Skip to content

Class: StixGranularMarking

A marking of parts of an object: the properties its selectors name, marked either by a marking definition or with a language.

URI: attack:StixGranularMarking

 classDiagram
    class StixGranularMarking
    click StixGranularMarking href "../StixGranularMarking/"
      StixGranularMarking : lang
        
      StixGranularMarking : marking_ref
        
          
    
        
        
        StixGranularMarking --> "0..1" StixMarkingDefinition : marking_ref
        click StixMarkingDefinition href "../StixMarkingDefinition/"
    

        
      StixGranularMarking : selectors
        
      
Name Cardinality and Range Description Inheritance
marking_ref 0..1
StixMarkingDefinition
The marking_ref property specifies the ID of the marking-definition object th… direct
selectors 1..*
String
A list of selectors for content contained within the STIX object in which thi… direct
lang 0..1
String
The language of the text content, as an RFC 5646 language code direct
Expressions & Logic

The class must satisfy exactly one of:

  • AnonymousClassExpression({ ‘slot_conditions’: {‘marking_ref’: SlotDefinition({‘name’: ‘marking_ref’, ‘required’: True})} })
  • AnonymousClassExpression({‘slot_conditions’: {‘lang’: SlotDefinition({‘name’: ‘lang’, ‘required’: True})}})
used by used in type used
AttackTechnique granular_markings range StixGranularMarking
AttackTactic granular_markings range StixGranularMarking
AttackGroup granular_markings range StixGranularMarking
AttackCampaign granular_markings range StixGranularMarking
AttackMalware granular_markings range StixGranularMarking
AttackTool granular_markings range StixGranularMarking
AttackMitigation granular_markings range StixGranularMarking
AttackMatrix granular_markings range StixGranularMarking
AttackCollection granular_markings range StixGranularMarking
AttackAsset granular_markings range StixGranularMarking
AttackDataSource granular_markings range StixGranularMarking
AttackDataComponent granular_markings range StixGranularMarking
AttackDetectionStrategy granular_markings range StixGranularMarking
AttackAnalytic granular_markings range StixGranularMarking
AttackRelationship granular_markings range StixGranularMarking
AttackIdentity granular_markings range StixGranularMarking
AttackMarkingDefinition granular_markings range StixGranularMarking
StixObject granular_markings range StixGranularMarking
StixCommonObject granular_markings range StixGranularMarking
StixDomainObject granular_markings range StixGranularMarking
StixRelationshipObject granular_markings range StixGranularMarking
StixCyberObservableObject granular_markings range StixGranularMarking
StixIdentity granular_markings range StixGranularMarking
StixMarkingDefinition granular_markings range StixGranularMarking
StixLanguageContent granular_markings range StixGranularMarking
StixExtensionDefinition granular_markings range StixGranularMarking
StixArtifact granular_markings range StixGranularMarking
StixAutonomousSystem granular_markings range StixGranularMarking
StixDirectory granular_markings range StixGranularMarking
StixDomainName granular_markings range StixGranularMarking
StixEmailAddress granular_markings range StixGranularMarking
StixEmailMessage granular_markings range StixGranularMarking
StixFile granular_markings range StixGranularMarking
StixIpv4Address granular_markings range StixGranularMarking
StixIpv6Address granular_markings range StixGranularMarking
StixMacAddress granular_markings range StixGranularMarking
StixMutex granular_markings range StixGranularMarking
StixNetworkTraffic granular_markings range StixGranularMarking
StixProcess granular_markings range StixGranularMarking
StixSoftware granular_markings range StixGranularMarking
StixUrl granular_markings range StixGranularMarking
StixUserAccount granular_markings range StixGranularMarking
StixWindowsRegistryKey granular_markings range StixGranularMarking
StixX509Certificate granular_markings range StixGranularMarking
StixAttackPattern granular_markings range StixGranularMarking
StixCampaign granular_markings range StixGranularMarking
StixCourseOfAction granular_markings range StixGranularMarking
StixGrouping granular_markings range StixGranularMarking
StixIncident granular_markings range StixGranularMarking
StixIndicator granular_markings range StixGranularMarking
StixInfrastructure granular_markings range StixGranularMarking
StixIntrusionSet granular_markings range StixGranularMarking
StixLocation granular_markings range StixGranularMarking
StixMalware granular_markings range StixGranularMarking
StixMalwareAnalysis granular_markings range StixGranularMarking
StixNote granular_markings range StixGranularMarking
StixObservedData granular_markings range StixGranularMarking
StixOpinion granular_markings range StixGranularMarking
StixReport granular_markings range StixGranularMarking
StixThreatActor granular_markings range StixGranularMarking
StixTool granular_markings range StixGranularMarking
StixVulnerability granular_markings range StixGranularMarking
StixRelationship granular_markings range StixGranularMarking
StixSighting granular_markings range StixGranularMarking
  • STIX 2.1 requires exactly one of marking_ref and lang. OASIS’s JSON schema requires marking_ref, which rejects a language marking. The schema follows the standard.
Mapping Type Mapped Value
self attack:StixGranularMarking
native attack:StixGranularMarking
close uco-marking:GranularMarking
name: StixGranularMarking
description: 'A marking of parts of an object: the properties its selectors name,
marked either by a marking definition or with a language.'
comments:
- STIX 2.1 requires exactly one of marking_ref and lang. OASIS's JSON schema requires
marking_ref, which rejects a language marking. The schema follows the standard.
from_schema: https://w3id.org/lmodel/attack
close_mappings:
- uco-marking:GranularMarking
slots:
- marking_ref
- selectors
- lang
slot_usage:
selectors:
name: selectors
required: true
exactly_one_of:
- slot_conditions:
marking_ref:
name: marking_ref
required: true
- slot_conditions:
lang:
name: lang
required: true
name: StixGranularMarking
description: 'A marking of parts of an object: the properties its selectors name,
marked either by a marking definition or with a language.'
comments:
- STIX 2.1 requires exactly one of marking_ref and lang. OASIS's JSON schema requires
marking_ref, which rejects a language marking. The schema follows the standard.
from_schema: https://w3id.org/lmodel/attack
close_mappings:
- uco-marking:GranularMarking
slot_usage:
selectors:
name: selectors
required: true
attributes:
marking_ref:
name: marking_ref
description: The marking_ref property specifies the ID of the marking-definition
object that describes the marking.
from_schema: https://w3id.org/lmodel/attack
close_mappings:
- uco-marking:marking
rank: 1000
slot_uri: stix:marking_ref
owner: StixGranularMarking
domain_of:
- StixGranularMarking
range: StixMarkingDefinition
pattern: ^marking-definition--[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$
selectors:
name: selectors
description: A list of selectors for content contained within the STIX object
in which this property appears.
from_schema: https://w3id.org/lmodel/attack
close_mappings:
- uco-marking:contentSelectors
rank: 1000
slot_uri: stix:selectors
owner: StixGranularMarking
domain_of:
- StixGranularMarking
range: string
required: true
multivalued: true
pattern: ^([a-z0-9_-]{3,249}(\.(\[\d+\]|[a-z0-9_-]{1,250}))*|id)$
minimum_cardinality: 1
lang:
name: lang
description: The language of the text content, as an RFC 5646 language code.
from_schema: https://w3id.org/lmodel/attack
rank: 1000
slot_uri: stix:lang
owner: StixGranularMarking
domain_of:
- StixCommonObject
- StixGranularMarking
range: string
exactly_one_of:
- slot_conditions:
marking_ref:
name: marking_ref
required: true
- slot_conditions:
lang:
name: lang
required: true