Class: UnixAccountExt

The Unix Account extension specifies a default extension for capturing the additional information for an account on a Unix system. Used as the value of the 'unix-account-ext' key in a UserAccount object's extensions dictionary.

URI: attack:UnixAccountExt

 classDiagram
    class UnixAccountExt
    click UnixAccountExt href "../UnixAccountExt/"
      CommonSchemaComponent <|-- UnixAccountExt
        click CommonSchemaComponent href "../CommonSchemaComponent/"

      UnixAccountExt : description

      UnixAccountExt : gid

      UnixAccountExt : groups

      UnixAccountExt : home_dir

      UnixAccountExt : id

      UnixAccountExt : name

      UnixAccountExt : shell

      UnixAccountExt : type

Inheritance

StixEntity
- CommonSchemaComponent
  - UnixAccountExt

Slots

Name	Cardinality and Range	Description	Inheritance
gid	0..1 Integer	Specifies the primary group ID of the account	direct
groups	* String	Specifies a list of names of groups the account is a member of	direct
home_dir	0..1 String	Specifies the home directory of the account	direct
shell	0..1 String	Specifies the account's command shell	direct
id	0..1 StixIdentifier	STIX object identifier	StixEntity
type	0..1 StixTypeName	STIX object type	StixEntity
name	0..1 String	Human-readable name	StixEntity
description	0..1 String	Human-readable description	StixEntity

In Subsets

Observables

Comments

stix_extension_key: unix-account-ext stix_parent_type: user-account jsonschema_source: https://github.com/oasis-open/cti-stix2-json-schemas/tree/master/schemas/observables/user-account.json

Identifier and Mapping Information

Schema Source

from schema: https://w3id.org/lmodel/attack

Mappings

Mapping Type	Mapped Value
self	attack:UnixAccountExt
native	attack:UnixAccountExt

LinkML Source

Direct

name: UnixAccountExt
description: The Unix Account extension specifies a default extension for capturing
  the additional information for an account on a Unix system. Used as the value of
  the 'unix-account-ext' key in a UserAccount object's extensions dictionary.
comments:
- 'stix_extension_key: unix-account-ext stix_parent_type: user-account jsonschema_source:
  https://github.com/oasis-open/cti-stix2-json-schemas/tree/master/schemas/observables/user-account.json'
in_subset:
- observables
from_schema: https://w3id.org/lmodel/attack
is_a: CommonSchemaComponent
slots:
- gid
- groups
- home_dir
- shell
slot_usage:
  groups:
    name: groups
    comments:
    - 'jsonschema_minItems: "1"'

Induced

name: UnixAccountExt
description: The Unix Account extension specifies a default extension for capturing
  the additional information for an account on a Unix system. Used as the value of
  the 'unix-account-ext' key in a UserAccount object's extensions dictionary.
comments:
- 'stix_extension_key: unix-account-ext stix_parent_type: user-account jsonschema_source:
  https://github.com/oasis-open/cti-stix2-json-schemas/tree/master/schemas/observables/user-account.json'
in_subset:
- observables
from_schema: https://w3id.org/lmodel/attack
is_a: CommonSchemaComponent
slot_usage:
  groups:
    name: groups
    comments:
    - 'jsonschema_minItems: "1"'
attributes:
  gid:
    name: gid
    description: Specifies the primary group ID of the account.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    alias: gid
    owner: UnixAccountExt
    domain_of:
    - UnixAccountExt
    range: integer
  groups:
    name: groups
    description: Specifies a list of names of groups the account is a member of.
    comments:
    - 'jsonschema_minItems: "1"'
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    alias: groups
    owner: UnixAccountExt
    domain_of:
    - UnixAccountExt
    range: string
    multivalued: true
  home_dir:
    name: home_dir
    description: Specifies the home directory of the account.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    alias: home_dir
    owner: UnixAccountExt
    domain_of:
    - UnixAccountExt
    range: string
  shell:
    name: shell
    description: Specifies the account's command shell.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    alias: shell
    owner: UnixAccountExt
    domain_of:
    - UnixAccountExt
    range: string
  id:
    name: id
    description: STIX object identifier.
    from_schema: https://w3id.org/lmodel/attack
    related_mappings:
    - unified_cyber_ontology:externalReference
    rank: 1000
    alias: id
    owner: UnixAccountExt
    domain_of:
    - StixEntity
    - Bundle
    - Core
    - CyberObservableCore
    - ExtensionDefinition
    - LanguageContent
    - MarkingDefinition
    - File
    range: stix_identifier
  type:
    name: type
    description: STIX object type.
    from_schema: https://w3id.org/lmodel/attack
    related_mappings:
    - unified_cyber_ontology:state
    rank: 1000
    alias: type
    owner: UnixAccountExt
    domain_of:
    - StixEntity
    - Bundle
    - Core
    - CyberObservableCore
    - ExtensionDefinition
    - LanguageContent
    - MarkingDefinition
    - File
    range: stix_type_name
  name:
    name: name
    description: Human-readable name.
    from_schema: https://w3id.org/lmodel/attack
    exact_mappings:
    - unified_cyber_ontology:name
    rank: 1000
    alias: name
    owner: UnixAccountExt
    domain_of:
    - RelatedAsset
    - StixEntity
    - ExtensionDefinition
    - MarkingDefinition
    - AutonomousSystem
    - File
    range: string
  description:
    name: description
    description: Human-readable description.
    from_schema: https://w3id.org/lmodel/attack
    close_mappings:
    - unified_cyber_ontology:description
    rank: 1000
    alias: description
    owner: UnixAccountExt
    domain_of:
    - RelatedAsset
    - MutableElement
    - StixEntity
    - ExtensionDefinition
    - ExternalReference
    range: string