Skip to content

Class: GranularMarking

_The granular-marking type defines how the list of marking-definition objects referenced by the marking_refs property to apply to a set of content identified by the list of selectors in the selectors property. _

URI: attack:GranularMarking

 classDiagram
    class GranularMarking
    click GranularMarking href "../GranularMarking/"
      CommonSchemaComponent <|-- GranularMarking
        click CommonSchemaComponent href "../CommonSchemaComponent/"

      GranularMarking : description

      GranularMarking : id

      GranularMarking : lang

      GranularMarking : marking_ref

      GranularMarking : name

      GranularMarking : selectors

      GranularMarking : type

Inheritance

Slots

Name Cardinality and Range Description Inheritance
marking_ref 1
StixIdentifier
Marking-definition reference direct
selectors 1..*
String
A list of selectors for content contained within the STIX object in which thi... direct
lang 0..1
String
Language of textual properties direct
id 0..1
StixIdentifier
STIX object identifier StixEntity
type 0..1
StixTypeName
STIX object type StixEntity
name 0..1
String
Human-readable name StixEntity
description 0..1
String
Human-readable description StixEntity

Usages

used by used in type used
AttackObject granular_markings range GranularMarking
AttackSoftware granular_markings range GranularMarking
Technique granular_markings range GranularMarking
Tactic granular_markings range GranularMarking
Group granular_markings range GranularMarking
AttackCampaign granular_markings range GranularMarking
Mitigation granular_markings range GranularMarking
AttackMalware granular_markings range GranularMarking
AttackTool granular_markings range GranularMarking
Asset granular_markings range GranularMarking
DataSource granular_markings range GranularMarking
DataComponent granular_markings range GranularMarking
Matrix granular_markings range GranularMarking
Collection granular_markings range GranularMarking
AttackIdentity granular_markings range GranularMarking
DetectionStrategy granular_markings range GranularMarking
Analytic granular_markings range GranularMarking
AttackRelationship granular_markings range GranularMarking
AttackMarkingDefinition granular_markings range GranularMarking
CyberObservableObject granular_markings range GranularMarking
StixDomainObject granular_markings range GranularMarking
StixRelationshipObject granular_markings range GranularMarking
Core granular_markings range GranularMarking
CyberObservableCore granular_markings range GranularMarking
ExtensionDefinition granular_markings range GranularMarking
LanguageContent granular_markings range GranularMarking
MarkingDefinition granular_markings range GranularMarking
Artifact granular_markings range GranularMarking
AutonomousSystem granular_markings range GranularMarking
Directory granular_markings range GranularMarking
DomainName granular_markings range GranularMarking
EmailAddr granular_markings range GranularMarking
EmailMessage granular_markings range GranularMarking
File granular_markings range GranularMarking
Ipv4Addr granular_markings range GranularMarking
Ipv6Addr granular_markings range GranularMarking
MacAddr granular_markings range GranularMarking
Mutex granular_markings range GranularMarking
NetworkTraffic granular_markings range GranularMarking
Process granular_markings range GranularMarking
Software granular_markings range GranularMarking
Url granular_markings range GranularMarking
UserAccount granular_markings range GranularMarking
WindowsRegistryKey granular_markings range GranularMarking
X509Certificate granular_markings range GranularMarking
AttackPattern granular_markings range GranularMarking
Campaign granular_markings range GranularMarking
CourseOfAction granular_markings range GranularMarking
Grouping granular_markings range GranularMarking
Identity granular_markings range GranularMarking
Incident granular_markings range GranularMarking
Indicator granular_markings range GranularMarking
Infrastructure granular_markings range GranularMarking
IntrusionSet granular_markings range GranularMarking
Location granular_markings range GranularMarking
MalwareAnalysis granular_markings range GranularMarking
Malware granular_markings range GranularMarking
Note granular_markings range GranularMarking
ObservedData granular_markings range GranularMarking
Opinion granular_markings range GranularMarking
Report granular_markings range GranularMarking
ThreatActor granular_markings range GranularMarking
Tool granular_markings range GranularMarking
Vulnerability granular_markings range GranularMarking
Relationship granular_markings range GranularMarking
Sighting granular_markings range GranularMarking

