Skip to content

Slot: x_mitre_collection_layers

The technology stack layers from which telemetry for this Data Source can be collected. Indicates where in the environment defenders should look to obtain the raw data this source provides. At least one collection layer must be specified.

URI: attack:x_mitre_collection_layers Alias: x_mitre_collection_layers

Applicable Classes

Name Description Modifies Slot
DataSource DEPRECATED as of ATT&CK Specification 3 yes

Properties

Type and Range

Property Value
Range AttackCollectionLayerEnum
Domain Of DataSource

Cardinality and Requirements

Property Value
Required Yes
Multivalued Yes

In Subsets

Comments

  • jsonschema_minItems: "1"

Identifier and Mapping Information

Schema Source

  • from schema: https://w3id.org/lmodel/attack

Mappings

Mapping Type Mapped Value
self attack:x_mitre_collection_layers
native attack:x_mitre_collection_layers

LinkML Source

name: x_mitre_collection_layers
description: The technology stack layers from which telemetry for this Data Source
  can be collected. Indicates where in the environment defenders should look to obtain
  the raw data this source provides. At least one collection layer must be specified.
comments:
- 'jsonschema_minItems: "1"'
in_subset:
- attack_sdos
from_schema: https://w3id.org/lmodel/attack
rank: 1000
alias: x_mitre_collection_layers
domain_of:
- DataSource
range: AttackCollectionLayerEnum
required: true
multivalued: true