Skip to content

Group

Glossary termreferenceglossary/group

Nobody has checked this yet

still a draft

Written 2026-10-31 by ktl-librarian (automation).

A set of related intrusion activity tracked under a name.

The full record
Checks
none recorded
Sources
Related to
Defined by
Graph
Open this concept in the knowledge graph
IRI
https://w3id.org/lmodel/attack/knowledge/glossary/group
Licence
CC BY 4.0
Files
MarkdownJSON-LDSource on GitHubHistory on GitHub

A group is a STIX intrusion-set with an ATT&CK ID of G and four digits. Its first alias is its name. A group uses techniques and software, and a campaign is attributed to it.1

  1. src/attack/schema/attack.yaml, the class AttackGroup ↩