In Subsets

Comments

  • jsonschema_source: https://github.com/oasis-open/cti-stix2-json-schemas/tree/master/schemas/common/granular-marking.json

Identifier and Mapping Information

Schema Source

  • from schema: https://w3id.org/lmodel/attack

Mappings

Mapping Type Mapped Value
self attack:GranularMarking
native attack:GranularMarking

LinkML Source

Direct

name: GranularMarking
description: 'The granular-marking type defines how the list of marking-definition
  objects referenced by the marking_refs property to apply to a set of content identified
  by the list of selectors in the selectors property. '
comments:
- 'jsonschema_source: https://github.com/oasis-open/cti-stix2-json-schemas/tree/master/schemas/common/granular-marking.json'
in_subset:
- common
from_schema: https://w3id.org/lmodel/attack
is_a: CommonSchemaComponent
slots:
- marking_ref
- selectors
- lang
slot_usage:
  marking_ref:
    name: marking_ref
    required: true
    pattern: ^marking-definition--[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$
  selectors:
    name: selectors
    comments:
    - 'jsonschema_minItems: "1"'
    required: true

Induced

name: GranularMarking
description: 'The granular-marking type defines how the list of marking-definition
  objects referenced by the marking_refs property to apply to a set of content identified
  by the list of selectors in the selectors property. '
comments:
- 'jsonschema_source: https://github.com/oasis-open/cti-stix2-json-schemas/tree/master/schemas/common/granular-marking.json'
in_subset:
- common
from_schema: https://w3id.org/lmodel/attack
is_a: CommonSchemaComponent
slot_usage:
  marking_ref:
    name: marking_ref
    required: true
    pattern: ^marking-definition--[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$
  selectors:
    name: selectors
    comments:
    - 'jsonschema_minItems: "1"'
    required: true
attributes:
  marking_ref:
    name: marking_ref
    description: Marking-definition reference.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    alias: marking_ref
    owner: GranularMarking
    domain_of:
    - GranularMarking
    range: stix_identifier
    required: true
    pattern: ^marking-definition--[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$
  selectors:
    name: selectors
    description: A list of selectors for content contained within the STIX object
      in which this property appears.
    comments:
    - 'jsonschema_minItems: "1"'
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    alias: selectors
    owner: GranularMarking
    domain_of:
    - GranularMarking
    range: string
    required: true
    multivalued: true
  lang:
    name: lang
    description: Language of textual properties.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    alias: lang
    owner: GranularMarking
    domain_of:
    - Core
    - GranularMarking
    range: string
  id:
    name: id
    description: STIX object identifier.
    from_schema: https://w3id.org/lmodel/attack
    related_mappings:
    - unified_cyber_ontology:externalReference
    rank: 1000
    alias: id
    owner: GranularMarking
    domain_of:
    - StixEntity
    - Bundle
    - Core
    - CyberObservableCore
    - ExtensionDefinition
    - LanguageContent
    - MarkingDefinition
    - File
    range: stix_identifier
  type:
    name: type
    description: STIX object type.
    from_schema: https://w3id.org/lmodel/attack
    related_mappings:
    - unified_cyber_ontology:state
    rank: 1000
    alias: type
    owner: GranularMarking
    domain_of:
    - StixEntity
    - Bundle
    - Core
    - CyberObservableCore
    - ExtensionDefinition
    - LanguageContent
    - MarkingDefinition
    - File
    range: stix_type_name
  name:
    name: name
    description: Human-readable name.
    from_schema: https://w3id.org/lmodel/attack
    exact_mappings:
    - unified_cyber_ontology:name
    rank: 1000
    alias: name
    owner: GranularMarking
    domain_of:
    - RelatedAsset
    - StixEntity
    - ExtensionDefinition
    - MarkingDefinition
    - AutonomousSystem
    - File
    range: string
  description:
    name: description
    description: Human-readable description.
    from_schema: https://w3id.org/lmodel/attack
    close_mappings:
    - unified_cyber_ontology:description
    rank: 1000
    alias: description
    owner: GranularMarking
    domain_of:
    - RelatedAsset
    - MutableElement
    - StixEntity
    - ExtensionDefinition
    - ExternalReference
    range: string