Skip to content
attack

Class: StixLocation

A geographic location, given as a region, a civic address, a latitude and longitude, or any mix of them.

URI: attack:StixLocation

 classDiagram
    class StixLocation
    click StixLocation href "../StixLocation/"
      StixDomainObject <|-- StixLocation
        click StixDomainObject href "../StixDomainObject/"
      
      StixLocation : administrative_area
        
      StixLocation : city
        
      StixLocation : confidence
        
      StixLocation : country
        
      StixLocation : created
        
      StixLocation : created_by_ref
        
          
    
        
        
        StixLocation --> "0..1" StixIdentity : created_by_ref
        click StixIdentity href "../StixIdentity/"
    

        
      StixLocation : description
        
      StixLocation : extensions
        
          
    
        
        
        StixLocation --> "0..1" StixExtensions : extensions
        click StixExtensions href "../StixExtensions/"
    

        
      StixLocation : external_references
        
          
    
        
        
        StixLocation --> "1..*" StixExternalReference : external_references
        click StixExternalReference href "../StixExternalReference/"
    

        
      StixLocation : granular_markings
        
          
    
        
        
        StixLocation --> "1..*" StixGranularMarking : granular_markings
        click StixGranularMarking href "../StixGranularMarking/"
    

        
      StixLocation : id
        
      StixLocation : labels
        
      StixLocation : lang
        
      StixLocation : latitude
        
      StixLocation : longitude
        
      StixLocation : modified
        
      StixLocation : name
        
      StixLocation : object_marking_refs
        
          
    
        
        
        StixLocation --> "1..*" StixMarkingDefinition : object_marking_refs
        click StixMarkingDefinition href "../StixMarkingDefinition/"
    

        
      StixLocation : postal_code
        
      StixLocation : precision
        
      StixLocation : region
        
      StixLocation : revoked
        
      StixLocation : spec_version
        
          
    
        
        
        StixLocation --> "1" StixSpecVersion : spec_version
        click StixSpecVersion href "../StixSpecVersion/"
    

        
      StixLocation : street_address
        
      StixLocation : type

Inheritance

Section titled “Inheritance”

Slots

Section titled “Slots”
Name Cardinality and Range Description Inheritance
description 0..1
String		 A description of the object, which may be long direct
name 0..1
String		 A name that identifies the object direct
latitude 0..1
Float		 The latitude of the Location in decimal degrees direct
longitude 0..1
Float		 The longitude of the Location in decimal degrees direct
precision 0..1
Float		 Defines the precision of the coordinates specified by the latitude and longit… direct
region 0..1
String or 
StixRegion		 The region that this Location describes direct
country 0..1
String		 The country that this Location describes direct
administrative_area 0..1
String		 The state, province, or other sub-national administrative area that this Loca… direct
city 0..1
String		 The city that this Location describes direct
street_address 0..1
String		 The street address that this Location describes direct
postal_code 0..1
String		 The postal code for this Location direct
created_by_ref 0..1
StixIdentity		 A reference to the identity of the object’s creator StixCommonObject
created 1
StixTimestampMillis		 The time at which the object, or its first version, was created StixCommonObject
modified 1
StixTimestampMillis		 The time at which this version of the object was modified StixCommonObject
revoked 0..1
Boolean		 The revoked property indicates whether the object has been revoked StixCommonObject
labels 1..*
String		 The labels property specifies a set of terms used to describe this object StixCommonObject
confidence 0..1
Integer		 Identifies the confidence that the creator has in the correctness of their da… StixCommonObject
lang 0..1
String		 The language of the text content, as an RFC 5646 language code StixCommonObject
external_references 1..*
StixExternalReference		 References to non-STIX information about the object StixCommonObject
id 1
StixIdentifier		 The identifier of the object: its STIX type, two hyphens and a UUID StixObject
type 1
String		 The STIX type name of the object, such as attack-pattern StixObject
spec_version 1
StixSpecVersion		 The version of the STIX specification used to represent the object StixObject
object_marking_refs 1..*
StixMarkingDefinition		 References to the marking definitions that apply to the object StixObject
granular_markings 1..*
StixGranularMarking		 The granular markings that apply to parts of the object StixObject
extensions 0..1
StixExtensions		 The object’s extensions, as a dictionary keyed by extension name StixObject
Expressions & Logic

Any Of

Section titled “Any Of”

