Skip to content

Class: KillChainPhase

_The kill-chain-phase represents a phase in a kill chain. _

URI: attack:KillChainPhase

 classDiagram
    class KillChainPhase
    click KillChainPhase href "../KillChainPhase/"
      CommonSchemaComponent <|-- KillChainPhase
        click CommonSchemaComponent href "../CommonSchemaComponent/"


      KillChainPhase <|-- AttackKillChainPhase
        click AttackKillChainPhase href "../AttackKillChainPhase/"


      KillChainPhase : description

      KillChainPhase : id

      KillChainPhase : kill_chain_name

      KillChainPhase : name

      KillChainPhase : phase_name

      KillChainPhase : type

Inheritance

Slots

Name Cardinality and Range Description Inheritance
kill_chain_name 1
String		 Name of the kill chain direct
phase_name 1
String		 Name of the kill chain phase direct
id 0..1
StixIdentifier		 STIX object identifier StixEntity
type 0..1
StixTypeName		 STIX object type StixEntity
name 0..1
String		 Human-readable name StixEntity
description 0..1
String		 Human-readable description StixEntity

Usages

used by used in type used
AttackPattern kill_chain_phases range KillChainPhase
Indicator kill_chain_phases range KillChainPhase
Infrastructure kill_chain_phases range KillChainPhase
Malware kill_chain_phases range KillChainPhase
Tool kill_chain_phases range KillChainPhase

In Subsets

Comments

  • jsonschema_source: https://github.com/oasis-open/cti-stix2-json-schemas/tree/master/schemas/common/kill-chain-phase.json

Identifier and Mapping Information

Schema Source

  • from schema: https://w3id.org/lmodel/attack

Mappings

Mapping Type Mapped Value
self attack:KillChainPhase
native attack:KillChainPhase

LinkML Source

Direct

name: KillChainPhase
description: 'The kill-chain-phase represents a phase in a kill chain. '
comments:
- 'jsonschema_source: https://github.com/oasis-open/cti-stix2-json-schemas/tree/master/schemas/common/kill-chain-phase.json'
in_subset:
- common
from_schema: https://w3id.org/lmodel/attack
is_a: CommonSchemaComponent
slots:
- kill_chain_name
- phase_name

Induced

name: KillChainPhase
description: 'The kill-chain-phase represents a phase in a kill chain. '
comments:
- 'jsonschema_source: https://github.com/oasis-open/cti-stix2-json-schemas/tree/master/schemas/common/kill-chain-phase.json'
in_subset:
- common
from_schema: https://w3id.org/lmodel/attack
is_a: CommonSchemaComponent
attributes:
  kill_chain_name:
    name: kill_chain_name
    description: Name of the kill chain.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    alias: kill_chain_name
    owner: KillChainPhase
    domain_of:
    - KillChainPhase
    range: string
    required: true
  phase_name:
    name: phase_name
    description: Name of the kill chain phase.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    alias: phase_name
    owner: KillChainPhase
    domain_of:
    - KillChainPhase
    range: string
    required: true
  id:
    name: id
    description: STIX object identifier.
    from_schema: https://w3id.org/lmodel/attack
    related_mappings:
    - unified_cyber_ontology:externalReference
    rank: 1000
    alias: id
    owner: KillChainPhase
    domain_of:
    - StixEntity
    - Bundle
    - Core
    - CyberObservableCore
    - ExtensionDefinition
    - LanguageContent
    - MarkingDefinition
    - File
    range: stix_identifier
  type:
    name: type
    description: STIX object type.
    from_schema: https://w3id.org/lmodel/attack
    related_mappings:
    - unified_cyber_ontology:state
    rank: 1000
    alias: type
    owner: KillChainPhase
    domain_of:
    - StixEntity
    - Bundle
    - Core
    - CyberObservableCore
    - ExtensionDefinition
    - LanguageContent
    - MarkingDefinition
    - File
    range: stix_type_name
  name:
    name: name
    description: Human-readable name.
    from_schema: https://w3id.org/lmodel/attack
    exact_mappings:
    - unified_cyber_ontology:name
    rank: 1000
    alias: name
    owner: KillChainPhase
    domain_of:
    - RelatedAsset
    - StixEntity
    - ExtensionDefinition
    - MarkingDefinition
    - AutonomousSystem
    - File
    range: string
  description:
    name: description
    description: Human-readable description.
    from_schema: https://w3id.org/lmodel/attack
    close_mappings:
    - unified_cyber_ontology:description
    rank: 1000
    alias: description
    owner: KillChainPhase
    domain_of:
    - RelatedAsset
    - MutableElement
    - StixEntity
    - ExtensionDefinition
    - ExternalReference
    range: string