Enum: AttackRelationshipType

The seven relationship types ATT&CK uses. Each allows only some types of source and target object, which AttackRelationship’s rules state.

URI: attack:AttackRelationshipType

Permissible Values

Value	Meaning	Description
uses	None	A group, campaign or software uses a technique or software
mitigates	None	A mitigation mitigates a technique
subtechnique-of	None	A sub-technique belongs to its parent technique
detects	None	A detection strategy, or a data component, detects a technique
attributed-to	None	A campaign is attributed to a group
targets	None	An ICS technique targets an asset
revoked-by	None	An object was revoked and replaced by the target object

Slots

Name	Description
relationship_type

Identifier and Mapping Information

Schema Source

• from schema: https://w3id.org/lmodel/attack

LinkML Source

name: AttackRelationshipType
description: The seven relationship types ATT&CK uses. Each allows only some types
  of source and target object, which AttackRelationship's rules state.
from_schema: https://w3id.org/lmodel/attack
rank: 1000
permissible_values:
  uses:
    text: uses
    description: A group, campaign or software uses a technique or software.
  mitigates:
    text: mitigates
    description: A mitigation mitigates a technique.
  subtechnique-of:
    text: subtechnique-of
    description: A sub-technique belongs to its parent technique.
  detects:
    text: detects
    description: A detection strategy, or a data component, detects a technique.
  attributed-to:
    text: attributed-to
    description: A campaign is attributed to a group.
  targets:
    text: targets
    description: An ICS technique targets an asset.
  revoked-by:
    text: revoked-by
    description: An object was revoked and replaced by the target object.