Slot: x_mitre_analytic_refs
An ordered array of STIX IDs referencing x-mitre-analytic objects that implement this detection strategy. Each referenced analytic provides platform-specific detection logic for one platform. References must be unique; no duplicate analytic IDs are permitted. At least one analytic is required.
URI: attack:x_mitre_analytic_refs
Alias: x_mitre_analytic_refs
Applicable Classes
| Name |
Description |
Modifies Slot |
| DetectionStrategy |
Detection Strategies define high-level, platform-agnostic approaches for dete... |
yes |
Properties
Type and Range
Cardinality and Requirements
| Property |
Value |
| Required |
Yes |
| Multivalued |
Yes |
| ### Value Constraints |
|
| Property |
Value |
| Regex Pattern |
^x-mitre-analytic-- |
In Subsets
- jsonschema_minItems: "1" validator_hint: no-duplicate-analytic-refs
Schema Source
- from schema: https://w3id.org/lmodel/attack
Mappings
| Mapping Type |
Mapped Value |
| self |
attack:x_mitre_analytic_refs |
| native |
attack:x_mitre_analytic_refs |
LinkML Source
name: x_mitre_analytic_refs
description: An ordered array of STIX IDs referencing x-mitre-analytic objects that
implement this detection strategy. Each referenced analytic provides platform-specific
detection logic for one platform. References must be unique; no duplicate analytic
IDs are permitted. At least one analytic is required.
comments:
- 'jsonschema_minItems: "1" validator_hint: no-duplicate-analytic-refs'
in_subset:
- attack_sdos
from_schema: https://w3id.org/lmodel/attack
rank: 1000
alias: x_mitre_analytic_refs
domain_of:
- DetectionStrategy
range: stix_identifier
required: true
multivalued: true
pattern: ^x-mitre-analytic--