Slot: x_mitre_data_sources (DEPRECATED)

DEPRECATED in ATT&CK Specification v3.3.0. Will be removed in v4.0.0. A list of data sources that can provide evidence for detecting this technique. Each entry must follow the format 'Data Source Name: Data Component Name' (e.g., 'Process: Process Creation'). Superseded by 'detects' relationships from x-mitre-data-component and x-mitre-detection-strategy objects.

URI: attack:x_mitre_data_sources Alias: x_mitre_data_sources

Applicable Classes

Name	Description	Modifies Slot
Technique	Techniques describe the specific methods adversaries use to achieve tactical ...	no

Properties

Type and Range

Property	Value
Range	String
Domain Of	Technique

Cardinality and Requirements

Property	Value
Multivalued	Yes

In Subsets

Comments

jsonschema_minItems: "1" validator_hint: validate-data-source-string-format

Notes

{"Each value must conform to the pattern '": "'."}

Identifier and Mapping Information

Schema Source

from schema: https://w3id.org/lmodel/attack

Mappings

Mapping Type	Mapped Value
self	attack:x_mitre_data_sources
native	attack:x_mitre_data_sources

LinkML Source

name: x_mitre_data_sources
description: 'DEPRECATED in ATT&CK Specification v3.3.0. Will be removed in v4.0.0.
  A list of data sources that can provide evidence for detecting this technique. Each
  entry must follow the format ''Data Source Name: Data Component Name'' (e.g., ''Process:
  Process Creation''). Superseded by ''detects'' relationships from x-mitre-data-component
  and x-mitre-detection-strategy objects.'
deprecated: Deprecated in ATT&CK Specification v3.3.0; superseded by 'detects' relationships
  from DataComponent and DetectionStrategy objects. Will be removed in v4.0.0.
notes:
- '{"Each value must conform to the pattern ''<Data Source Name>": "<Data Component
  Name>''."}'
comments:
- 'jsonschema_minItems: "1" validator_hint: validate-data-source-string-format'
in_subset:
- deprecated
- attack_sdos
from_schema: https://w3id.org/lmodel/attack
rank: 1000
alias: x_mitre_data_sources
domain_of:
- Technique
range: string
multivalued: true