Skip to content

Class: WindowsRegistryValue

Structured value entry under a Windows registry key.

URI: attack:WindowsRegistryValue

 classDiagram
    class WindowsRegistryValue
    click WindowsRegistryValue href "../WindowsRegistryValue/"
      CommonSchemaComponent <|-- WindowsRegistryValue
        click CommonSchemaComponent href "../CommonSchemaComponent/"

      WindowsRegistryValue : description

      WindowsRegistryValue : id

      WindowsRegistryValue : name

      WindowsRegistryValue : registry_value_data

      WindowsRegistryValue : registry_value_data_type





        WindowsRegistryValue --> "0..1" RegistryDataTypeEnum : registry_value_data_type
        click RegistryDataTypeEnum href "../RegistryDataTypeEnum/"



      WindowsRegistryValue : registry_value_name

      WindowsRegistryValue : type

Inheritance

Slots

Name Cardinality and Range Description Inheritance
registry_value_name 0..1
String		 Registry value name direct
registry_value_data 0..1
String		 Registry value data content direct
registry_value_data_type 0..1
RegistryDataTypeEnum		 Registry value data type direct
id 0..1
StixIdentifier		 STIX object identifier StixEntity
type 0..1
StixTypeName		 STIX object type StixEntity
name 0..1
String		 Human-readable name StixEntity
description 0..1
String		 Human-readable description StixEntity

Usages

used by used in type used
WindowsRegistryKey values range WindowsRegistryValue

In Subsets

Comments

  • jsonschema_rule: anyOf validator_hint: windows-registry-value-at-least-one-field jsonschema_source: https://github.com/oasis-open/cti-stix2-json-schemas/tree/master/schemas/observables/windows-registry-key.json#/definitions/windows-registry-value-type

Notes

  • Source JSON schema uses anyOf to require at least one of name, data, or data_type.

Identifier and Mapping Information

Schema Source

  • from schema: https://w3id.org/lmodel/attack

Mappings

Mapping Type Mapped Value
self attack:WindowsRegistryValue
native attack:WindowsRegistryValue

LinkML Source

Direct

name: WindowsRegistryValue
description: Structured value entry under a Windows registry key.
notes:
- Source JSON schema uses anyOf to require at least one of name, data, or data_type.
comments:
- 'jsonschema_rule: anyOf validator_hint: windows-registry-value-at-least-one-field
  jsonschema_source: https://github.com/oasis-open/cti-stix2-json-schemas/tree/master/schemas/observables/windows-registry-key.json#/definitions/windows-registry-value-type'
in_subset:
- common
from_schema: https://w3id.org/lmodel/attack
is_a: CommonSchemaComponent
slots:
- registry_value_name
- registry_value_data
- registry_value_data_type

Induced

name: WindowsRegistryValue
description: Structured value entry under a Windows registry key.
notes:
- Source JSON schema uses anyOf to require at least one of name, data, or data_type.
comments:
- 'jsonschema_rule: anyOf validator_hint: windows-registry-value-at-least-one-field
  jsonschema_source: https://github.com/oasis-open/cti-stix2-json-schemas/tree/master/schemas/observables/windows-registry-key.json#/definitions/windows-registry-value-type'
in_subset:
- common
from_schema: https://w3id.org/lmodel/attack
is_a: CommonSchemaComponent
attributes:
  registry_value_name:
    name: registry_value_name
    description: Registry value name.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    alias: registry_value_name
    owner: WindowsRegistryValue
    domain_of:
    - WindowsRegistryValue
    range: string
  registry_value_data:
    name: registry_value_data
    description: Registry value data content.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    alias: registry_value_data
    owner: WindowsRegistryValue
    domain_of:
    - WindowsRegistryValue
    range: string
  registry_value_data_type:
    name: registry_value_data_type
    description: Registry value data type.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    alias: registry_value_data_type
    owner: WindowsRegistryValue
    domain_of:
    - WindowsRegistryValue
    range: RegistryDataTypeEnum
  id:
    name: id
    description: STIX object identifier.
    from_schema: https://w3id.org/lmodel/attack
    related_mappings:
    - unified_cyber_ontology:externalReference
    rank: 1000
    alias: id
    owner: WindowsRegistryValue
    domain_of:
    - StixEntity
    - Bundle
    - Core
    - CyberObservableCore
    - ExtensionDefinition
    - LanguageContent
    - MarkingDefinition
    - File
    range: stix_identifier
  type:
    name: type
    description: STIX object type.
    from_schema: https://w3id.org/lmodel/attack
    related_mappings:
    - unified_cyber_ontology:state
    rank: 1000
    alias: type
    owner: WindowsRegistryValue
    domain_of:
    - StixEntity
    - Bundle
    - Core
    - CyberObservableCore
    - ExtensionDefinition
    - LanguageContent
    - MarkingDefinition
    - File
    range: stix_type_name
  name:
    name: name
    description: Human-readable name.
    from_schema: https://w3id.org/lmodel/attack
    exact_mappings:
    - unified_cyber_ontology:name
    rank: 1000
    alias: name
    owner: WindowsRegistryValue
    domain_of:
    - RelatedAsset
    - StixEntity
    - ExtensionDefinition
    - MarkingDefinition
    - AutonomousSystem
    - File
    range: string
  description:
    name: description
    description: Human-readable description.
    from_schema: https://w3id.org/lmodel/attack
    close_mappings:
    - unified_cyber_ontology:description
    rank: 1000
    alias: description
    owner: WindowsRegistryValue
    domain_of:
    - RelatedAsset
    - MutableElement
    - StixEntity
    - ExtensionDefinition
    - ExternalReference
    range: string