Enum: StixIndicatorType
High-level categories of indicator. An open vocabulary: a slot that names it also takes any other string.
Permissible Values
Section titled “Permissible Values”| Value | Meaning | Description |
|---|---|---|
| anomalous-activity | None | |
| anonymization | None | |
| benign | None | |
| compromised | None | |
| malicious-activity | None | |
| attribution | None | |
| unknown | None |
Identifier and Mapping Information
Section titled “Identifier and Mapping Information”Annotations
Section titled “Annotations”| property | value |
|---|---|
| stix_vocabulary | indicator-type-ov |
| stix_section | 10.10 |
Schema Source
Section titled “Schema Source”- from schema: https://w3id.org/lmodel/attack
LinkML Source
Section titled “LinkML Source”name: StixIndicatorTypeannotations: stix_vocabulary: tag: stix_vocabulary value: indicator-type-ov stix_section: tag: stix_section value: '10.10'description: 'High-level categories of indicator. An open vocabulary: a slot that names it also takes any other string.'from_schema: https://w3id.org/lmodel/attackrank: 1000permissible_values: anomalous-activity: text: anomalous-activity anonymization: text: anonymization benign: text: benign compromised: text: compromised malicious-activity: text: malicious-activity attribution: text: attribution unknown: text: unknown