lmodel/stix modules
datasets/stix-modulesNobody has checked this yet
still a draft
Written 2026-10-31 by ktl-librarian (automation).
The full record
- Checks
- none recorded
- Sources
- Derived from
- Pointed to by
- attack LinkML schema (depends on)
- Graph
- Open this concept in the knowledge graph
- IRI
https://w3id.org/lmodel/attack/knowledge/datasets/stix-modules- Licence
- Apache-2.0
- Files
- MarkdownJSON-LDSource on GitHubHistory on GitHub
lmodel/stix modules
Section titled “lmodel/stix modules”src/attack/schema/stix/ holds six files: the umbrella stix.yaml, which holds the bundle, and the modules stix_vocabularies, stix_core, stix_sco, stix_sdo and stix_sro. The ATT&CK schema extends classes of the core, domain-object and relationship-object modules and the bundle, and uses the vocabularies. The domain-object module imports the cyber-observable module, so that one is copied too.1
tests/test_stix_import.py pins the commit of lmodel/stix v0.1.0, 5333644, and each module’s git object hash, and fails when another file sits beside them. NOTICE says the modules are under the Apache License 2.0. They reuse some descriptions of OASIS’s STIX 2.1 JSON schemas, whose BSD-3-Clause licence NOTICE reproduces.2 The six files equal stix v0.1.0’s modules. A later stix release replaces them whole, and the pins move with them.