cybox xpath