Skip to content

Slot: first_seen

First time observed.

URI: attack:first_seen Alias: first_seen

Applicable Classes

Name Description Modifies Slot
Campaign A Campaign is a grouping of adversary behavior that describes a set of malici... no
Infrastructure Infrastructure objects describe systems, software services, and associated ph... no
IntrusionSet An Intrusion Set is a grouped set of adversary behavior and resources with co... no
ThreatActor Threat Actors are actual individuals, groups, or organizations believed to be... no
Sighting A Sighting denotes the belief that something in CTI (e no
Malware Malware is a type of TTP that is also known as malicious code and malicious s... no

Properties

Type and Range

Property Value
Range Datetime
Domain Of Campaign, Infrastructure, IntrusionSet, Malware, ThreatActor, Sighting

Cardinality and Requirements

Property Value

Identifier and Mapping Information

Schema Source

  • from schema: https://w3id.org/lmodel/attack

Mappings

Mapping Type Mapped Value
self attack:first_seen
native attack:first_seen

LinkML Source

name: first_seen
description: First time observed.
from_schema: https://w3id.org/lmodel/attack
rank: 1000
alias: first_seen
domain_of:
- Campaign
- Infrastructure
- IntrusionSet
- Malware
- ThreatActor
- Sighting
range: datetime