Slot: x_mitre_attack_spec_version
The version of the ATT&CK Data Model specification used to construct this object, in MAJOR.MINOR.PATCH (semantic versioning) format. Helps consuming software determine whether the data format is supported. Objects lacking this property are assumed to conform to ATT&CK spec version 2.0.0. Refer to the ATT&CK CHANGELOG for all supported versions.
URI: attack:x_mitre_attack_spec_version
Alias: x_mitre_attack_spec_version
Applicable Classes
| Name |
Description |
Modifies Slot |
| AttackMalware |
Malware represents malicious software programs that adversaries use to accomp... |
no |
| AttackTool |
Tools represent legitimate software programs that adversaries may abuse or re... |
no |
| Technique |
Techniques describe the specific methods adversaries use to achieve tactical ... |
no |
| Asset |
Assets represent physical or logical systems, devices, and technologies withi... |
no |
| Tactic |
Tactics represent the adversary's high-level strategic objectives during an a... |
no |
| DataSource |
DEPRECATED as of ATT&CK Specification 3 |
no |
| AttackIdentity |
The ATT&CK Identity object represents MITRE Corporation, the organization tha... |
no |
| Mitigation |
Mitigations describe defensive measures, security controls, and configuration... |
no |
| Analytic |
Analytics contain the concrete, platform-specific detection logic implementin... |
no |
| AttackRelationship |
ATT&CK Relationship objects connect ATT&CK STIX objects using typed semantic ... |
no |
| Collection |
Collections are versioned snapshots of an ATT&CK dataset grouping all STIX ob... |
no |
| DetectionStrategy |
Detection Strategies define high-level, platform-agnostic approaches for dete... |
no |
| Group |
Groups represent clusters of adversary activity attributed to a common actor,... |
no |
| AttackCampaign |
Campaigns represent a grouping of adversary behaviors and resources with a co... |
no |
| AttackObject |
Abstract base class for all versioned ATT&CK objects (SDOs and SROs) |
yes |
| DataComponent |
Data Components represent specific types of observable events or artifacts wi... |
no |
| Matrix |
ATT&CK Matrices define the structural layout and organization of tactics and ... |
no |
| AttackSoftware |
Abstract superclass for ATT&CK Software objects, representing both Malware an... |
no |
Properties
Type and Range
Cardinality and Requirements
| Property |
Value |
| Required |
Yes |
In Subsets
- absent_on: marking-definition, identity (x_mitre_version absent), relationship (x_mitre_version absent)
Schema Source
- from schema: https://w3id.org/lmodel/attack
Mappings
| Mapping Type |
Mapped Value |
| self |
attack:x_mitre_attack_spec_version |
| native |
attack:x_mitre_attack_spec_version |
LinkML Source
name: x_mitre_attack_spec_version
description: The version of the ATT&CK Data Model specification used to construct
this object, in MAJOR.MINOR.PATCH (semantic versioning) format. Helps consuming
software determine whether the data format is supported. Objects lacking this property
are assumed to conform to ATT&CK spec version 2.0.0. Refer to the ATT&CK CHANGELOG
for all supported versions.
comments:
- 'absent_on: marking-definition, identity (x_mitre_version absent), relationship
(x_mitre_version absent)'
in_subset:
- attack_sdos
- attack_sros
from_schema: https://w3id.org/lmodel/attack
rank: 1000
alias: x_mitre_attack_spec_version
domain_of:
- AttackObject
range: semver_string
required: true