Class: AttackKillChainPhase

A phase of an ATT&CK domain’s kill chain: the kill chain of the domain and the short name of one of its tactics.

URI: attack:AttackKillChainPhase

 classDiagram
    class AttackKillChainPhase
    click AttackKillChainPhase href "../AttackKillChainPhase/"
      StixKillChainPhase <|-- AttackKillChainPhase
        click StixKillChainPhase href "../StixKillChainPhase/"
      
      AttackKillChainPhase : kill_chain_name
        
          
    
        
        
        AttackKillChainPhase --> "1" AttackKillChainName : kill_chain_name
        click AttackKillChainName href "../AttackKillChainName/"
    

        
      AttackKillChainPhase : phase_name
        
      

Inheritance

• StixKillChainPhase
  • AttackKillChainPhase

Slots

Name	Cardinality and Range	Description	Inheritance
kill_chain_name	1 AttackKillChainName	The name of the kill chain	StixKillChainPhase
phase_name	1 String	The name of the phase in the kill chain	StixKillChainPhase

Usages

used by	used in	type	used
AttackTechnique	kill_chain_phases	range	AttackKillChainPhase

Identifier and Mapping Information

Schema Source

• from schema: https://w3id.org/lmodel/attack

Mappings

Mapping Type	Mapped Value
self	attack:AttackKillChainPhase
native	attack:AttackKillChainPhase

LinkML Source

Direct

name: AttackKillChainPhase
description: 'A phase of an ATT&CK domain''s kill chain: the kill chain of the domain
  and the short name of one of its tactics.'
from_schema: https://w3id.org/lmodel/attack
is_a: StixKillChainPhase
slot_usage:
  kill_chain_name:
    name: kill_chain_name
    range: AttackKillChainName
  phase_name:
    name: phase_name
    pattern: ^[a-z0-9]+(-[a-z0-9]+)*$

Induced

name: AttackKillChainPhase
description: 'A phase of an ATT&CK domain''s kill chain: the kill chain of the domain
  and the short name of one of its tactics.'
from_schema: https://w3id.org/lmodel/attack
is_a: StixKillChainPhase
slot_usage:
  kill_chain_name:
    name: kill_chain_name
    range: AttackKillChainName
  phase_name:
    name: phase_name
    pattern: ^[a-z0-9]+(-[a-z0-9]+)*$
attributes:
  kill_chain_name:
    name: kill_chain_name
    description: The name of the kill chain.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:kill_chain_name
    owner: AttackKillChainPhase
    domain_of:
    - StixKillChainPhase
    range: AttackKillChainName
    required: true
  phase_name:
    name: phase_name
    description: The name of the phase in the kill chain.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:phase_name
    owner: AttackKillChainPhase
    domain_of:
    - StixKillChainPhase
    range: string
    required: true
    pattern: ^[a-z0-9]+(-[a-z0-9]+)*$