Class: Bundle

_A Bundle is a collection of arbitrary STIX Objects and Marking Definitions grouped together in a single container. _

 classDiagram
    class Bundle
    click Bundle href "../Bundle/"
      CommonSchemaComponent <|-- Bundle
        click CommonSchemaComponent href "../CommonSchemaComponent/"


      Bundle <|-- AttackBundle
        click AttackBundle href "../AttackBundle/"


      Bundle : bundle_objects





        Bundle --> "*" StixEntity : bundle_objects
        click StixEntity href "../StixEntity/"



      Bundle : description

      Bundle : id

      Bundle : name

      Bundle : type

Inheritance

StixEntity
- CommonSchemaComponent
  - Bundle
    - AttackBundle

Slots

Name	Cardinality and Range	Description	Inheritance
type	1 StixTypeName	STIX object type	direct
id	1 StixIdentifier	STIX object identifier	direct
bundle_objects	* StixEntity	Objects contained in a bundle	direct
name	0..1 String	Human-readable name	StixEntity
description	0..1 String	Human-readable description	StixEntity

In Subsets

Common

Comments

jsonschema_rule: anyOf+oneOf validator_hint: validate-bundle-object-members jsonschema_source: https://github.com/oasis-open/cti-stix2-json-schemas/tree/master/schemas/common/bundle.json

Notes

JSON Schema defines bundle objects as a heterogeneous anyOf/oneOf set including custom objects.

Identifier and Mapping Information

Schema Source

from schema: https://w3id.org/lmodel/attack

Mappings

Mapping Type	Mapped Value
self	attack:Bundle
native	attack:Bundle

LinkML Source

Direct

name: Bundle
description: 'A Bundle is a collection of arbitrary STIX Objects and Marking Definitions
  grouped together in a single container. '
notes:
- JSON Schema defines bundle objects as a heterogeneous anyOf/oneOf set including
  custom objects.
comments:
- 'jsonschema_rule: anyOf+oneOf validator_hint: validate-bundle-object-members jsonschema_source:
  https://github.com/oasis-open/cti-stix2-json-schemas/tree/master/schemas/common/bundle.json'
in_subset:
- common
from_schema: https://w3id.org/lmodel/attack
is_a: CommonSchemaComponent
slots:
- type
- id
- bundle_objects
slot_usage:
  type:
    name: type
    required: true
    pattern: ^bundle$
  id:
    name: id
    required: true
    pattern: ^bundle--[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$
  bundle_objects:
    name: bundle_objects
    comments:
    - 'jsonschema_minItems: "1"'

Induced

name: Bundle
description: 'A Bundle is a collection of arbitrary STIX Objects and Marking Definitions
  grouped together in a single container. '
notes:
- JSON Schema defines bundle objects as a heterogeneous anyOf/oneOf set including
  custom objects.
comments:
- 'jsonschema_rule: anyOf+oneOf validator_hint: validate-bundle-object-members jsonschema_source:
  https://github.com/oasis-open/cti-stix2-json-schemas/tree/master/schemas/common/bundle.json'
in_subset:
- common
from_schema: https://w3id.org/lmodel/attack
is_a: CommonSchemaComponent
slot_usage:
  type:
    name: type
    required: true
    pattern: ^bundle$
  id:
    name: id
    required: true
    pattern: ^bundle--[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$
  bundle_objects:
    name: bundle_objects
    comments:
    - 'jsonschema_minItems: "1"'
attributes:
  type:
    name: type
    description: STIX object type.
    from_schema: https://w3id.org/lmodel/attack
    related_mappings:
    - unified_cyber_ontology:state
    rank: 1000
    alias: type
    owner: Bundle
    domain_of:
    - StixEntity
    - Bundle
    - Core
    - CyberObservableCore
    - ExtensionDefinition
    - LanguageContent
    - MarkingDefinition
    - File
    range: stix_type_name
    required: true
    pattern: ^bundle$
  id:
    name: id
    description: STIX object identifier.
    from_schema: https://w3id.org/lmodel/attack
    related_mappings:
    - unified_cyber_ontology:externalReference
    rank: 1000
    alias: id
    owner: Bundle
    domain_of:
    - StixEntity
    - Bundle
    - Core
    - CyberObservableCore
    - ExtensionDefinition
    - LanguageContent
    - MarkingDefinition
    - File
    range: stix_identifier
    required: true
    pattern: ^bundle--[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$
  bundle_objects:
    name: bundle_objects
    description: Objects contained in a bundle.
    comments:
    - 'jsonschema_minItems: "1"'
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    alias: bundle_objects
    owner: Bundle
    domain_of:
    - Bundle
    range: StixEntity
    multivalued: true
    inlined: true
  name:
    name: name
    description: Human-readable name.
    from_schema: https://w3id.org/lmodel/attack
    exact_mappings:
    - unified_cyber_ontology:name
    rank: 1000
    alias: name
    owner: Bundle
    domain_of:
    - RelatedAsset
    - StixEntity
    - ExtensionDefinition
    - MarkingDefinition
    - AutonomousSystem
    - File
    range: string
  description:
    name: description
    description: Human-readable description.
    from_schema: https://w3id.org/lmodel/attack
    close_mappings:
    - unified_cyber_ontology:description
    rank: 1000
    alias: description
    owner: Bundle
    domain_of:
    - RelatedAsset
    - MutableElement
    - StixEntity
    - ExtensionDefinition
    - ExternalReference
    range: string