Skip to content
attack

Class: StixArchiveExtension

The Archive File extension specifies a default extension for capturing properties specific to archive files.

URI: attack:StixArchiveExtension

 classDiagram
    class StixArchiveExtension
    click StixArchiveExtension href "../StixArchiveExtension/"
      StixArchiveExtension : comment
        
      StixArchiveExtension : contains_refs
        
          
    
        
        
        StixArchiveExtension --> "1..*" StixCyberObservableObject : contains_refs
        click StixCyberObservableObject href "../StixCyberObservableObject/"

Slots

Section titled “Slots”
Name Cardinality and Range Description Inheritance
contains_refs 1..*
StixCyberObservableObject or 
StixFile or 
StixDirectory		 References to other cyber-observable objects that this one contains direct
comment 0..1
String		 Specifies a comment included as part of the archive file direct

Identifier and Mapping Information

Section titled “Identifier and Mapping Information”

Annotations

Section titled “Annotations”
property value
stix_extension_name archive-ext

Schema Source

Section titled “Schema Source”

Mappings

Section titled “Mappings”
Mapping Type Mapped Value
self attack:StixArchiveExtension
native attack:StixArchiveExtension
close uco-observable:ArchiveFileFacet

LinkML Source

Section titled “LinkML Source”

Direct

Section titled “Direct”
name: StixArchiveExtension
annotations:
  stix_extension_name:
    tag: stix_extension_name
    value: archive-ext
description: The Archive File extension specifies a default extension for capturing
  properties specific to archive files.
from_schema: https://w3id.org/lmodel/attack
close_mappings:
- uco-observable:ArchiveFileFacet
slots:
- contains_refs
- comment
slot_usage:
  contains_refs:
    name: contains_refs
    range: StixCyberObservableObject
    required: true
    pattern: ^(file|directory)--[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$
    any_of:
    - range: StixFile
    - range: StixDirectory

Induced

Section titled “Induced”
name: StixArchiveExtension
annotations:
  stix_extension_name:
    tag: stix_extension_name
    value: archive-ext
description: The Archive File extension specifies a default extension for capturing
  properties specific to archive files.
from_schema: https://w3id.org/lmodel/attack
close_mappings:
- uco-observable:ArchiveFileFacet
slot_usage:
  contains_refs:
    name: contains_refs
    range: StixCyberObservableObject
    required: true
    pattern: ^(file|directory)--[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$
    any_of:
    - range: StixFile
    - range: StixDirectory
attributes:
  contains_refs:
    name: contains_refs
    description: References to other cyber-observable objects that this one contains.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:contains_refs
    owner: StixArchiveExtension
    domain_of:
    - StixDirectory
    - StixFile
    - StixArchiveExtension
    range: StixCyberObservableObject
    required: true
    multivalued: true
    pattern: ^(file|directory)--[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$
    minimum_cardinality: 1
    any_of:
    - range: StixFile
    - range: StixDirectory
  comment:
    name: comment
    description: Specifies a comment included as part of the archive file.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:comment
    owner: StixArchiveExtension
    domain_of:
    - StixArchiveExtension
    range: string