The class must satisfy at least one of:

  • AnonymousClassExpression({ ‘slot_conditions’: {‘region’: SlotDefinition({‘name’: ‘region’, ‘required’: True})} })
  • AnonymousClassExpression({ ‘slot_conditions’: {‘country’: SlotDefinition({‘name’: ‘country’, ‘required’: True})} })
  • AnonymousClassExpression({ ‘slot_conditions’: {‘latitude’: SlotDefinition({‘name’: ‘latitude’, ‘required’: True}), ‘longitude’: SlotDefinition({‘name’: ‘longitude’, ‘required’: True})} })

Usages

Section titled “Usages”
used by used in type used
StixSighting where_sighted_refs any_of[range] StixLocation

Rules

Section titled “Rules”

Rule Applied Preconditions Postconditions Elseconditions
slot_conditions {'latitude': {'value_presence': 'PRESENT'}} {'longitude': {'required': True}}

Section titled “”
Rule Applied Preconditions Postconditions Elseconditions
slot_conditions {'longitude': {'value_presence': 'PRESENT'}} {'latitude': {'required': True}}

Section titled “”
Rule Applied Preconditions Postconditions Elseconditions
slot_conditions {'precision': {'value_presence': 'PRESENT'}} {'latitude': {'required': True}, 'longitude': {'required': True}}

Identifier and Mapping Information

Section titled “Identifier and Mapping Information”

Annotations

Section titled “Annotations”
property value
stix_type location

Schema Source

Section titled “Schema Source”

Mappings

Section titled “Mappings”
Mapping Type Mapped Value
self attack:StixLocation
native attack:StixLocation
close uco-location:Location

LinkML Source

Section titled “LinkML Source”

Direct

Section titled “Direct”
name: StixLocation
annotations:
  stix_type:
    tag: stix_type
    value: location
description: A geographic location, given as a region, a civic address, a latitude
  and longitude, or any mix of them.
from_schema: https://w3id.org/lmodel/attack
close_mappings:
- uco-location:Location
is_a: StixDomainObject
slots:
- description
- name
- latitude
- longitude
- precision
- region
- country
- administrative_area
- city
- street_address
- postal_code
slot_usage:
  id:
    name: id
    pattern: ^location--[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$
  type:
    name: type
    equals_string: location
rules:
- preconditions:
    slot_conditions:
      latitude:
        name: latitude
        value_presence: PRESENT
  postconditions:
    slot_conditions:
      longitude:
        name: longitude
        required: true
  description: A latitude needs a longitude.
- preconditions:
    slot_conditions:
      longitude:
        name: longitude
        value_presence: PRESENT
  postconditions:
    slot_conditions:
      latitude:
        name: latitude
        required: true
  description: A longitude needs a latitude.
- preconditions:
    slot_conditions:
      precision:
        name: precision
        value_presence: PRESENT
  postconditions:
    slot_conditions:
      latitude:
        name: latitude
        required: true
      longitude:
        name: longitude
        required: true
  description: A precision needs a latitude and a longitude.
any_of:
- slot_conditions:
    region:
      name: region
      required: true
- slot_conditions:
    country:
      name: country
      required: true
- slot_conditions:
    latitude:
      name: latitude
      required: true
    longitude:
      name: longitude
      required: true

