Class: Url
_The URL Object represents the properties of a uniform resource locator (URL). _
URI: attack:Url
classDiagram
class Url
click Url href "../Url/"
CyberObservableObject <|-- Url
click CyberObservableObject href "../CyberObservableObject/"
Url : defanged
Url : description
Url : extensions
Url : granular_markings
Url --> "*" GranularMarking : granular_markings
click GranularMarking href "../GranularMarking/"
Url : id
Url : name
Url : object_marking_refs
Url : spec_version
Url --> "0..1" SpecVersionEnum : spec_version
click SpecVersionEnum href "../SpecVersionEnum/"
Url : type
Url : value
Inheritance
Slots
| Name | Cardinality and Range | Description | Inheritance |
|---|---|---|---|
| value | 1 String |
Canonical string value for simple cyber observables | direct |
| type | 1 StixTypeName |
STIX object type | StixEntity, CyberObservableCore |
| spec_version | 0..1 SpecVersionEnum |
STIX specification version | CyberObservableCore |
| id | 1 StixIdentifier |
STIX object identifier | StixEntity, CyberObservableCore |
| object_marking_refs | * StixIdentifier |
Marking definition references applied to this object | CyberObservableCore |
| granular_markings | * GranularMarking |
Granular markings that apply to selected content | CyberObservableCore |
| defanged | 0..1 Boolean |
Defines whether or not the data contained within the object has been defanged | CyberObservableCore |
| extensions | * String |
Open-ended extension payloads | CyberObservableCore |
| name | 0..1 String |
Human-readable name | StixEntity |
| description | 0..1 String |
Human-readable description | StixEntity |
In Subsets
Comments
- jsonschema_source: https://github.com/oasis-open/cti-stix2-json-schemas/tree/master/schemas/observables/url.json
Identifier and Mapping Information
Schema Source
- from schema: https://w3id.org/lmodel/attack
Mappings
| Mapping Type | Mapped Value |
|---|---|
| self | attack:Url |
| native | attack:Url |
| close | unified_cyber_ontology:URL |
LinkML Source
Direct
name: Url
description: 'The URL Object represents the properties of a uniform resource locator
(URL). '
comments:
- 'jsonschema_source: https://github.com/oasis-open/cti-stix2-json-schemas/tree/master/schemas/observables/url.json'
in_subset:
- observables
from_schema: https://w3id.org/lmodel/attack
close_mappings:
- unified_cyber_ontology:URL
is_a: CyberObservableObject
slots:
- value
slot_usage:
id:
name: id
pattern: ^url--[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$
type:
name: type
pattern: ^url$
value:
name: value
required: true
Induced
name: Url
description: 'The URL Object represents the properties of a uniform resource locator
(URL). '
comments:
- 'jsonschema_source: https://github.com/oasis-open/cti-stix2-json-schemas/tree/master/schemas/observables/url.json'
in_subset:
- observables
from_schema: https://w3id.org/lmodel/attack
close_mappings:
- unified_cyber_ontology:URL
is_a: CyberObservableObject
slot_usage:
id:
name: id
pattern: ^url--[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$
type:
name: type
pattern: ^url$
value:
name: value
required: true
attributes:
value:
name: value
description: Canonical string value for simple cyber observables.
from_schema: https://w3id.org/lmodel/attack
rank: 1000
alias: value
owner: Url
domain_of:
- DomainName
- EmailAddr
- Ipv4Addr
- Ipv6Addr
- MacAddr
- Url
range: string
required: true
type:
name: type
description: STIX object type.
from_schema: https://w3id.org/lmodel/attack
related_mappings:
- unified_cyber_ontology:state
rank: 1000
alias: type
owner: Url
domain_of:
- StixEntity
- Bundle
- Core
- CyberObservableCore
- ExtensionDefinition
- LanguageContent
- MarkingDefinition
- File
range: stix_type_name
required: true
pattern: ^url$
spec_version:
name: spec_version
description: STIX specification version.
from_schema: https://w3id.org/lmodel/attack
close_mappings:
- unified_cyber_ontology:specVersion
rank: 1000
alias: spec_version
owner: Url
domain_of:
- Core
- CyberObservableCore
- MarkingDefinition
range: SpecVersionEnum
id:
name: id
description: STIX object identifier.
from_schema: https://w3id.org/lmodel/attack
related_mappings:
- unified_cyber_ontology:externalReference
rank: 1000
alias: id
owner: Url
domain_of:
- StixEntity
- Bundle
- Core
- CyberObservableCore
- ExtensionDefinition
- LanguageContent
- MarkingDefinition
- File
range: stix_identifier
required: true
pattern: ^url--[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$
object_marking_refs:
name: object_marking_refs
description: Marking definition references applied to this object.
comments:
- 'jsonschema_minItems: "1"'
from_schema: https://w3id.org/lmodel/attack
close_mappings:
- unified_cyber_ontology:objectMarking
rank: 1000
alias: object_marking_refs
owner: Url
domain_of:
- Core
- CyberObservableCore
- MarkingDefinition
range: stix_identifier
multivalued: true
granular_markings:
name: granular_markings
description: Granular markings that apply to selected content.
comments:
- 'jsonschema_minItems: "1"'
from_schema: https://w3id.org/lmodel/attack
narrow_mappings:
- unified_cyber_ontology:objectMarking
rank: 1000
alias: granular_markings
owner: Url
domain_of:
- Core
- CyberObservableCore
- MarkingDefinition
range: GranularMarking
multivalued: true
defanged:
name: defanged
description: Defines whether or not the data contained within the object has been
defanged.
from_schema: https://w3id.org/lmodel/attack
rank: 1000
alias: defanged
owner: Url
domain_of:
- CyberObservableCore
range: boolean
extensions:
name: extensions
description: Open-ended extension payloads.
notes:
- JSON Schema uses patternProperties for extension keys; exact key validation
is delegated to validator tooling.
comments:
- 'jsonschema_rule: patternProperties validator_hint: validate-extension-keys-and-values'
from_schema: https://w3id.org/lmodel/attack
related_mappings:
- unified_cyber_ontology:hasFacet
rank: 1000
alias: extensions
owner: Url
domain_of:
- Core
- CyberObservableCore
- MarkingDefinition
- File
range: string
multivalued: true
name:
name: name
description: Human-readable name.
from_schema: https://w3id.org/lmodel/attack
exact_mappings:
- unified_cyber_ontology:name
rank: 1000
alias: name
owner: Url
domain_of:
- RelatedAsset
- StixEntity
- ExtensionDefinition
- MarkingDefinition
- AutonomousSystem
- File
range: string
description:
name: description
description: Human-readable description.
from_schema: https://w3id.org/lmodel/attack
close_mappings:
- unified_cyber_ontology:description
rank: 1000
alias: description
owner: Url
domain_of:
- RelatedAsset
- MutableElement
- StixEntity
- ExtensionDefinition
- ExternalReference
range: string