Group
glossary/groupNobody has checked this yet
still a draft
Written 2026-10-31 by ktl-librarian (automation).
A set of related intrusion activity tracked under a name.
The full record
- Checks
- none recorded
- Sources
- Related to
- Defined by
- Graph
- Open this concept in the knowledge graph
- IRI
https://w3id.org/lmodel/attack/knowledge/glossary/group- Licence
- CC BY 4.0
- Files
- MarkdownJSON-LDSource on GitHubHistory on GitHub
A group is a STIX intrusion-set with an ATT&CK ID of G and four digits. Its first alias is its name. A group uses techniques and software, and a campaign is attributed to it.1
Footnotes
Section titled “Footnotes”-
src/attack/schema/attack.yaml, the class AttackGroup ↩