Enum: AttackDomainEnum

Closed enumeration of the three ATT&CK technology domains. ATT&CK is organized into domains that represent the ecosystems adversaries operate within. All ATT&CK objects that carry x_mitre_domains must reference at least one of these domains.

URI: attack:AttackDomainEnum

Permissible Values

Value	Meaning	Description
enterprise-attack	None	Enterprise domain covering Windows, Linux, macOS, cloud platforms (IaaS, SaaS...
mobile-attack	None	Mobile domain covering Android and iOS operating systems
ics-attack	None	ICS (Industrial Control Systems) domain covering Operational Technology envir...

Slots

Name	Description
x_mitre_domains	The ATT&CK technology domains to which this object belongs

Identifier and Mapping Information

Schema Source

• from schema: https://w3id.org/lmodel/attack

LinkML Source

name: AttackDomainEnum
description: Closed enumeration of the three ATT&CK technology domains. ATT&CK is
  organized into domains that represent the ecosystems adversaries operate within.
  All ATT&CK objects that carry x_mitre_domains must reference at least one of these
  domains.
from_schema: https://w3id.org/lmodel/attack
rank: 1000
permissible_values:
  enterprise-attack:
    text: enterprise-attack
    description: Enterprise domain covering Windows, Linux, macOS, cloud platforms
      (IaaS, SaaS, Office 365, Google Workspace, Azure AD), containers, network devices,
      and PRE.
  mobile-attack:
    text: mobile-attack
    description: Mobile domain covering Android and iOS operating systems. Techniques
      describe adversary behavior targeting mobile devices.
  ics-attack:
    text: ics-attack
    description: ICS (Industrial Control Systems) domain covering Operational Technology
      environments including SCADA, DCS, PLCs, RTUs, and other OT components.