Skip to content

Slot: x_mitre_log_source_references

A list of log source references that link this analytic to specific data components and their associated log sources. Each reference identifies a data component by STIX ID and specifies the (name, channel) pair of the log source within that component to target. Each (x_mitre_data_component_ref, name, channel) tuple must be unique within the array.

URI: attack:x_mitre_log_source_references Alias: x_mitre_log_source_references

Applicable Classes

Name Description Modifies Slot
Analytic Analytics contain the concrete, platform-specific detection logic implementin... no

Properties

Type and Range

Property Value
Range LogSourceReference
Domain Of Analytic

Cardinality and Requirements

Property Value
Multivalued Yes

In Subsets

Comments

  • jsonschema_minItems: "1" validator_hint: no-duplicate-log-source-reference-tuples

Identifier and Mapping Information

Schema Source

  • from schema: https://w3id.org/lmodel/attack

Mappings

Mapping Type Mapped Value
self attack:x_mitre_log_source_references
native attack:x_mitre_log_source_references

LinkML Source

name: x_mitre_log_source_references
description: A list of log source references that link this analytic to specific data
  components and their associated log sources. Each reference identifies a data component
  by STIX ID and specifies the (name, channel) pair of the log source within that
  component to target. Each (x_mitre_data_component_ref, name, channel) tuple must
  be unique within the array.
comments:
- 'jsonschema_minItems: "1" validator_hint: no-duplicate-log-source-reference-tuples'
in_subset:
- attack_sdos
from_schema: https://w3id.org/lmodel/attack
rank: 1000
alias: x_mitre_log_source_references
domain_of:
- Analytic
range: LogSourceReference
multivalued: true
inlined: true