Induced

Section titled “Induced”
name: StixLocation
annotations:
  stix_type:
    tag: stix_type
    value: location
description: A geographic location, given as a region, a civic address, a latitude
  and longitude, or any mix of them.
from_schema: https://w3id.org/lmodel/attack
close_mappings:
- uco-location:Location
is_a: StixDomainObject
slot_usage:
  id:
    name: id
    pattern: ^location--[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$
  type:
    name: type
    equals_string: location
attributes:
  description:
    name: description
    description: A description of the object, which may be long.
    from_schema: https://w3id.org/lmodel/attack
    close_mappings:
    - uco-core:description
    rank: 1000
    slot_uri: stix:description
    owner: StixLocation
    domain_of:
    - AttackTactic
    - AttackMatrix
    - AttackCollection
    - AttackAsset
    - AttackDataSource
    - AttackDataComponent
    - AttackAnalytic
    - AttackRelatedAsset
    - AttackMutableElement
    - StixIdentity
    - StixExtensionDefinition
    - StixExternalReference
    - StixAttackPattern
    - StixCampaign
    - StixCourseOfAction
    - StixGrouping
    - StixIncident
    - StixIndicator
    - StixInfrastructure
    - StixIntrusionSet
    - StixLocation
    - StixMalware
    - StixReport
    - StixThreatActor
    - StixTool
    - StixVulnerability
    - StixRelationship
    - StixSighting
    range: string
  name:
    name: name
    description: A name that identifies the object.
    from_schema: https://w3id.org/lmodel/attack
    close_mappings:
    - uco-core:name
    rank: 1000
    slot_uri: stix:name
    owner: StixLocation
    domain_of:
    - AttackTactic
    - AttackMatrix
    - AttackCollection
    - AttackAsset
    - AttackDataSource
    - AttackDataComponent
    - AttackDetectionStrategy
    - AttackAnalytic
    - AttackRelatedAsset
    - AttackLogSource
    - AttackLogSourceReference
    - StixIdentity
    - StixMarkingDefinition
    - StixExtensionDefinition
    - StixAutonomousSystem
    - StixFile
    - StixMutex
    - StixSoftware
    - StixAlternateDataStream
    - StixWindowsPeSection
    - StixWindowsRegistryValue
    - StixAttackPattern
    - StixCampaign
    - StixCourseOfAction
    - StixGrouping
    - StixIncident
    - StixIndicator
    - StixInfrastructure
    - StixIntrusionSet
    - StixLocation
    - StixMalware
    - StixReport
    - StixThreatActor
    - StixTool
    - StixVulnerability
    range: string
  latitude:
    name: latitude
    description: The latitude of the Location in decimal degrees.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:latitude
    owner: StixLocation
    domain_of:
    - StixLocation
    range: float
    minimum_value: -90
    maximum_value: 90
  longitude:
    name: longitude
    description: The longitude of the Location in decimal degrees.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:longitude
    owner: StixLocation
    domain_of:
    - StixLocation
    range: float
    minimum_value: -180
    maximum_value: 180
  precision:
    name: precision
    description: Defines the precision of the coordinates specified by the latitude
      and longitude properties, measured in meters.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:precision
    owner: StixLocation
    domain_of:
    - StixLocation
    range: float
  region:
    name: region
    description: The region that this Location describes.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:region
    owner: StixLocation
    domain_of:
    - StixLocation
    range: string
    any_of:
    - range: StixRegion
    - range: string
  country:
    name: country
    description: The country that this Location describes.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:country
    owner: StixLocation
    domain_of:
    - StixLocation
    range: string
  administrative_area:
    name: administrative_area
    description: The state, province, or other sub-national administrative area that
      this Location describes.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:administrative_area
    owner: StixLocation
    domain_of:
    - StixLocation
    range: string
  city:
    name: city
    description: The city that this Location describes.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:city
    owner: StixLocation
    domain_of:
    - StixLocation
    range: string
  street_address:
    name: street_address
    description: The street address that this Location describes.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:street_address
    owner: StixLocation
    domain_of:
    - StixLocation
    range: string
  postal_code:
    name: postal_code
    description: The postal code for this Location.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:postal_code
    owner: StixLocation
    domain_of:
    - StixLocation
    range: string
  created_by_ref:
    name: created_by_ref
    description: A reference to the identity of the object's creator.
    from_schema: https://w3id.org/lmodel/attack
    close_mappings:
    - uco-core:createdBy
    rank: 1000
    slot_uri: stix:created_by_ref
    owner: StixLocation
    domain_of:
    - StixCommonObject
    - StixMarkingDefinition
    range: StixIdentity
    pattern: ^identity--[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$
  created:
    name: created
    description: The time at which the object, or its first version, was created.
    from_schema: https://w3id.org/lmodel/attack
    close_mappings:
    - uco-core:objectCreatedTime
    rank: 1000
    slot_uri: stix:created
    owner: StixLocation
    domain_of:
    - StixCommonObject
