Class: StixBundle

A bundle: a collection of STIX objects grouped together in one container. A bundle is a container for transport, not a STIX object, so it carries no spec_version.

URI: attack:StixBundle

 classDiagram
    class StixBundle
    click StixBundle href "../StixBundle/"
      StixBundle <|-- AttackBundle
        click AttackBundle href "../AttackBundle/"
      
      StixBundle : id
        
      StixBundle : objects
        
          
    
        
        
        StixBundle --> "1..*" StixObject : objects
        click StixObject href "../StixObject/"
    

        
      StixBundle : type
        
      

Inheritance

• StixBundle
  • AttackBundle

Class Properties

Property	Value
Tree Root	Yes

Slots

Name	Cardinality and Range	Description	Inheritance
id	1 StixIdentifier	The identifier of the object: its STIX type, two hyphens and a UUID	direct
type	1 String	The STIX type name of the object, such as attack-pattern	direct
objects	1..* StixObject	The STIX objects in the bundle	direct

Identifier and Mapping Information

Annotations

property	value
stix_type	bundle

Schema Source

• from schema: https://w3id.org/lmodel/attack

Mappings

Mapping Type	Mapped Value
self	attack:StixBundle
native	attack:StixBundle
close	uco-core:Bundle

LinkML Source

Direct

name: StixBundle
annotations:
  stix_type:
    tag: stix_type
    value: bundle
description: 'A bundle: a collection of STIX objects grouped together in one container.
  A bundle is a container for transport, not a STIX object, so it carries no spec_version.'
from_schema: https://w3id.org/lmodel/attack
close_mappings:
- uco-core:Bundle
slots:
- id
- type
- objects
slot_usage:
  id:
    name: id
    pattern: ^bundle--[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$
  type:
    name: type
    equals_string: bundle
  objects:
    name: objects
    description: The STIX objects in the bundle.
    range: StixObject
    multivalued: true
    inlined_as_list: true
    minimum_cardinality: 1
tree_root: true

Induced

name: StixBundle
annotations:
  stix_type:
    tag: stix_type
    value: bundle
description: 'A bundle: a collection of STIX objects grouped together in one container.
  A bundle is a container for transport, not a STIX object, so it carries no spec_version.'
from_schema: https://w3id.org/lmodel/attack
close_mappings:
- uco-core:Bundle
slot_usage:
  id:
    name: id
    pattern: ^bundle--[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$
  type:
    name: type
    equals_string: bundle
  objects:
    name: objects
    description: The STIX objects in the bundle.
    range: StixObject
    multivalued: true
    inlined_as_list: true
    minimum_cardinality: 1
attributes:
  id:
    name: id
    description: 'The identifier of the object: its STIX type, two hyphens and a UUID.
      Each class narrows the type.'
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:id
    identifier: true
    owner: StixBundle
    domain_of:
    - StixObject
    - StixBundle
    range: stix_identifier
    required: true
    pattern: ^bundle--[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$
  type:
    name: type
    description: The STIX type name of the object, such as attack-pattern. Each class
      pins its own.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:type
    owner: StixBundle
    domain_of:
    - StixObject
    - StixBundle
    range: string
    required: true
    pattern: ^([a-z][a-z0-9]*)+(-[a-z0-9]+)*\-?$
    equals_string: bundle
  objects:
    name: objects
    description: The STIX objects in the bundle.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:objects
    owner: StixBundle
    domain_of:
    - StixObservedData
    - StixBundle
    range: StixObject
    multivalued: true
    inlined: true
    inlined_as_list: true
    minimum_cardinality: 1
tree_root: true