Slot: x_mitre_domains
The ATT&CK technology domains to which this object belongs. At least one domain must be specified. An object may belong to multiple domains when the same technique, group, or software is relevant across domain boundaries.
URI: attack:x_mitre_domains
Alias: x_mitre_domains
Applicable Classes
| Name |
Description |
Modifies Slot |
| AttackMalware |
Malware represents malicious software programs that adversaries use to accomp... |
yes |
| AttackTool |
Tools represent legitimate software programs that adversaries may abuse or re... |
yes |
| Technique |
Techniques describe the specific methods adversaries use to achieve tactical ... |
yes |
| Asset |
Assets represent physical or logical systems, devices, and technologies withi... |
yes |
| Tactic |
Tactics represent the adversary's high-level strategic objectives during an a... |
yes |
| DataSource |
DEPRECATED as of ATT&CK Specification 3 |
yes |
| Analytic |
Analytics contain the concrete, platform-specific detection logic implementin... |
yes |
| Mitigation |
Mitigations describe defensive measures, security controls, and configuration... |
yes |
| DetectionStrategy |
Detection Strategies define high-level, platform-agnostic approaches for dete... |
yes |
| AttackCampaign |
Campaigns represent a grouping of adversary behaviors and resources with a co... |
yes |
| Group |
Groups represent clusters of adversary activity attributed to a common actor,... |
yes |
| DataComponent |
Data Components represent specific types of observable events or artifacts wi... |
yes |
| Matrix |
ATT&CK Matrices define the structural layout and organization of tactics and ... |
yes |
Properties
Type and Range
| Property |
Value |
| Range |
AttackDomainEnum |
| Domain Of |
Technique, Tactic, Group, AttackCampaign, Mitigation, AttackMalware, AttackTool, Asset, DataSource, DataComponent, Matrix, DetectionStrategy, Analytic |
Cardinality and Requirements
| Property |
Value |
| Required |
Yes |
| Multivalued |
Yes |
In Subsets
Schema Source
- from schema: https://w3id.org/lmodel/attack
Mappings
| Mapping Type |
Mapped Value |
| self |
attack:x_mitre_domains |
| native |
attack:x_mitre_domains |
LinkML Source
name: x_mitre_domains
description: The ATT&CK technology domains to which this object belongs. At least
one domain must be specified. An object may belong to multiple domains when the
same technique, group, or software is relevant across domain boundaries.
comments:
- 'jsonschema_minItems: "1"'
in_subset:
- attack_sdos
from_schema: https://w3id.org/lmodel/attack
rank: 1000
alias: x_mitre_domains
domain_of:
- Technique
- Tactic
- Group
- AttackCampaign
- Mitigation
- AttackMalware
- AttackTool
- Asset
- DataSource
- DataComponent
- Matrix
- DetectionStrategy
- Analytic
range: AttackDomainEnum
required: true
multivalued: true