    - StixMarkingDefinition
    range: stix_timestamp_millis
    required: true
  modified:
    name: modified
    description: The time at which this version of the object was modified.
    from_schema: https://w3id.org/lmodel/attack
    close_mappings:
    - uco-core:modifiedTime
    rank: 1000
    slot_uri: stix:modified
    owner: StixLocation
    domain_of:
    - StixCommonObject
    range: stix_timestamp_millis
    required: true
  revoked:
    name: revoked
    description: The revoked property indicates whether the object has been revoked.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:revoked
    owner: StixLocation
    domain_of:
    - StixCommonObject
    range: boolean
  labels:
    name: labels
    description: The labels property specifies a set of terms used to describe this
      object.
    from_schema: https://w3id.org/lmodel/attack
    close_mappings:
    - uco-core:tag
    rank: 1000
    slot_uri: stix:labels
    owner: StixLocation
    domain_of:
    - StixCommonObject
    range: string
    multivalued: true
    minimum_cardinality: 1
  confidence:
    name: confidence
    description: Identifies the confidence that the creator has in the correctness
      of their data.
    from_schema: https://w3id.org/lmodel/attack
    close_mappings:
    - uco-core:confidence
    rank: 1000
    slot_uri: stix:confidence
    owner: StixLocation
    domain_of:
    - StixCommonObject
    range: integer
    minimum_value: 0
    maximum_value: 100
  lang:
    name: lang
    description: The language of the text content, as an RFC 5646 language code.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:lang
    owner: StixLocation
    domain_of:
    - StixCommonObject
    - StixGranularMarking
    range: string
  external_references:
    name: external_references
    description: References to non-STIX information about the object.
    from_schema: https://w3id.org/lmodel/attack
    close_mappings:
    - uco-core:externalReference
    rank: 1000
    slot_uri: stix:external_references
    owner: StixLocation
    domain_of:
    - StixCommonObject
    - StixMarkingDefinition
    range: StixExternalReference
    multivalued: true
    inlined: true
    inlined_as_list: true
    minimum_cardinality: 1
  id:
    name: id
    description: 'The identifier of the object: its STIX type, two hyphens and a UUID.
      Each class narrows the type.'
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:id
    identifier: true
    owner: StixLocation
    domain_of:
    - StixObject
    - StixBundle
    range: stix_identifier
    required: true
    pattern: ^location--[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$
  type:
    name: type
    description: The STIX type name of the object, such as attack-pattern. Each class
      pins its own.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:type
    owner: StixLocation
    domain_of:
    - StixObject
    - StixBundle
    range: string
    required: true
    pattern: ^([a-z][a-z0-9]*)+(-[a-z0-9]+)*\-?$
    equals_string: location
  spec_version:
    name: spec_version
    description: The version of the STIX specification used to represent the object.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:spec_version
    owner: StixLocation
    domain_of:
    - StixObject
    range: StixSpecVersion
    required: true
  object_marking_refs:
    name: object_marking_refs
    description: References to the marking definitions that apply to the object.
    from_schema: https://w3id.org/lmodel/attack
    close_mappings:
    - uco-core:objectMarking
    rank: 1000
    slot_uri: stix:object_marking_refs
    owner: StixLocation
    domain_of:
    - StixObject
    range: StixMarkingDefinition
    multivalued: true
    pattern: ^marking-definition--[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$
    minimum_cardinality: 1
  granular_markings:
    name: granular_markings
    description: The granular markings that apply to parts of the object.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:granular_markings
    owner: StixLocation
    domain_of:
    - StixObject
    range: StixGranularMarking
    multivalued: true
    inlined: true
    inlined_as_list: true
    minimum_cardinality: 1
  extensions:
    name: extensions
    description: The object's extensions, as a dictionary keyed by extension name.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:extensions
    owner: StixLocation
    domain_of:
    - StixObject
    range: StixExtensions
    inlined: true
rules:
- preconditions:
    slot_conditions:
      latitude:
        name: latitude
        value_presence: PRESENT
  postconditions:
    slot_conditions:
      longitude:
        name: longitude
        required: true
  description: A latitude needs a longitude.
- preconditions:
    slot_conditions:
      longitude:
        name: longitude
        value_presence: PRESENT
  postconditions:
    slot_conditions:
      latitude:
        name: latitude
        required: true
  description: A longitude needs a latitude.
- preconditions:
    slot_conditions:
      precision:
        name: precision
        value_presence: PRESENT
  postconditions:
    slot_conditions:
      latitude:
        name: latitude
        required: true
      longitude:
        name: longitude
        required: true
  description: A precision needs a latitude and a longitude.
any_of:
- slot_conditions:
    region:
      name: region
      required: true
- slot_conditions:
    country:
      name: country
      required: true
- slot_conditions:
    latitude:
      name: latitude
      required: true
    longitude:
      name: longitude
      required: true