/@id">
                        <sch:value-of select="../@id" /> - the state child element of an auditeventpolicysubcategories_test must reference an auditeventpolicysubcategories_state</sch:assert>
                </sch:rule>
            </sch:pattern>
        </xsd:appinfo>
    </xsd:annotation>
    <xsd:complexType>
        <xsd:complexContent>
            <xsd:extension base="oval-def:TestType">
                <xsd:sequence>
                    <xsd:element name="object" type="oval-def:ObjectRefType" />
                    <xsd:element name="state" type="oval-def:StateRefType" minOccurs="0" />
                </xsd:sequence>
            </xsd:extension>
        </xsd:complexContent>
    </xsd:complexType>
</xsd:element>
Collapse Child Elements:
Name Type Min Occurs Max Occurs
Signature ds:Signature 0 1
notes oval-def:notes 0 1
object win-def:object (1) (1)
state win-def:state 0 (1)
Collapse Child Attributes:
Name Type Default Value Use
id oval-def:id Required
version oval-def:version Required
check_existence oval-def:check_existence at_least_one_exists Optional
check oval-def:check Required
comment oval-def:comment Required
deprecated oval-def:deprecated false Optional
Collapse Derivation Tree:
Collapse References:
oval-def:test
Documentation for Open Vulnerability and Assessment Language (OVAL®)

Generated using Liquid Studio - Developer Bundle 21.0.0.0